Trojan:Win32/Sirefef.ah kann nicht enfernt werden

kunz123 · 03.06.2012, 19:08

hallo,
seit mittag zeigt mir microsoft security essentials eine fehlermeldung an, das potenzielle bedrohungen gefunden wurden. meistens werden 3 oder 4 angezeigt mit den namen sirefef ah, sirefef ag, sirefef al, und nur sirefef. wenn ich auf bereinigen drücke klappt es, aber es kommt nach kurzer zeit eine weitere fehlermeldung diesmal hat er aber nur eine bedrohung gefunden und zwar sirefef ah, diese lässt sich auch nicht mehr bereinigen.
ich weiß nicht mehr weiter, kann mir einer helfen.

hoffentlich genügt der logfile , denn der pc startet automatisch 5-10 min nach dem er heraufgefahren wurde einen neustart, mit der fehlermeldung ein kritischer fehler wurde entdeckt, der pc muss neugestartet werden. der scan kann also leider nicht beendet werden.

mfg
log..
---- Kernel code sections - GMER 1.0.15 ----

.text ntkrnlpa.exe!ZwCallbackReturn + 368 82080DEC 4 Bytes [B4, 89, 1B, 8E]
.text ntkrnlpa.exe!ZwCallbackReturn + 3D4 82080E58 4 Bytes [BE, 89, 1B, 8E]
.text ntkrnlpa.exe!ZwCallbackReturn + 4AC 82080F30 4 Bytes [AF, 89, 1B, 8E]
.text ntkrnlpa.exe!ZwCallbackReturn + 5B0 82081034 4 Bytes [50, 89, 1B, 8E]
.text ntkrnlpa.exe!ZwCallbackReturn + 5CC 82081050 4 Bytes [55, 89, 1B, 8E]
.text ...
.text ntkrnlpa.exe!KeReleaseInStackQueuedSpinLockFromDpcLevel + CE1 8208D179 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 46E 820918AE 18 Bytes [E0, 25, 7F, FF, FF, FF, 0F, ...]
.text ntkrnlpa.exe!KiDispatchInterrupt + 486 820918C6 1 Byte [00]
.text ntkrnlpa.exe!RtlPrefetchMemoryNonTemporal 820920D8 1 Byte [90]

---- User code sections - GMER 1.0.15 ----

? C:\Windows\system32\services.exe[556] C:\Windows\system32\smss.exe image checksum mismatch; time/date stamp mismatch; unknown module: MSWSOCK.dll
UPX1 C:\Windows\system32\Dwm.exe[784] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x012C0980]
UPX1 C:\Windows\system32\Dwm.exe[784] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x015A2250]
UPX1 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[1196] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x018D0980]
UPX1 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[1196] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x01962250]
UPX1 C:\Program Files\Windows Sidebar\sidebar.exe[1224] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x00CC0980]
UPX1 C:\Program Files\Windows Sidebar\sidebar.exe[1224] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x00D52250]
? C:\Windows\Explorer.EXE[1312] c:\windows\system32\n Das System kann die angegebene Datei nicht finden.
UPX1 C:\Windows\Explorer.EXE[1312] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x020B0980]
UPX1 C:\Windows\Explorer.EXE[1312] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x02562250]
UPX1 C:\Windows\system32\taskeng.exe[1352] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x01070980]
UPX1 C:\Windows\system32\taskeng.exe[1352] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x01092250]
UPX1 C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe[1468] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe entry point in "UPX1" section [0x0047AC10]
UPX1 C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe[1468] C:\Windows\system32\ADMIN_CLASS_LIB.dll entry point in "UPX1" section [0x10041EC0]
UPX1 C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe[1468] C:\Windows\system32\PSDUtil.dll entry point in "UPX1" section [0x003B6F70]
UPX1 C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe[1468] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x00C10980]
UPX1 C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe[1468] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x013B2250]
UPX1 C:\Acer\Empowering Technology\SysMonitor.exe[1732] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x011C0980]
UPX1 C:\Acer\Empowering Technology\SysMonitor.exe[1732] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x03542250]
.text C:\Windows\System32\spoolsv.exe[1804] msonpmon.dll!InitializePrintMonitor2 71981418 4 Bytes [4A, C2, 28, 3B] {DEC EDX; RET 0x3b28}
.text C:\Windows\System32\spoolsv.exe[1804] msonpppr.dll!EnumPrintProcessorDatatypesW 718D12FC 4 Bytes [FF, 77, DC, 07] {PUSH DWORD [EDI-0x24]; POP ES}
UPX1 C:\Program Files\Microsoft Security Client\msseces.exe[1920] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x01460980]
UPX1 C:\Program Files\Microsoft Security Client\msseces.exe[1920] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x01332250]
UPX1 C:\Windows\ehome\ehtray.exe[2056] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x00360980]
UPX1 C:\Windows\ehome\ehtray.exe[2056] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x00F92250]
UPX1 C:\Windows\ehome\ehmsas.exe[2320] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x001F0980]
UPX1 C:\Windows\ehome\ehmsas.exe[2320] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x007C2250]
UPX1 C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE[2380] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x00C30980]
UPX1 C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE[2380] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x010C2250]
UPX1 C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE[2420] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x00210980]
UPX1 C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE[2420] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x003F2250]
UPX1 C:\Program Files\Opera\opera.exe[2456] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x00900980]
UPX1 C:\Program Files\Opera\opera.exe[2456] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x01102250]
UPX1 C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe[2484] C:\Windows\system32\PSDUtil.dll entry point in "UPX1" section [0x10036F70]
UPX1 C:\Windows\System32\mobsync.exe[3152] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x00100980]
UPX1 C:\Windows\System32\mobsync.exe[3152] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x00B52250]
UPX1 C:\Windows\system32\wbem\unsecapp.exe[3916] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x001E0980]
UPX1 C:\Windows\system32\wbem\unsecapp.exe[3916] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x00402250]
UPX1 C:\Windows\system32\wuauclt.exe[3960] C:\Windows\system32\ShowErrMsg.dll entry point in "UPX1" section [0x00350980]
UPX1 C:\Windows\system32\wuauclt.exe[3960] C:\Windows\system32\BatchCrypto.dll entry point in "UPX1" section [0x00392250]
UPX1 C:\Users\Dankesreiter\Desktop\z6kt3wxo.exe[4044] C:\Users\Dankesreiter\Desktop\z6kt3wxo.exe entry point in "UPX1" section [0x004B8360]

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs Ntfs.sys (NT-Dateisystemtreiber/Microsoft Corporation)
Device \FileSystem\Ntfs \Ntfs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \FileSystem\Ntfs \Ntfs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \
Device \Driver\Beep \Device\Beep Beep.SYS (BEEP Driver/Microsoft Corporation)
Device \Driver\Beep \Device\Beep ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\KSecDD \Device\KsecDD ksecdd.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
Device \Driver\KSecDD \Device\KsecDD ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\NDIS \Device\Ndis ndis.sys (NDIS 6.0 wrapper driver/Microsoft Corporation)
Device \FileSystem\srvnet \Device\SrvNet srvnet.sys (Server Network driver/Microsoft Corporation)
Device \Device\00000032
Device \Device\00000025
Device \Device\00000019
Device \Driver\RTL8192su \Device\NDMP10 ndis.sys (NDIS 6.0 wrapper driver/Microsoft Corporation)
Device \Driver\RTL8192su \Device\NDMP10 ndis.sys (NDIS 6.0 wrapper driver/Microsoft Corporation)
Device \FileSystem\NetBIOS \Device\Netbios netbios.sys (NetBIOS interface driver/Microsoft Corporation)
Device \FileSystem\NetBIOS \Device\Netbios ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Device\00000033
Device \Device\00000026
Device \Driver\netbt \Device\NetBT_Tcpip_{48A662EA-D60D-493A-8AE5-4F9A413993EF} netbt.sys (MBT Transport driver/Microsoft Corporation)
Device \Driver\netbt \Device\NetBT_Tcpip_{48A662EA-D60D-493A-8AE5-4F9A413993EF} ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Device\00000034
Device \Driver\ACPI \Device\00000040 acpi.sys (ACPI-Treiber für NT/Microsoft Corporation)
Device \Driver\volsnap \Device\HarddiskVolumeShadowCopy1 volsnap.sys (Volumeschattenkopie-Treiber/Microsoft Corporation)
Device \Driver\psdvdisk \Device\PSDVDiskTemp psdvdisk.sys (PSD Virtual Disk Driver/HiTRUST)
Device \Driver\psdvdisk \Device\PSDVDiskTemp ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Device\00000027
Device \Driver\kbdclass \Device\KeyboardClass0 kbdclass.sys (Tastaturklassentreiber/Microsoft Corporation)
Device \Driver\kbdclass \Device\KeyboardClass0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Device\Video0
Device \Driver\PnpManager \Device\00000035 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\PnpManager \Device\00000035 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\ACPI \Device\00000041 acpi.sys (ACPI-Treiber für NT/Microsoft Corporation)
Device \Driver\volsnap \Device\HarddiskVolumeShadowCopy2 volsnap.sys (Volumeschattenkopie-Treiber/Microsoft Corporation)
Device \Driver\Wdf01000 \Device\KMDF0 Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)
Device \Driver\Wdf01000 \Device\KMDF0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\WMIxWDM \Device\WMIAdminDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\WMIxWDM \Device\WMIAdminDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Device\00000028
Device \Device\KeyboardClass1
Device \Driver\NDProxy \Device\NDProxy NDProxy.SYS (NDIS Proxy/Microsoft Corporation)
Device \Driver\NDProxy \Device\NDProxy ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\volmgr \Device\VolMgrControl volmgr.sys (Volume Manager Driver/Microsoft Corporation)
Device \Driver\volmgr \Device\VolMgrControl ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\RDPCDD \Device\Video1 VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation)
Device \Driver\RDPCDD \Device\Video1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\PnpManager \Device\00000036 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\PnpManager \Device\00000036 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\tunmp \Device\Tun0 ndis.sys (NDIS 6.0 wrapper driver/Microsoft Corporation)
Device \Driver\tunmp \Device\Tun0 ndis.sys (NDIS 6.0 wrapper driver/Microsoft Corporation)
Device \Driver\volsnap \Device\HarddiskVolumeShadowCopy3 volsnap.sys (Volumeschattenkopie-Treiber/Microsoft Corporation)
Device \Driver\ACPI \Device\00000042 acpi.sys (ACPI-Treiber für NT/Microsoft Corporation)
Device \Device\00000029
Device \Driver\pfkcipoc \Device\pfkcipoc pfkcipoc.sys
Device \Driver\pfkcipoc \Device\pfkcipoc ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \FileSystem\srvnet \Device\SrvAdmin srvnet.sys (Server Network driver/Microsoft Corporation)
Device \Device\KeyboardClass2
Device \Driver\RDPENCDD \Device\Video2 VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation)
Device \Driver\RDPENCDD \Device\Video2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Device\PointerClass0
Device \Driver\PnpManager \Device\00000037 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\PnpManager \Device\00000037 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\Serial \Device\Serial0 serial.sys (Serieller Gerätetreiber/Microsoft Corporation)
Device \Driver\Serial \Device\Serial0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\volsnap \Device\HarddiskVolumeShadowCopy4 volsnap.sys (Volumeschattenkopie-Treiber/Microsoft Corporation)
Device \Device\00000050
Device \Driver\ACPI \Device\00000043 acpi.sys (ACPI-Treiber für NT/Microsoft Corporation)
Device \Device\0000000a
Device \Driver\nvlddmkm \Device\Video3 nvlddmkm.sys (NVIDIA Windows Kernel Mode Driver, Version 275.33 /NVIDIA Corporation)
Device \Device\UMDFCtrlDev-454bcb9c-ada3-11e1-8dfc-001c252e9461
Device \Driver\usbohci \Device\USBPDO-0 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation)
Device \Driver\usbohci \Device\USBPDO-0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\PnpManager \Device\00000038 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\PnpManager \Device\00000038 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\Serial \Device\Serial1 serial.sys (Serieller Gerätetreiber/Microsoft Corporation)
Device \Driver\Serial \Device\Serial1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)
Device \Driver\mouclass \Device\PointerClass1 mouclass.sys (Mausklassentreiber/Microsoft Corporation)
Device \Driver\mouclass \Device\PointerClass1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)

Psychotic · 04.06.2012, 07:14

Mein Name ist Marius und ich werde dir bei deinem Problem helfen.

Eines vorneweg:

Hinweis: Wir können hier nie dafür garantieren, dass wir sämtliche Reste von Schadsoftware gefunden haben. Eine Formatierung ist meist der schnellste und immer der sicherste Weg.

Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass dein Rechner clean ist.

Eine Bereinigung ist mitunter mit viel Arbeit für dich verbunden.

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig. Solltest du irgendwo nicht weiterkommen, stoppe an diesem Punkt und beschreibe dein Problem hier!
Nur Scans durchführen, zu denen du von einem Helfer aufgefordert wirst.
Bitte kein Crossposting (posten in mehreren Foren) - wenn du die Anweisungen mehrere Helfer ausführst, kann das schwere Probleme nach sich ziehen!.
Installiere oder Deinstalliere während der Bereinigung keine Software (ausser, du wurdest dazu aufgefordert).
Wenn etwas unklar ist: Frage, bevor du etwas "blind" machst!

...und ganz wichtig:
Poste die Logfiles direkt in deinen Thread. Nicht anhängen, außer, ich fordere dich dazu auf. (Erschwert mir nämlich das Auswerten).

Vista und Win7 User
Alle Tools mit Rechtsklick --> "als Administrator ausführen" starten.

Funktioniert der abgesicherte Modus mit Netzwerktreibern noch?

Abgesicherter Modus zur Bereinigung

Windows mit F8-Taste beim Start in den abgesicherten Modus bringen.
Starte den Rechner in den abgesicherten Modus mit Netzwerktreibern:

Wenn ja:

Schritt 1: defogger

Downloade Dir bitte defogger von jpshortstuff auf Deinem Desktop.

Starte das Tool mit Doppelklick.
Vista und Win7 User mit Rechtsklick "als Administrator starten".
Klicke nun auf den Disable Button um die Treiber gewisser Emulatoren zu deaktivieren.
Wenn der Scan beendet wurde ( Finished ), klicke auf OK.
Defogger fordert gegebenfalls zum Neustart auf. Bestätige dies mit OK.

Sollte Defogger eine Fehlermeldung ausgeben, poste bitte die defogger_disable Log von deinem Desktop.
Klicke den Re-enable Button nicht ohne Anweisung.

Schritt 2: OTL

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

Starte bitte die OTL.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Kopiere nun den Inhalt in die Textbox.

Code:

ATTFilter

activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
explorer.exe
regedit.exe
winlogon.exe
wininit.exe
userinit.exe
/md5stop
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Kopiere nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

Schritt 3: Scan mit TDSS-Killer

Lese bitte folgende Anweisungen genau. Wir wollen hier noch nichts "fixen" sondern nur einen Scan Report sehen. Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe
Klicke Change parameters, wähle Detect TDLFS file system, klicke OK.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und speichere das Logfile. TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern ( Meistens C:\ ) Als Beispiel: C:\TDSSKiller.<version_date_time>log.txt

Poste den Inhalt bitte hier in deinen Thread.

kunz123 · 04.06.2012, 12:55

hallo,
schonmal ein großes danke das du mir hilfst.
hoffe die logfiles können dir helfen.

otl und extras hab ich in desktop.rar zusammengefügt und angehängt.

tdss.txt:
12:31:40.0087 1576 TDSS rootkit removing tool 2.7.36.0 May 21 2012 16:40:16
12:31:40.0228 1576 ============================================================
12:31:40.0228 1576 Current date / time: 2012/06/04 12:31:40.0228
12:31:40.0228 1576 SystemInfo:
12:31:40.0228 1576
12:31:40.0228 1576 OS Version: 6.0.6000 ServicePack: 0.0
12:31:40.0228 1576 Product type: Workstation
12:31:40.0228 1576 ComputerName: DANKESREITER-PC
12:31:40.0228 1576 UserName: Dankesreiter
12:31:40.0228 1576 Windows directory: C:\Windows
12:31:40.0228 1576 System windows directory: C:\Windows
12:31:40.0228 1576 Processor architecture: Intel x86
12:31:40.0228 1576 Number of processors: 2
12:31:40.0228 1576 Page size: 0x1000
12:31:40.0228 1576 Boot type: Safe boot with network
12:31:40.0228 1576 ============================================================
12:31:41.0553 1576 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
12:31:41.0553 1576 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
12:31:41.0558 1576 ============================================================
12:31:41.0558 1576 \Device\Harddisk0\DR0:
12:31:41.0558 1576 MBR partitions:
12:31:41.0558 1576 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x6, StartLBA 0x1384C7A, BlocksNum 0x1C844A15
12:31:41.0558 1576 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1DBC968F, BlocksNum 0x1C7BB5B2
12:31:41.0558 1576 \Device\Harddisk1\DR1:
12:31:41.0558 1576 MBR partitions:
12:31:41.0558 1576 ============================================================
12:31:41.0573 1576 C: <-> \Device\Harddisk0\DR0\Partition0
12:31:41.0638 1576 E: <-> \Device\Harddisk0\DR0\Partition1
12:31:41.0638 1576 ============================================================
12:31:41.0638 1576 Initialize success
12:31:41.0638 1576 ============================================================
12:32:11.0734 1408 ============================================================
12:32:11.0734 1408 Scan started
12:32:11.0734 1408 Mode: Manual; TDLFS;
12:32:11.0734 1408 ============================================================
12:32:12.0469 1408 AcerMemUsageCheckService (509980831739ed65e173ec6cab056b5b) C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
12:32:12.0474 1408 AcerMemUsageCheckService - ok
12:32:12.0569 1408 ACPI (84fc6df81212d16be5c4f441682feccc) C:\Windows\system32\drivers\acpi.sys
12:32:12.0569 1408 ACPI - ok
12:32:12.0659 1408 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
12:32:12.0664 1408 AdobeARMservice - ok
12:32:12.0694 1408 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
12:32:12.0709 1408 adp94xx - ok
12:32:12.0729 1408 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
12:32:12.0744 1408 adpahci - ok
12:32:12.0764 1408 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
12:32:12.0769 1408 adpu160m - ok
12:32:12.0784 1408 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
12:32:12.0794 1408 adpu320 - ok
12:32:12.0824 1408 AeLookupSvc (9d1fda9e086ba64e3c93c9de32461bcf) C:\Windows\System32\aelupsvc.dll
12:32:12.0829 1408 AeLookupSvc - ok
12:32:12.0854 1408 AFD (5d24caf8efd924a875698ff28384db8b) C:\Windows\system32\drivers\afd.sys
12:32:12.0864 1408 AFD - ok
12:32:12.0894 1408 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys
12:32:12.0894 1408 agp440 - ok
12:32:12.0924 1408 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
12:32:12.0929 1408 aic78xx - ok
12:32:12.0944 1408 ALG (e69fb0e3112c40fdc0ef7d21a52dc951) C:\Windows\System32\alg.exe
12:32:12.0944 1408 ALG - ok
12:32:12.0954 1408 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys
12:32:12.0959 1408 aliide - ok
12:32:12.0964 1408 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
12:32:12.0964 1408 amdagp - ok
12:32:12.0974 1408 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys
12:32:12.0979 1408 amdide - ok
12:32:12.0999 1408 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
12:32:12.0999 1408 AmdK7 - ok
12:32:13.0019 1408 AmdK8 (0ca0071da4315b00fc1328ca86b425da) C:\Windows\system32\DRIVERS\amdk8.sys
12:32:13.0019 1408 AmdK8 - ok
12:32:13.0109 1408 AntiVirSchedulerService (c27d46b06d340293670450fce9dfb166) C:\Program Files\Avira\AntiVir Desktop\sched.exe
12:32:13.0124 1408 AntiVirSchedulerService - ok
12:32:13.0164 1408 AntiVirService (72d90e56563165984224493069c69ed4) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
12:32:13.0174 1408 AntiVirService - ok
12:32:13.0204 1408 Appinfo (cfa455816879f06f1c4e5bbf9e8aef7d) C:\Windows\System32\appinfo.dll
12:32:13.0204 1408 Appinfo - ok
12:32:13.0259 1408 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
12:32:13.0274 1408 Apple Mobile Device - ok
12:32:13.0304 1408 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
12:32:13.0304 1408 arc - ok
12:32:13.0329 1408 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
12:32:13.0334 1408 arcsas - ok
12:32:13.0364 1408 AsyncMac (e86cf7ce67d5de898f27ef884dc357d8) C:\Windows\system32\DRIVERS\asyncmac.sys
12:32:13.0364 1408 AsyncMac - ok
12:32:13.0389 1408 atapi (b35cfcef838382ab6490b321c87edf17) C:\Windows\system32\drivers\atapi.sys
12:32:13.0389 1408 atapi - ok
12:32:13.0439 1408 Ati External Event Utility (c74d9a831b523ef5a66f4f13b2ddea2e) C:\Windows\system32\Ati2evxx.exe
12:32:13.0464 1408 Ati External Event Utility - ok
12:32:13.0569 1408 atikmdag (184e2b47542badbe5ca606f0fc9a90cc) C:\Windows\system32\DRIVERS\atikmdag.sys
12:32:13.0614 1408 atikmdag - ok
12:32:13.0684 1408 AtiPcie (a356e45e8432432c06981ea63a1e0fe8) C:\Windows\system32\DRIVERS\AtiPcie.sys
12:32:13.0689 1408 AtiPcie - ok
12:32:13.0724 1408 AudioEndpointBuilder (e760fc1bd68f7f6f1b17eb4e8d9480b0) C:\Windows\System32\Audiosrv.dll
12:32:13.0739 1408 AudioEndpointBuilder - ok
12:32:13.0744 1408 Audiosrv (e760fc1bd68f7f6f1b17eb4e8d9480b0) C:\Windows\System32\Audiosrv.dll
12:32:13.0744 1408 Audiosrv - ok
12:32:13.0779 1408 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\Windows\system32\DRIVERS\avgntflt.sys
12:32:13.0779 1408 avgntflt - ok
12:32:13.0804 1408 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\Windows\system32\DRIVERS\avipbb.sys
12:32:13.0809 1408 avipbb - ok
12:32:13.0839 1408 avmeject (263cf9d248fd5e020a1333ed4f7eaa88) C:\Windows\system32\drivers\avmeject.sys
12:32:13.0839 1408 avmeject - ok
12:32:13.0874 1408 Beep (ac3dd1708b22761ebd7cbe14dcc3b5d7) C:\Windows\system32\drivers\Beep.sys
12:32:13.0874 1408 Beep - ok
12:32:13.0914 1408 BITCOMET_HELPER_SERVICE - ok
12:32:13.0994 1408 BITS (da551697e34d2b9943c8b1c8eaffe89a) C:\Windows\System32\qmgr.dll
12:32:14.0089 1408 BITS - ok
12:32:14.0089 1408 blbdrive - ok
12:32:14.0130 1408 bowser (913cd06fbe9105ce6077e90fd4418561) C:\Windows\system32\DRIVERS\bowser.sys
12:32:14.0130 1408 bowser - ok
12:32:14.0161 1408 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
12:32:14.0161 1408 BrFiltLo - ok
12:32:14.0177 1408 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
12:32:14.0177 1408 BrFiltUp - ok
12:32:14.0208 1408 Browser (beb6470532b7461d7bb426e3facb424f) C:\Windows\System32\browser.dll
12:32:14.0208 1408 Browser - ok
12:32:14.0223 1408 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
12:32:14.0223 1408 Brserid - ok
12:32:14.0239 1408 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
12:32:14.0239 1408 BrSerWdm - ok
12:32:14.0255 1408 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
12:32:14.0255 1408 BrUsbMdm - ok
12:32:14.0270 1408 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
12:32:14.0270 1408 BrUsbSer - ok
12:32:14.0286 1408 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
12:32:14.0286 1408 BTHMODEM - ok
12:32:14.0301 1408 cdfs (6c3a437fc873c6f6a4fc620b6888cb86) C:\Windows\system32\DRIVERS\cdfs.sys
12:32:14.0317 1408 cdfs - ok
12:32:14.0333 1408 cdrom (8d1866e61af096ae8b582454f5e4d303) C:\Windows\system32\DRIVERS\cdrom.sys
12:32:14.0333 1408 cdrom - ok
12:32:14.0364 1408 CertPropSvc (0600e04315fe543802a379d5d23c8be0) C:\Windows\System32\certprop.dll
12:32:14.0364 1408 CertPropSvc - ok
12:32:14.0379 1408 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys
12:32:14.0379 1408 circlass - ok
12:32:14.0411 1408 CLFS (1b84fd0937d3b99af9ba38ddff3daf54) C:\Windows\system32\CLFS.sys
12:32:14.0426 1408 CLFS - ok
12:32:14.0473 1408 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:32:14.0478 1408 clr_optimization_v2.0.50727_32 - ok
12:32:14.0518 1408 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:32:14.0533 1408 clr_optimization_v4.0.30319_32 - ok
12:32:14.0573 1408 CLTNetCnService - ok
12:32:14.0630 1408 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys
12:32:14.0630 1408 cmdide - ok
12:32:14.0645 1408 Compbatt (82b8c91d327cfecf76cb58716f7d4997) C:\Windows\system32\drivers\compbatt.sys
12:32:14.0645 1408 Compbatt - ok
12:32:14.0645 1408 COMSysApp - ok
12:32:14.0677 1408 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
12:32:14.0677 1408 crcdisk - ok
12:32:14.0864 1408 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
12:32:14.0864 1408 Crusoe - ok
12:32:14.0951 1408 CryptSvc (1c26fb097170a2a91066d1e3a24366e3) C:\Windows\system32\cryptsvc.dll
12:32:14.0951 1408 CryptSvc - ok
12:32:15.0056 1408 DcomLaunch (7b981222a257d076885bffb66f19b7ce) C:\Windows\system32\rpcss.dll
12:32:15.0096 1408 DcomLaunch - ok
12:32:15.0194 1408 DfsC (a7179de59ae269ab70345527894ccd7c) C:\Windows\system32\Drivers\dfsc.sys
12:32:15.0194 1408 DfsC - ok
12:32:15.0350 1408 DFSR (e0d584aa76c7d845ba9f3a788260528f) C:\Windows\system32\DFSR.exe
12:32:15.0444 1408 DFSR - ok
12:32:15.0554 1408 Dhcp (dc45739bc22d528d2b3e50d3f6761750) C:\Windows\System32\dhcpcsvc.dll
12:32:15.0564 1408 Dhcp - ok
12:32:15.0614 1408 disk (841af4c4d41d3e3b2f244e976b0f7963) C:\Windows\system32\drivers\disk.sys
12:32:15.0614 1408 disk - ok
12:32:15.0634 1408 Dnscache (eecba1dd142bf8693c476be8f32fe253) C:\Windows\System32\dnsrslvr.dll
12:32:15.0639 1408 Dnscache - ok
12:32:15.0654 1408 dot3svc (1f795d214820e496bf1124434a6db546) C:\Windows\System32\dot3svc.dll
12:32:15.0675 1408 dot3svc - ok
12:32:15.0722 1408 DPS (032c90ad677bf7b7a8013d6087c7a921) C:\Windows\system32\dps.dll
12:32:15.0722 1408 DPS - ok
12:32:15.0753 1408 drmkaud (ee472cd2c01f6f8e8aa1fa06ffef61b6) C:\Windows\system32\drivers\drmkaud.sys
12:32:15.0753 1408 drmkaud - ok
12:32:15.0784 1408 DXGKrnl (334988883de69adb27e2cf9f9715bbdb) C:\Windows\System32\drivers\dxgkrnl.sys
12:32:15.0878 1408 DXGKrnl - ok
12:32:15.0909 1408 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
12:32:15.0909 1408 E1G60 - ok
12:32:15.0925 1408 EapHost (90a0a875642e18618010645311b4e89e) C:\Windows\System32\eapsvc.dll
12:32:15.0925 1408 EapHost - ok
12:32:15.0956 1408 Ecache (0efc7531b936ee57fdb4e837664c509f) C:\Windows\system32\drivers\ecache.sys
12:32:15.0956 1408 Ecache - ok
12:32:16.0034 1408 eDataSecurity Service (f87dde13d57062da8eba2368667d8130) C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
12:32:16.0034 1408 eDataSecurity Service - ok
12:32:16.0116 1408 eeCtrl (96bcd90ed9235a21629effde5e941fb1) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
12:32:16.0131 1408 eeCtrl - ok
12:32:16.0186 1408 ehRecvr (b4580122b0a7b263b6ee9acba69c8013) C:\Windows\ehome\ehRecvr.exe
12:32:16.0221 1408 ehRecvr - ok
12:32:16.0241 1408 ehSched (ad1870c8e5d6dd340c829e6074bf3c3f) C:\Windows\ehome\ehsched.exe
12:32:16.0241 1408 ehSched - ok
12:32:16.0261 1408 ehstart (c27c4ee8926e74aa72efcab24c5242c3) C:\Windows\ehome\ehstart.dll
12:32:16.0261 1408 ehstart - ok
12:32:16.0347 1408 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
12:32:16.0362 1408 elxstor - ok
12:32:16.0409 1408 EMDMgmt (3226fda08988526e819e364e8cce4cee) C:\Windows\system32\emdmgmt.dll
12:32:16.0425 1408 EMDMgmt - ok
12:32:16.0518 1408 eRecoveryService (a2580c15d2664d18c3e140c7f98b366c) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
12:32:16.0534 1408 eRecoveryService - ok
12:32:16.0643 1408 EventSystem (7b4971c3d43525175a4ea0d143e0412e) C:\Windows\system32\es.dll
12:32:16.0643 1408 EventSystem - ok
12:32:16.0690 1408 fastfat (84a317cb0b3954d3768cdcd018dbf670) C:\Windows\system32\drivers\fastfat.sys
12:32:16.0690 1408 fastfat - ok
12:32:16.0695 1408 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
12:32:16.0695 1408 fdc - ok
12:32:16.0705 1408 fdPHost (e43bce1a77d6fd4ed5f8e0482b9e7df1) C:\Windows\system32\fdPHost.dll
12:32:16.0705 1408 fdPHost - ok
12:32:16.0710 1408 FDResPub (89ed56dce8e47af40892778a5bd31fd2) C:\Windows\system32\fdrespub.dll
12:32:16.0710 1408 FDResPub - ok
12:32:16.0735 1408 FileInfo (65773d6115c037ffd7ef8280ae85eb9d) C:\Windows\system32\drivers\fileinfo.sys
12:32:16.0735 1408 FileInfo - ok
12:32:16.0750 1408 Filetrace (c226dd0de060745f3e042f58dcf78402) C:\Windows\system32\drivers\filetrace.sys
12:32:16.0750 1408 Filetrace - ok
12:32:16.0770 1408 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
12:32:16.0786 1408 flpydisk - ok
12:32:16.0817 1408 FltMgr (a6a8da7ae4d53394ab22ac3ab6d3f5d3) C:\Windows\system32\drivers\fltmgr.sys
12:32:16.0817 1408 FltMgr - ok
12:32:16.0988 1408 FontCache3.0.0.0 (c9be08664611ddaf98e2331e9288b00b) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
12:32:17.0004 1408 FontCache3.0.0.0 - ok
12:32:17.0113 1408 FsUsbExDisk (790a4ca68f44be35967b3df61f3e4675) C:\Windows\system32\FsUsbExDisk.SYS
12:32:17.0134 1408 FsUsbExDisk - ok
12:32:17.0184 1408 Fs_Rec (66a078591208baa210c7634b11eb392c) C:\Windows\system32\drivers\Fs_Rec.sys
12:32:17.0194 1408 Fs_Rec - ok
12:32:17.0492 1408 FWLANUSB (ff12fa487265da2ac7de4be53f72ff1a) C:\Windows\system32\DRIVERS\fwlanusb.sys
12:32:17.0508 1408 FWLANUSB - ok
12:32:17.0555 1408 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
12:32:17.0555 1408 gagp30kx - ok
12:32:17.0617 1408 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
12:32:17.0617 1408 GEARAspiWDM - ok
12:32:17.0977 1408 gpsvc (bcf6589c42d8f6a20f33ef133ffe0524) C:\Windows\System32\gpsvc.dll
12:32:18.0007 1408 gpsvc - ok
12:32:18.0102 1408 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
12:32:18.0102 1408 gupdate - ok
12:32:18.0122 1408 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
12:32:18.0122 1408 gupdatem - ok
12:32:18.0162 1408 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
12:32:18.0172 1408 HdAudAddService - ok
12:32:18.0217 1408 HDAudBus (0db613a7e427b5663563677796fd5258) C:\Windows\system32\DRIVERS\HDAudBus.sys
12:32:18.0217 1408 HDAudBus - ok
12:32:18.0237 1408 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
12:32:18.0237 1408 HidBth - ok
12:32:18.0247 1408 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
12:32:18.0247 1408 HidIr - ok
12:32:18.0377 1408 hidserv (8fa640195279ace21bea91396a0054fc) C:\Windows\system32\hidserv.dll
12:32:18.0382 1408 hidserv - ok
12:32:18.0432 1408 HidUsb (3c64042b95e583b366ba4e5d2450235e) C:\Windows\system32\DRIVERS\hidusb.sys
12:32:18.0437 1408 HidUsb - ok
12:32:18.0497 1408 hkmsvc (d40aa05e29bf6ed29b139f044b461e9b) C:\Windows\system32\kmsvc.dll
12:32:18.0502 1408 hkmsvc - ok
12:32:18.0582 1408 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
12:32:18.0592 1408 HpCISSs - ok
12:32:19.0192 1408 HTTP (ea24fe637d974a8a31bc650f478e3533) C:\Windows\system32\drivers\HTTP.sys
12:32:19.0287 1408 HTTP - ok
12:32:19.0352 1408 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
12:32:19.0382 1408 i2omp - ok
12:32:19.0432 1408 i8042prt (1c9ee072baa3abb460b91d7ee9152660) C:\Windows\system32\DRIVERS\i8042prt.sys
12:32:19.0432 1408 i8042prt - ok
12:32:19.0457 1408 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
12:32:19.0462 1408 iaStorV - ok
12:32:19.0828 1408 idsvc (7b630acaed64fef0c3e1cf255cb56686) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
12:32:19.0984 1408 idsvc - ok
12:32:20.0045 1408 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
12:32:20.0055 1408 iirsp - ok
12:32:20.0105 1408 IKEEXT (35662fe4d8622f667aa5a5568f7f1b40) C:\Windows\System32\ikeext.dll
12:32:20.0120 1408 IKEEXT - ok
12:32:20.0320 1408 int15 (9d64201c9e5ac8d1f088762ba00ff3ab) C:\Acer\Empowering Technology\eRecovery\int15.sys
12:32:20.0320 1408 int15 - ok
12:32:20.0400 1408 IntcAzAudAddService - ok
12:32:20.0455 1408 intelide (97469037714070e45194ed318d636401) C:\Windows\system32\drivers\intelide.sys
12:32:20.0475 1408 intelide - ok
12:32:20.0515 1408 intelppm (ce44cc04262f28216dd4341e9e36a16f) C:\Windows\system32\DRIVERS\intelppm.sys
12:32:20.0545 1408 intelppm - ok
12:32:20.0645 1408 IPBusEnum (88cf5281ed9880d74dc9011cf8b5262d) C:\Windows\system32\ipbusenum.dll
12:32:20.0655 1408 IPBusEnum - ok
12:32:20.0780 1408 IpFilterDriver (880c6f86cc3f551b8fea2c11141268c0) C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:32:20.0780 1408 IpFilterDriver - ok
12:32:20.0785 1408 IpInIp - ok
12:32:20.0900 1408 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
12:32:20.0915 1408 IPMIDRV - ok
12:32:21.0015 1408 IPNAT (10077c35845101548037df04fd1a420b) C:\Windows\system32\DRIVERS\ipnat.sys
12:32:21.0050 1408 IPNAT - ok
12:32:21.0992 1408 iPod Service (178fe38b7740f598391eb2f51ae4ccac) C:\Program Files\iPod\bin\iPodService.exe
12:32:22.0203 1408 iPod Service - ok
12:32:22.0278 1408 IRENUM (a82f328f4792304184642d6d397bb1e3) C:\Windows\system32\drivers\irenum.sys
12:32:22.0278 1408 IRENUM - ok
12:32:22.0489 1408 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
12:32:22.0489 1408 isapnp - ok
12:32:22.0850 1408 iScsiPrt (4dca456d4d5723f8fa9c6760d240b0df) C:\Windows\system32\DRIVERS\msiscsi.sys
12:32:22.0850 1408 iScsiPrt - ok
12:32:22.0897 1408 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
12:32:22.0897 1408 iteatapi - ok
12:32:22.0928 1408 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
12:32:22.0928 1408 iteraid - ok
12:32:22.0975 1408 kbdclass (b076b2ab806b3f696dab21375389101c) C:\Windows\system32\DRIVERS\kbdclass.sys
12:32:22.0975 1408 kbdclass - ok
12:32:23.0053 1408 kbdhid (ed61dbc6603f612b7338283edbacbc4b) C:\Windows\system32\DRIVERS\kbdhid.sys
12:32:23.0068 1408 kbdhid - ok
12:32:23.0115 1408 KeyIso (c731b1fe449d4e9cea358c9d55b69be9) C:\Windows\system32\lsass.exe
12:32:23.0115 1408 KeyIso - ok
12:32:23.0652 1408 KSecDD (0a829977b078dea11641fc2af87ceade) C:\Windows\system32\Drivers\ksecdd.sys
12:32:23.0667 1408 KSecDD - ok
12:32:23.0722 1408 KtmRm (45c537fe5dde9a0146aeff76e615737d) C:\Windows\system32\msdtckrm.dll
12:32:23.0732 1408 KtmRm - ok
12:32:23.0827 1408 LanmanServer (53d1482fc1aa36ac015a85e6cf2146bd) C:\Windows\system32\srvsvc.dll
12:32:23.0852 1408 LanmanServer - ok
12:32:24.0137 1408 LanmanWorkstation (435f0f6dc87a4b5da78f1fa309884189) C:\Windows\System32\wkssvc.dll
12:32:24.0222 1408 LanmanWorkstation - ok
12:32:24.0821 1408 LightScribeService (793ff718477345cd5d232c50bed1e452) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
12:32:24.0883 1408 LightScribeService - ok
12:32:24.0965 1408 lltdio (fd015b4f95daa2b712f0e372a116fbad) C:\Windows\system32\DRIVERS\lltdio.sys
12:32:24.0970 1408 lltdio - ok
12:32:25.0465 1408 lltdsvc (7450dbcf754391dd6363fffd5ef0e789) C:\Windows\System32\lltdsvc.dll
12:32:25.0540 1408 lltdsvc - ok
12:32:25.0570 1408 lmhosts (35d40113e4a5b961b6ce5c5857702518) C:\Windows\System32\lmhsvc.dll
12:32:25.0575 1408 lmhosts - ok
12:32:25.0655 1408 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
12:32:25.0655 1408 LSI_FC - ok
12:32:25.0924 1408 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
12:32:25.0955 1408 LSI_SAS - ok
12:32:26.0444 1408 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
12:32:26.0506 1408 LSI_SCSI - ok
12:32:26.0791 1408 luafv (42885bb44b6e065b8575a8dd6c430c52) C:\Windows\system32\drivers\luafv.sys
12:32:26.0831 1408 luafv - ok
12:32:26.0861 1408 LVUSBSta - ok
12:32:27.0056 1408 Mcx2Svc (e93c1ad58e88a0846eaee10671c2a8f3) C:\Windows\system32\Mcx2Svc.dll
12:32:27.0081 1408 Mcx2Svc - ok
12:32:27.0121 1408 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
12:32:27.0126 1408 megasas - ok
12:32:27.0156 1408 MMCSS (9dfa3a459af0954aa85b4f7622ad87bb) C:\Windows\system32\mmcss.dll
12:32:27.0156 1408 MMCSS - ok
12:32:27.0186 1408 Modem (21755967298a46fb6adfec9db6012211) C:\Windows\system32\drivers\modem.sys
12:32:27.0186 1408 Modem - ok
12:32:27.0231 1408 monitor (7446e104a5fe5987ca9e4983fbac4f97) C:\Windows\system32\DRIVERS\monitor.sys
12:32:27.0231 1408 monitor - ok
12:32:27.0246 1408 mouclass (5fba13c1a1841b0885d316ed3589489d) C:\Windows\system32\DRIVERS\mouclass.sys
12:32:27.0246 1408 mouclass - ok
12:32:27.0306 1408 mouhid (b569b5c5d3bde545df3a6af512cccdba) C:\Windows\system32\DRIVERS\mouhid.sys
12:32:27.0321 1408 mouhid - ok
12:32:27.0486 1408 MountMgr (01f1e5a3e4877c931cbb31613fec16a6) C:\Windows\system32\drivers\mountmgr.sys
12:32:27.0516 1408 MountMgr - ok
12:32:27.0696 1408 MpFilter (fee0baded54222e9f1dae9541212aab1) C:\Windows\system32\DRIVERS\MpFilter.sys
12:32:27.0746 1408 MpFilter - ok
12:32:27.0806 1408 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
12:32:27.0842 1408 mpio - ok
12:32:27.0936 1408 MpNWMon (2c3489660d4a8d514c123c3f0d67df46) C:\Windows\system32\DRIVERS\MpNWMon.sys
12:32:27.0936 1408 MpNWMon - ok
12:32:27.0998 1408 mpsdrv (6e7a7f0c1193ee5648443fe2d4b789ec) C:\Windows\system32\drivers\mpsdrv.sys
12:32:28.0014 1408 mpsdrv - ok
12:32:28.0029 1408 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
12:32:28.0029 1408 Mraid35x - ok
12:32:28.0076 1408 MRxDAV (1d8828b98ee309d65e006f0829e280e5) C:\Windows\system32\drivers\mrxdav.sys
12:32:28.0076 1408 MRxDAV - ok
12:32:28.0154 1408 mrxsmb (8af705ce1bb907932157fab821170f27) C:\Windows\system32\DRIVERS\mrxsmb.sys
12:32:28.0170 1408 mrxsmb - ok
12:32:28.0617 1408 mrxsmb10 (47e13ab23371be3279eef22bbfa2c1be) C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:32:28.0746 1408 mrxsmb10 - ok
12:32:28.0826 1408 mrxsmb20 (90b3fc7bd6b3d7ee7635debba2187f66) C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:32:28.0826 1408 mrxsmb20 - ok
12:32:28.0851 1408 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys
12:32:28.0851 1408 msahci - ok
12:32:28.0866 1408 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
12:32:28.0871 1408 msdsm - ok
12:32:28.0921 1408 MSDTC (bc64a92d821efea8bab8e8caf1b668bc) C:\Windows\System32\msdtc.exe
12:32:28.0926 1408 MSDTC - ok
12:32:29.0036 1408 Msfs (729eafefd4e7417165f353a18dbe947d) C:\Windows\system32\drivers\Msfs.sys
12:32:29.0051 1408 Msfs - ok
12:32:29.0096 1408 msisadrv (5f454a16a5146cd91a176d70f0cfa3ec) C:\Windows\system32\drivers\msisadrv.sys
12:32:29.0096 1408 msisadrv - ok
12:32:29.0141 1408 MSiSCSI (8acf956d9154e893e789881430c12632) C:\Windows\system32\iscsiexe.dll
12:32:29.0146 1408 MSiSCSI - ok
12:32:29.0151 1408 msiserver - ok
12:32:29.0171 1408 MSKSSRV (892cedefa7e0ffe7be8da651b651d047) C:\Windows\system32\drivers\MSKSSRV.sys
12:32:29.0171 1408 MSKSSRV - ok
12:32:29.0291 1408 MsMpSvc (cfce43b70ca0cc4dcc8adb62b792b173) C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
12:32:29.0301 1408 MsMpSvc - ok
12:32:29.0361 1408 MSPCLOCK (ae2cb1da69b2676b4cee2a501af5871c) C:\Windows\system32\drivers\MSPCLOCK.sys
12:32:29.0371 1408 MSPCLOCK - ok
12:32:29.0401 1408 MSPQM (f910da84fa90c44a3addb7cd874463fd) C:\Windows\system32\drivers\MSPQM.sys
12:32:29.0401 1408 MSPQM - ok
12:32:29.0481 1408 MsRPC (84571c0ae07647ba38d493f5f0015df7) C:\Windows\system32\drivers\MsRPC.sys
12:32:29.0481 1408 MsRPC - ok
12:32:29.0506 1408 mssmbios (4385c80ede885e25492d408cad91bd6f) C:\Windows\system32\DRIVERS\mssmbios.sys
12:32:29.0511 1408 mssmbios - ok
12:32:29.0536 1408 MSTEE (c826dd1373f38afd9ca46ec3c436a14e) C:\Windows\system32\drivers\MSTEE.sys
12:32:29.0536 1408 MSTEE - ok
12:32:29.0551 1408 Mup (fa7aa70050cf5e2d15de00941e5665e5) C:\Windows\system32\Drivers\mup.sys
12:32:29.0556 1408 Mup - ok
12:32:29.0586 1408 napagent (1cdbb5d002fe2bc5300aa20550d8a52e) C:\Windows\system32\qagentRT.dll
12:32:29.0601 1408 napagent - ok
12:32:29.0673 1408 NativeWifiP (6da4a0fc7c0e83df0cb3cfd0a514c3bc) C:\Windows\system32\DRIVERS\nwifi.sys
12:32:29.0689 1408 NativeWifiP - ok
12:32:29.0798 1408 NDIS (227c11e1e7cf6ef8afb2a238d209760c) C:\Windows\system32\drivers\ndis.sys
12:32:29.0845 1408 NDIS - ok
12:32:29.0907 1408 NdisTapi (81659cdcbd0f9a9e07e6878ad8c78d3f) C:\Windows\system32\DRIVERS\ndistapi.sys
12:32:29.0907 1408 NdisTapi - ok
12:32:29.0943 1408 Ndisuio (5de5ee546bf40838ebe0e01cb629df64) C:\Windows\system32\DRIVERS\ndisuio.sys
12:32:29.0943 1408 Ndisuio - ok
12:32:29.0953 1408 NdisWan (397402adcbb8946223a1950101f6cd94) C:\Windows\system32\DRIVERS\ndiswan.sys
12:32:29.0963 1408 NdisWan - ok
12:32:30.0003 1408 NDProxy (1b24fa907af283199a81b3bb37e5e526) C:\Windows\system32\drivers\NDProxy.sys
12:32:30.0003 1408 NDProxy - ok
12:32:30.0073 1408 Netaapl (1352e1648213551923a0a822e441553c) C:\Windows\system32\DRIVERS\netaapl.sys
12:32:30.0073 1408 Netaapl - ok
12:32:30.0088 1408 NetBIOS (356dbb9f98e8dc1028dd3092fceeb877) C:\Windows\system32\DRIVERS\netbios.sys
12:32:30.0088 1408 NetBIOS - ok
12:32:30.0128 1408 netbt (e3a168912e7eefc3bd3b814720d68b41) C:\Windows\system32\DRIVERS\netbt.sys
12:32:30.0133 1408 netbt - ok
12:32:30.0163 1408 Netlogon (c731b1fe449d4e9cea358c9d55b69be9) C:\Windows\system32\lsass.exe
12:32:30.0163 1408 Netlogon - ok
12:32:30.0198 1408 Netman (90a4dae28b94497f83bea0f2a3b77092) C:\Windows\System32\netman.dll
12:32:30.0213 1408 Netman - ok
12:32:30.0550 1408 netprofm (7c5c3d9ceee838856b828ab6f98a2857) C:\Windows\System32\netprofm.dll
12:32:30.0596 1408 netprofm - ok
12:32:30.0737 1408 NetTcpPortSharing (0ad5876ef4e9eb77c8f93eb5b2fff386) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
12:32:30.0784 1408 NetTcpPortSharing - ok
12:32:30.0830 1408 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
12:32:30.0830 1408 nfrd960 - ok
12:32:31.0644 1408 NlaSvc (c424117a562f2de37a42266894c79aeb) C:\Windows\System32\nlasvc.dll
12:32:31.0669 1408 NlaSvc - ok
12:32:31.0756 1408 Npfs (4f9832beb9fafd8ceb0e541f1323b26e) C:\Windows\system32\drivers\Npfs.sys
12:32:31.0787 1408 Npfs - ok
12:32:31.0834 1408 nsi (23b8201a363de0e649fc75ee9874dee2) C:\Windows\system32\nsisvc.dll
12:32:31.0865 1408 nsi - ok
12:32:32.0099 1408 nsiproxy (b488dfec274de1fc9d653870ef2587be) C:\Windows\system32\drivers\nsiproxy.sys
12:32:32.0099 1408 nsiproxy - ok
12:32:33.0054 1408 Ntfs (37430aa7a66d7a63407adc2c0d05e9f6) C:\Windows\system32\drivers\Ntfs.sys
12:32:33.0101 1408 Ntfs - ok
12:32:33.0132 1408 NTIDrvr (7f1c1f78d709c4a54cbb46ede7e0b48d) C:\Windows\system32\DRIVERS\NTIDrvr.sys
12:32:33.0132 1408 NTIDrvr - ok
12:32:33.0147 1408 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
12:32:33.0147 1408 ntrigdigi - ok
12:32:33.0179 1408 Null (ec5efb3c60f1b624648344a328bce596) C:\Windows\system32\drivers\Null.sys
12:32:33.0179 1408 Null - ok
12:32:34.0078 1408 nvlddmkm (847b1755f7757f825305a1ffe6dac3e9) C:\Windows\system32\DRIVERS\nvlddmkm.sys
12:32:34.0363 1408 nvlddmkm - ok
12:32:34.0513 1408 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
12:32:34.0513 1408 nvraid - ok
12:32:34.0523 1408 nvstor (9e0ba19a28c498a6d323d065db76dffc) C:\Windows\system32\drivers\nvstor.sys
12:32:34.0523 1408 nvstor - ok
12:32:34.0583 1408 nvsvc (7c732aff202dcd06c3d262966d71604c) C:\Windows\system32\nvvsvc.exe
12:32:34.0613 1408 nvsvc - ok
12:32:35.0203 1408 nvUpdatusService (262d2fbf211a88dcb84249df0f6ef6e7) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
12:32:35.0343 1408 nvUpdatusService - ok
12:32:35.0468 1408 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
12:32:35.0468 1408 nv_agp - ok
12:32:35.0473 1408 NwlnkFlt - ok
12:32:35.0478 1408 NwlnkFwd - ok
12:32:35.0675 1408 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
12:32:35.0706 1408 odserv - ok
12:32:35.0753 1408 ohci1394 (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\DRIVERS\ohci1394.sys
12:32:35.0753 1408 ohci1394 - ok
12:32:35.0800 1408 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
12:32:35.0815 1408 ose - ok
12:32:35.0986 1408 p2pimsvc (016d01d3b8fb976a193c7434bed8dccf) C:\Windows\system32\p2psvc.dll
12:32:36.0016 1408 p2pimsvc - ok
12:32:36.0031 1408 p2psvc (016d01d3b8fb976a193c7434bed8dccf) C:\Windows\system32\p2psvc.dll
12:32:36.0041 1408 p2psvc - ok
12:32:36.0081 1408 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\DRIVERS\parport.sys
12:32:36.0101 1408 Parport - ok
12:32:36.0131 1408 partmgr (555a5b2c8022983bc7467bc925b222ee) C:\Windows\system32\drivers\partmgr.sys
12:32:36.0131 1408 partmgr - ok
12:32:36.0141 1408 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\DRIVERS\parvdm.sys
12:32:36.0141 1408 Parvdm - ok
12:32:36.0201 1408 PcaSvc (d8c5c215c932233a4f1d7f368f4e4e65) C:\Windows\System32\pcasvc.dll
12:32:36.0206 1408 PcaSvc - ok
12:32:36.0266 1408 pci (1085d75657807e0e8b32f9e19a1647c3) C:\Windows\system32\drivers\pci.sys
12:32:36.0271 1408 pci - ok
12:32:36.0296 1408 pciide (caba65e9c41cd2900d4c92d4f825c5f8) C:\Windows\system32\drivers\pciide.sys
12:32:36.0296 1408 pciide - ok
12:32:36.0461 1408 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
12:32:36.0466 1408 pcmcia - ok
12:32:36.0606 1408 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
12:32:36.0776 1408 PEAUTH - ok
12:32:36.0807 1408 PID_0928 - ok
12:32:37.0057 1408 pla (cd05a38d166beade18030bafc0c0a939) C:\Windows\system32\pla.dll
12:32:37.0092 1408 pla - ok
12:32:37.0222 1408 PlugPlay (747bb4c31f3b6e8d1b5ed0ad61518cb5) C:\Windows\system32\umpnpmgr.dll
12:32:37.0227 1408 PlugPlay - ok
12:32:37.0797 1408 PNRPAutoReg (016d01d3b8fb976a193c7434bed8dccf) C:\Windows\system32\p2psvc.dll
12:32:37.0797 1408 PNRPAutoReg - ok
12:32:37.0813 1408 PNRPsvc (016d01d3b8fb976a193c7434bed8dccf) C:\Windows\system32\p2psvc.dll
12:32:37.0813 1408 PNRPsvc - ok
12:32:37.0969 1408 PolicyAgent (5ebdec613bd377ce9a85382be5c6b83b) C:\Windows\System32\ipsecsvc.dll
12:32:38.0125 1408 PolicyAgent - ok
12:32:38.0232 1408 PptpMiniport (c04dec5ace67c5247b150c4223970bb7) C:\Windows\system32\DRIVERS\raspptp.sys
12:32:38.0237 1408 PptpMiniport - ok
12:32:38.0330 1408 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
12:32:38.0361 1408 Processor - ok
12:32:38.0439 1408 ProfSvc (213112e152e68f0e4705e36f052a2880) C:\Windows\system32\profsvc.dll
12:32:38.0439 1408 ProfSvc - ok
12:32:38.0517 1408 ProtectedStorage (c731b1fe449d4e9cea358c9d55b69be9) C:\Windows\system32\lsass.exe
12:32:38.0517 1408 ProtectedStorage - ok
12:32:38.0548 1408 PSched (2c8bae55247c4e09352e870292e4d1ab) C:\Windows\system32\DRIVERS\pacer.sys
12:32:38.0548 1408 PSched - ok
12:32:38.0564 1408 PSDFilter (c2821f33b846a52fdc25ff554acf11f2) C:\Windows\system32\DRIVERS\psdfilter.sys
12:32:38.0564 1408 PSDFilter - ok
12:32:38.0564 1408 PSDNServ (28d3a91fe7791b970e6b15c88f98dfbd) C:\Windows\system32\drivers\PSDNServ.sys
12:32:38.0564 1408 PSDNServ - ok
12:32:38.0595 1408 psdvdisk (3a66f69459052de13ef8a0f77d728a73) C:\Windows\system32\drivers\psdvdisk.sys
12:32:38.0595 1408 psdvdisk - ok
12:32:39.0276 1408 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
12:32:39.0366 1408 ql2300 - ok
12:32:39.0396 1408 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
12:32:39.0401 1408 ql40xx - ok
12:32:39.0519 1408 QWAVE (ca61bdfd3713a7ce75f2812afc431594) C:\Windows\system32\qwave.dll
12:32:39.0519 1408 QWAVE - ok
12:32:39.0581 1408 QWAVEdrv (d2b3e2b7426dc23e185fbc73c8936c12) C:\Windows\system32\drivers\qwavedrv.sys
12:32:39.0581 1408 QWAVEdrv - ok
12:32:39.0628 1408 RasAcd (bd7b30f55b3649506dd8b3d38f571d2a) C:\Windows\system32\DRIVERS\rasacd.sys
12:32:39.0628 1408 RasAcd - ok
12:32:39.0706 1408 RasAuto (f14f4aab9f54d099fe99192bdb100ac9) C:\Windows\System32\rasauto.dll
12:32:39.0706 1408 RasAuto - ok
12:32:39.0721 1408 Rasl2tp (68b0019fee429ec49d29017af937e482) C:\Windows\system32\DRIVERS\rasl2tp.sys
12:32:39.0721 1408 Rasl2tp - ok
12:32:39.0753 1408 RasMan (11d65e29bc9d1e4114d18fe68194394c) C:\Windows\System32\rasmans.dll
12:32:39.0784 1408 RasMan - ok
12:32:39.0815 1408 RasPppoe (ccf4e9c6cbbac81437f88cb2ae0b6c96) C:\Windows\system32\DRIVERS\raspppoe.sys
12:32:39.0815 1408 RasPppoe - ok
12:32:39.0831 1408 rdbss (54129c5d9581bbec8bd1ebd3ba813f47) C:\Windows\system32\DRIVERS\rdbss.sys
12:32:39.0846 1408 rdbss - ok
12:32:39.0877 1408 RDPCDD (794585276b5d7fca9f3fc15543f9f0b9) C:\Windows\system32\DRIVERS\RDPCDD.sys
12:32:39.0877 1408 RDPCDD - ok
12:32:39.0909 1408 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys
12:32:39.0939 1408 rdpdr - ok
12:32:39.0969 1408 RDPENCDD (980b56e2e273e19d3a9d72d5c420f008) C:\Windows\system32\drivers\rdpencdd.sys
12:32:39.0969 1408 RDPENCDD - ok
12:32:40.0029 1408 RDPWD (8830e790a74a96605faba74f9665bb3c) C:\Windows\system32\drivers\RDPWD.sys
12:32:40.0034 1408 RDPWD - ok
12:32:40.0124 1408 Realtek11nSU (ea569d48b2e755af6d96f03f3335d98a) C:\Program Files\Hama\Wireless LAN RTL8192SU\RtlService.exe
12:32:40.0124 1408 Realtek11nSU - ok
12:32:40.0154 1408 RemoteAccess (6c1a43c589ee8011a1ebfd51c01b77ce) C:\Windows\System32\mprdim.dll
12:32:40.0154 1408 RemoteAccess - ok
12:32:40.0179 1408 RemoteRegistry (9a043808667c8c1893da7275af373f0e) C:\Windows\system32\regsvc.dll
12:32:40.0179 1408 RemoteRegistry - ok
12:32:40.0254 1408 RpcLocator (5123f83cbc4349d065534eeb6bbdc42b) C:\Windows\system32\locator.exe
12:32:40.0264 1408 RpcLocator - ok
12:32:40.0419 1408 RpcSs (7b981222a257d076885bffb66f19b7ce) C:\Windows\system32\rpcss.dll
12:32:40.0424 1408 RpcSs - ok
12:32:40.0549 1408 rspndr (97e939d2128fec5d5a3e6e79b290a2f4) C:\Windows\system32\DRIVERS\rspndr.sys
12:32:40.0549 1408 rspndr - ok
12:32:40.0704 1408 RTL8192su (504f0d58f7815d17b48a897e72467049) C:\Windows\system32\DRIVERS\RTL8192su.sys
12:32:40.0704 1408 RTL8192su - ok
12:32:40.0749 1408 s1018bus (1c5c2cb892553d2cf3f45a4bb323fcd6) C:\Windows\system32\DRIVERS\s1018bus.sys
12:32:40.0749 1408 s1018bus - ok
12:32:40.0804 1408 s1018mdfl (38f5ea219593f19b6b3a1b9c169e3b61) C:\Windows\system32\DRIVERS\s1018mdfl.sys
12:32:40.0804 1408 s1018mdfl - ok
12:32:41.0044 1408 s1018mdm (666af6b64fc7df92d3ca4819ea91631d) C:\Windows\system32\DRIVERS\s1018mdm.sys
12:32:41.0154 1408 s1018mdm - ok
12:32:41.0199 1408 s1018mgmt (f4ceda6e2ddff2af8bd745615a7ca9c0) C:\Windows\system32\DRIVERS\s1018mgmt.sys
12:32:41.0204 1408 s1018mgmt - ok
12:32:41.0239 1408 s1018nd5 (3622d9ff2253dcbe885b10736609a4ca) C:\Windows\system32\DRIVERS\s1018nd5.sys
12:32:41.0239 1408 s1018nd5 - ok
12:32:41.0264 1408 s1018obex (49431efda842b474531c29ffae9f5d09) C:\Windows\system32\DRIVERS\s1018obex.sys
12:32:41.0269 1408 s1018obex - ok
12:32:41.0464 1408 s1018unic (ac6b514cb4474f4c867d7cdc9cd54f05) C:\Windows\system32\DRIVERS\s1018unic.sys
12:32:41.0484 1408 s1018unic - ok
12:32:41.0634 1408 s217bus (0266151de3f36429f6ac3c4b28085061) C:\Windows\system32\DRIVERS\s217bus.sys
12:32:41.0685 1408 s217bus - ok
12:32:41.0717 1408 SamSs (c731b1fe449d4e9cea358c9d55b69be9) C:\Windows\system32\lsass.exe
12:32:41.0717 1408 SamSs - ok
12:32:41.0748 1408 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
12:32:41.0748 1408 sbp2port - ok
12:32:41.0779 1408 SCardSvr (565b4b9e5ad2f2f18a4f8aafa6c06bbb) C:\Windows\System32\SCardSvr.dll
12:32:41.0779 1408 SCardSvr - ok
12:32:41.0826 1408 Schedule (886cec884b5be29ab9828b8ab46b11f7) C:\Windows\system32\schedsvc.dll
12:32:41.0857 1408 Schedule - ok
12:32:41.0888 1408 SCPolicySvc (0600e04315fe543802a379d5d23c8be0) C:\Windows\System32\certprop.dll
12:32:41.0888 1408 SCPolicySvc - ok
12:32:41.0919 1408 SDRSVC (f7b6bf02240d0a764adf8c8966735552) C:\Windows\System32\SDRSVC.dll
12:32:41.0919 1408 SDRSVC - ok
12:32:41.0935 1408 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
12:32:41.0935 1408 secdrv - ok
12:32:41.0966 1408 seclogon (8388c4133ddbe62ad7bc3ec9f14271ed) C:\Windows\system32\seclogon.dll
12:32:41.0966 1408 seclogon - ok
12:32:41.0982 1408 SENS (34350ae2c1d33d21c7305f861bd8dad8) C:\Windows\System32\sens.dll
12:32:41.0982 1408 SENS - ok
12:32:42.0029 1408 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\DRIVERS\serenum.sys
12:32:42.0029 1408 Serenum - ok
12:32:42.0060 1408 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\DRIVERS\serial.sys
12:32:42.0060 1408 Serial - ok
12:32:42.0075 1408 sermouse (450accd77ec5cea720c1cdb9e26b953b) C:\Windows\system32\drivers\sermouse.sys
12:32:42.0075 1408 sermouse - ok
12:32:42.0122 1408 SessionEnv (78878235da4df0d116e86837a0a21df8) C:\Windows\system32\sessenv.dll
12:32:42.0122 1408 SessionEnv - ok
12:32:42.0157 1408 sffdisk (103b79418da647736ee95645f305f68a) C:\Windows\system32\drivers\sffdisk.sys
12:32:42.0157 1408 sffdisk - ok
12:32:42.0177 1408 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys
12:32:42.0177 1408 sffp_mmc - ok
12:32:42.0192 1408 sffp_sd (9cfa05fcfcb7124e69cfc812b72f9614) C:\Windows\system32\drivers\sffp_sd.sys
12:32:42.0192 1408 sffp_sd - ok
12:32:42.0197 1408 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
12:32:42.0202 1408 sfloppy - ok
12:32:42.0237 1408 ShellHWDetection (b264dfa21677728613267fe63802b332) C:\Windows\System32\shsvcs.dll
12:32:42.0277 1408 ShellHWDetection - ok
12:32:42.0302 1408 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys
12:32:42.0317 1408 sisagp - ok
12:32:42.0512 1408 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys
12:32:42.0512 1408 SiSRaid2 - ok
12:32:42.0672 1408 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys
12:32:42.0672 1408 SiSRaid4 - ok
12:32:43.0217 1408 slsvc (a1dcd30534835cb67733ad00175125a6) C:\Windows\system32\SLsvc.exe
12:32:43.0395 1408 slsvc - ok
12:32:43.0849 1408 SLUINotify (56da296e7b376a727e7bdc5ac7fbee02) C:\Windows\system32\SLUINotify.dll
12:32:43.0849 1408 SLUINotify - ok
12:32:43.0912 1408 Smb (ac0d90738adb51a6fd12ff00874a2162) C:\Windows\system32\DRIVERS\smb.sys
12:32:43.0927 1408 Smb - ok
12:32:43.0959 1408 SNMPTRAP (2a146a055b4401c16ee62d18b8e2a032) C:\Windows\System32\snmptrap.exe
12:32:43.0959 1408 SNMPTRAP - ok
12:32:44.0005 1408 spldr (426f9b029aa9162ceccf65369457d046) C:\Windows\system32\drivers\spldr.sys
12:32:44.0021 1408 spldr - ok
12:32:44.0115 1408 Spooler (da612ef2556776df2630b68bf2d48935) C:\Windows\System32\spoolsv.exe
12:32:44.0115 1408 Spooler - ok
12:32:44.0130 1408 sptd - ok
12:32:44.0177 1408 srv (038579c35f7cad4a4bbf735dbf83277d) C:\Windows\system32\DRIVERS\srv.sys
12:32:44.0224 1408 srv - ok
12:32:44.0260 1408 srv2 (6971a757af8cb5e2cbcbb76cc530db6c) C:\Windows\system32\DRIVERS\srv2.sys
12:32:44.0265 1408 srv2 - ok
12:32:44.0285 1408 srvnet (9e1a4603b874eebce0298113951abefb) C:\Windows\system32\DRIVERS\srvnet.sys
12:32:44.0290 1408 srvnet - ok
12:32:44.0445 1408 SSDPSRV (8d3e4baff8b3997138c38eb1b600519a) C:\Windows\System32\ssdpsrv.dll
12:32:44.0510 1408 SSDPSRV - ok
12:32:44.0555 1408 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys
12:32:44.0635 1408 ssmdrv - ok
12:32:44.0685 1408 StarWindServiceAE - ok
12:32:44.0735 1408 stisvc (a941e099ef46e3cc12f898cbe1c39910) C:\Windows\System32\wiaservc.dll
12:32:44.0760 1408 stisvc - ok
12:32:44.0795 1408 swenum (1379bdb336f8158c176a465e30759f57) C:\Windows\system32\DRIVERS\swenum.sys
12:32:44.0795 1408 swenum - ok
12:32:44.0835 1408 swprv (749ada8d6c18a08adfede69cbf5db2e0) C:\Windows\System32\swprv.dll
12:32:44.0850 1408 swprv - ok
12:32:44.0870 1408 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
12:32:44.0870 1408 Symc8xx - ok
12:32:44.0895 1408 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
12:32:44.0895 1408 Sym_hi - ok
12:32:44.0900 1408 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
12:32:44.0900 1408 Sym_u3 - ok
12:32:44.0967 1408 SysMain (8f2b5fede18bd3c4c926cbf88e6f1264) C:\Windows\system32\sysmain.dll
12:32:44.0982 1408 SysMain - ok
12:32:45.0014 1408 TabletInputService (2dca225eae15f42c0933e998ee0231c3) C:\Windows\System32\TabSvc.dll
12:32:45.0029 1408 TabletInputService - ok
12:32:45.0045 1408 TapiSrv (ef3dd33c740fc2f82e7e4622f1c49289) C:\Windows\System32\tapisrv.dll
12:32:45.0076 1408 TapiSrv - ok
12:32:45.0107 1408 TBS (68fa52794ae9acc61bde16fe0956b414) C:\Windows\System32\tbssvc.dll
12:32:45.0107 1408 TBS - ok
12:32:45.0185 1408 Tcpip (4a82fa8f0df67aa354580c3faaf8bde3) C:\Windows\system32\drivers\tcpip.sys
12:32:45.0216 1408 Tcpip - ok
12:32:45.0216 1408 Tcpip6 (4a82fa8f0df67aa354580c3faaf8bde3) C:\Windows\system32\DRIVERS\tcpip.sys
12:32:45.0216 1408 Tcpip6 - ok
12:32:45.0263 1408 tcpipreg (5ce0c4a7b12d0067dad527d72b68c726) C:\Windows\system32\drivers\tcpipreg.sys
12:32:45.0268 1408 tcpipreg - ok
12:32:45.0283 1408 TDPIPE (964248aef49c31fa6a93201a73ffaf50) C:\Windows\system32\drivers\tdpipe.sys
12:32:45.0283 1408 TDPIPE - ok
12:32:45.0303 1408 TDTCP (7d2c1ae1648a60fce4aa0f7982e419d3) C:\Windows\system32\drivers\tdtcp.sys
12:32:45.0313 1408 TDTCP - ok
12:32:45.0388 1408 tdx (ab4fde8af4a0270a46a001c08cbce1c2) C:\Windows\system32\DRIVERS\tdx.sys
12:32:45.0398 1408 tdx - ok
12:32:45.0438 1408 TermDD (2c549bd9dd091fbfaa0a2a48e82ec2fb) C:\Windows\system32\DRIVERS\termdd.sys
12:32:45.0438 1408 TermDD - ok
12:32:45.0632 1408 TermService (fad71c1e8e4047b154e899ae31eb8caa) C:\Windows\System32\termsrv.dll
12:32:45.0679 1408 TermService - ok
12:32:45.0726 1408 Themes (b264dfa21677728613267fe63802b332) C:\Windows\system32\shsvcs.dll
12:32:45.0726 1408 Themes - ok
12:32:45.0773 1408 THREADORDER (9dfa3a459af0954aa85b4f7622ad87bb) C:\Windows\system32\mmcss.dll
12:32:45.0773 1408 THREADORDER - ok
12:32:45.0788 1408 TrkWks (6bba0582c0025d43729a1112d3b57897) C:\Windows\System32\trkwks.dll
12:32:45.0788 1408 TrkWks - ok
12:32:45.0820 1408 TrustedInstaller (34e388a395fedba1d0511ed39bbf4074) C:\Windows\servicing\TrustedInstaller.exe
12:32:45.0820 1408 TrustedInstaller - ok
12:32:45.0851 1408 tssecsrv (29f0eca726f0d51f7e048bdb0b372f29) C:\Windows\system32\DRIVERS\tssecsrv.sys
12:32:45.0851 1408 tssecsrv - ok
12:32:45.0898 1408 tunmp (65e953bc0084d44498b51f59784d2a82) C:\Windows\system32\DRIVERS\tunmp.sys
12:32:45.0913 1408 tunmp - ok
12:32:45.0929 1408 tunnel (4a39bda5e0fd30bdf4884f9d33ae6105) C:\Windows\system32\DRIVERS\tunnel.sys
12:32:45.0944 1408 tunnel - ok
12:32:45.0979 1408 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys
12:32:45.0979 1408 uagp35 - ok
12:32:46.0014 1408 udfs (6348da98707ceda8a0dfb05820e17732) C:\Windows\system32\DRIVERS\udfs.sys
12:32:46.0024 1408 udfs - ok
12:32:46.0059 1408 UI0Detect (24a333f4f14dcfb6ff6d5a1b9e5d79dd) C:\Windows\system32\UI0Detect.exe
12:32:46.0059 1408 UI0Detect - ok
12:32:46.0074 1408 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys
12:32:46.0079 1408 uliagpkx - ok
12:32:46.0109 1408 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys
12:32:46.0119 1408 uliahci - ok
12:32:46.0124 1408 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
12:32:46.0129 1408 UlSata - ok
12:32:46.0134 1408 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
12:32:46.0139 1408 ulsata2 - ok
12:32:46.0154 1408 umbus (3fb78f1d1dd86d87bececd9dffa24dd9) C:\Windows\system32\DRIVERS\umbus.sys
12:32:46.0154 1408 umbus - ok
12:32:46.0174 1408 upnphost (8eb871a3deb6b3d5a85eb6ddfc390b59) C:\Windows\System32\upnphost.dll
12:32:46.0209 1408 upnphost - ok
12:32:46.0254 1408 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\Windows\system32\Drivers\usbaapl.sys
12:32:46.0254 1408 USBAAPL - ok
12:32:46.0274 1408 usbccgp (b0ba9caffe9b0555ec0317f30cb79cd2) C:\Windows\system32\DRIVERS\usbccgp.sys
12:32:46.0279 1408 usbccgp - ok
12:32:46.0334 1408 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
12:32:46.0334 1408 usbcir - ok
12:32:46.0379 1408 usbehci (c9fcd05b0a80ea08c2768e5a279b14de) C:\Windows\system32\DRIVERS\usbehci.sys
12:32:46.0379 1408 usbehci - ok
12:32:46.0414 1408 usbhub (5e44f7d957f7560da06bfe6b84b58a35) C:\Windows\system32\DRIVERS\usbhub.sys
12:32:46.0419 1408 usbhub - ok
12:32:46.0449 1408 usbohci (9333e482a173938788cbde8f81ec52fb) C:\Windows\system32\DRIVERS\usbohci.sys
12:32:46.0449 1408 usbohci - ok
12:32:46.0479 1408 usbprint (b51e52acf758be00ef3a58ea452fe360) C:\Windows\system32\DRIVERS\usbprint.sys
12:32:46.0479 1408 usbprint - ok
12:32:46.0494 1408 USBSTOR (7887ce56934e7f104e98c975f47353c5) C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:32:46.0494 1408 USBSTOR - ok
12:32:46.0504 1408 usbuhci (325dbbacb8a36af9988ccf40eac228cc) C:\Windows\system32\DRIVERS\usbuhci.sys
12:32:46.0504 1408 usbuhci - ok
12:32:46.0529 1408 UxSms (f79d0d7c9004474cb42746d9b2c30a2b) C:\Windows\System32\uxsms.dll
12:32:46.0529 1408 UxSms - ok
12:32:46.0564 1408 vds (c9d0bafee0d0a2681f048ca61bc0da96) C:\Windows\System32\vds.exe
12:32:46.0584 1408 vds - ok
12:32:46.0619 1408 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys
12:32:46.0624 1408 vga - ok
12:32:46.0639 1408 VgaSave (17a8f877314e4067f8c8172cc6d9101c) C:\Windows\System32\drivers\vga.sys
12:32:46.0644 1408 VgaSave - ok
12:32:46.0659 1408 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys
12:32:46.0664 1408 viaagp - ok
12:32:46.0689 1408 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys
12:32:46.0689 1408 ViaC7 - ok
12:32:46.0694 1408 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys
12:32:46.0694 1408 viaide - ok
12:32:46.0719 1408 volmgr (103e84c95832d0ed93507997cc7b54e8) C:\Windows\system32\drivers\volmgr.sys
12:32:46.0724 1408 volmgr - ok
12:32:46.0749 1408 volmgrx (294da8d3f965f6a8db934a83c7b461ff) C:\Windows\system32\drivers\volmgrx.sys
12:32:46.0759 1408 volmgrx - ok
12:32:46.0794 1408 volsnap (80dc0c9bcb579ed9815001a4d37cbfd5) C:\Windows\system32\drivers\volsnap.sys
12:32:46.0799 1408 volsnap - ok
12:32:46.0834 1408 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys
12:32:46.0839 1408 vsmraid - ok
12:32:46.0929 1408 VSS (e0e29d9ef2524abd11749c7c2fd7f607) C:\Windows\system32\vssvc.exe
12:32:46.0949 1408 VSS - ok
12:32:46.0999 1408 W32Time (62b0d0f6f5580d9d0dfa5e0b466ff2ed) C:\Windows\system32\w32time.dll
12:32:47.0034 1408 W32Time - ok
12:32:47.0064 1408 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
12:32:47.0064 1408 WacomPen - ok
12:32:47.0084 1408 Wanarp (6798c1209a53b5a0ded8d437c45145ff) C:\Windows\system32\DRIVERS\wanarp.sys
12:32:47.0089 1408 Wanarp - ok
12:32:47.0089 1408 Wanarpv6 (6798c1209a53b5a0ded8d437c45145ff) C:\Windows\system32\DRIVERS\wanarp.sys
12:32:47.0089 1408 Wanarpv6 - ok
12:32:47.0124 1408 wcncsvc (c1b19162e0509ceab4cdf664e139d956) C:\Windows\System32\wcncsvc.dll
12:32:47.0149 1408 wcncsvc - ok
12:32:47.0184 1408 WcsPlugInService (11bcb7afcdd7aadacb5746f544d3a9c7) C:\Windows\System32\WcsPlugInService.dll
12:32:47.0184 1408 WcsPlugInService - ok
12:32:47.0194 1408 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys
12:32:47.0199 1408 Wd - ok
12:32:47.0229 1408 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
12:32:47.0291 1408 Wdf01000 - ok
12:32:47.0400 1408 WdiServiceHost (2a424b89b14ef17a3d06bcb5a8f79601) C:\Windows\system32\wdi.dll
12:32:47.0400 1408 WdiServiceHost - ok
12:32:47.0400 1408 WdiSystemHost (2a424b89b14ef17a3d06bcb5a8f79601) C:\Windows\system32\wdi.dll
12:32:47.0416 1408 WdiSystemHost - ok
12:32:47.0478 1408 WebClient (01e41c264eedcb827820a1909162579f) C:\Windows\System32\webclnt.dll
12:32:47.0478 1408 WebClient - ok
12:32:47.0510 1408 Wecsvc (9cf67ff7f8d34cbf115d0c278b9f74aa) C:\Windows\system32\wecsvc.dll
12:32:47.0525 1408 Wecsvc - ok
12:32:47.0541 1408 wercplsupport (b68cab45db1dab59d92acadfad6364a8) C:\Windows\System32\wercplsupport.dll
12:32:47.0541 1408 wercplsupport - ok
12:32:47.0556 1408 WerSvc (36ba0707680ef4236fd752bee982cc25) C:\Windows\System32\WerSvc.dll
12:32:47.0572 1408 WerSvc - ok
12:32:47.0572 1408 WinHttpAutoProxySvc - ok
12:32:47.0634 1408 Winmgmt (38a7b89de4e3417c122317949667fdd8) C:\Windows\system32\wbem\WMIsvc.dll
12:32:47.0634 1408 Winmgmt - ok
12:32:47.0670 1408 WinRM (3f6823040030c3e4da1cf11cd40b7534) C:\Windows\system32\WsmSvc.dll
12:32:47.0690 1408 WinRM - ok
12:32:47.0761 1408 Wlansvc (7640acea41348bfef34b76e245501261) C:\Windows\System32\wlansvc.dll
12:32:47.0808 1408 Wlansvc - ok
12:32:47.0870 1408 WmiAcpi (701a9f884a294327e9141d73746ee279) C:\Windows\system32\drivers\wmiacpi.sys
12:32:47.0870 1408 WmiAcpi - ok
12:32:47.0902 1408 wmiApSrv (a279323bee5fffafda222910bce92132) C:\Windows\system32\wbem\WmiApSrv.exe
12:32:47.0902 1408 wmiApSrv - ok
12:32:47.0995 1408 WMPNetworkSvc (acb2e63d50157e3ea7140f29d9e76a48) C:\Program Files\Windows Media Player\wmpnetwk.exe
12:32:48.0026 1408 WMPNetworkSvc - ok
12:32:48.0073 1408 WPCSvc (3d3b3b80c12abe506f56930c46422c28) C:\Windows\System32\wpcsvc.dll
12:32:48.0073 1408 WPCSvc - ok
12:32:48.0089 1408 WPDBusEnum (c24844a1d0d9528b19d5bc266b8cd572) C:\Windows\system32\wpdbusenum.dll
12:32:48.0104 1408 WPDBusEnum - ok
12:32:48.0151 1408 WpdUsb (2d27171b16a577ef14c1273668753485) C:\Windows\system32\DRIVERS\wpdusb.sys
12:32:48.0151 1408 WpdUsb - ok
12:32:48.0261 1408 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
12:32:48.0281 1408 WPFFontCache_v0400 - ok
12:32:48.0336 1408 ws2ifsl (84620aecdcfd2a7a14e6263927d8c0ed) C:\Windows\system32\drivers\ws2ifsl.sys
12:32:48.0336 1408 ws2ifsl - ok
12:32:48.0341 1408 WSearch - ok
12:32:48.0481 1408 wuauserv (6298277b73c77fa99106b271a7525163) C:\Windows\system32\wuaueng.dll
12:32:48.0536 1408 wuauserv - ok
12:32:48.0641 1408 WUDFRd (a2aafcc8a204736296d937c7c545b53f) C:\Windows\system32\DRIVERS\WUDFRd.sys
12:32:48.0641 1408 WUDFRd - ok
12:32:48.0661 1408 wudfsvc (db5bf5aab72b1b99b5331231d09ebb26) C:\Windows\System32\WUDFSvc.dll
12:32:48.0661 1408 wudfsvc - ok
12:32:48.0691 1408 yukonwlh (7927e830ecde6db3682cc319bad26984) C:\Windows\system32\DRIVERS\yk60x86.sys
12:32:48.0701 1408 yukonwlh - ok
12:32:48.0756 1408 MBR (0x1B8) (a863475757cc50891aa8458c415e4b25) \Device\Harddisk0\DR0
12:32:51.0177 1408 \Device\Harddisk0\DR0 - ok
12:32:51.0182 1408 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk1\DR1
12:32:51.0247 1408 \Device\Harddisk1\DR1 - ok
12:32:51.0267 1408 Boot (0x1200) (a68fe2ffe60e7d4bc15c8f2717c8ed2f) \Device\Harddisk0\DR0\Partition0
12:32:51.0267 1408 \Device\Harddisk0\DR0\Partition0 - ok
12:32:51.0292 1408 Boot (0x1200) (459a54b2eab97c1c6c129116a097c501) \Device\Harddisk0\DR0\Partition1
12:32:51.0292 1408 \Device\Harddisk0\DR0\Partition1 - ok
12:32:51.0292 1408 ============================================================
12:32:51.0292 1408 Scan finished
12:32:51.0292 1408 ============================================================
12:32:51.0307 2020 Detected object count: 0
12:32:51.0307 2020 Actual detected object count: 0
12:33:50.0415 1244 Deinitialize success

Psychotic · 04.06.2012, 13:25

Gmer

Bitte

alle anderen Scanner gegen Viren, Spyware, usw. deaktivieren,
keine bestehende Verbindung zu einem Netzwerk/Internet (WLAN nicht vergessen),
nichts am Rechner arbeiten,
nach jedem Scan der Rechner neu gestarten.

Gmer scannen lassen

Lade Dir Gmer von dieser Seite herunter (auf den Button Download EXE drücken) und das Programm auf dem Desktop speichern.
Alle anderen Programme sollen geschlossen sein.
Starte gmer.exe (Programm hat einen willkürlichen Programm-Namen). Vista und Win7 User mit Rechtsklick und als Administrator starten.
Sollte sich ein Fenster mit folgender Warnung öffnen:
WARNING !!! GMER has found system modification, which might have been caused by ROOTKIT activity. Do you want to fully scan your system ?
Unbedingt auf "No" klicken.
Entferne rechts den Hacken bei:
- IAT/EAT
- Alle Festplatten ausser die Systemplatte (normalerweise ist nur C:\ angehackt)
- Show all (sollte abgehackt sein)
Starte den Scan mit "Scan". Mache nichts am Computer während der Scan läuft.
Wenn der Scan fertig ist klicke auf Save und speichere die Logfile unter Gmer.txt auf deinem Desktop. Mit "Ok" wird GMER beendet.

Antiviren-Programm und sonstige Scanner wieder einschalten, bevor Du ins Netz gehst!

kunz123 · 04.06.2012, 16:02

den GMER logfile hab ich angefügt.
mfg

Psychotic · 04.06.2012, 22:50

Scan mit AdwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Search.
Nach Ende des Suchlaufs öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.

kunz123 · 05.06.2012, 11:13

bitteschön:
# AdwCleaner v1.608 - Logfile created 06/05/2012 at 12:09:54
# Updated 27/05/2012 by Xplode
# Operating system : Windows Vista (TM) Home Premium (32 bits)
# User : Dankesreiter - DANKESREITER-PC
# Running from : C:\Users\Dankesreiter\Desktop\adwcleaner.exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****

Folder Found : C:\Users\Dankesreiter\AppData\Local\Conduit
Folder Found : C:\Users\Dankesreiter\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki
Folder Found : C:\Users\Dankesreiter\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Folder Found : C:\Users\Dankesreiter\AppData\LocalLow\BabylonToolbar
Folder Found : C:\Users\Dankesreiter\AppData\LocalLow\Conduit
Folder Found : C:\Users\Dankesreiter\AppData\LocalLow\facemoods.com
Folder Found : C:\Users\Dankesreiter\AppData\LocalLow\PriceGong
Folder Found : C:\Users\Dankesreiter\AppData\LocalLow\ShoppingReport2
Folder Found : C:\Users\Dankesreiter\AppData\LocalLow\Toolbar4
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Ask.com
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Babylon
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\BrowserCompanion
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Media Finder
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\OpenCandy
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\Conduit
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\ConduitCommon
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\ConduitEngine
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\SweetIMToolbarData
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\crossriderapp2258@crossrider.com
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\engine@conduit.com
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\ffxtlbr@babylon.com
Folder Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\ffxtlbr@funmoods.com
Folder Found : C:\ProgramData\Tarma Installer
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder
File Found : C:\Users\Dankesreiter\AppData\Local\funmoods.crx
File Found : C:\Users\Dankesreiter\AppData\Local\funmoods-speeddial.crx
File Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\searchplugins\Askcom.xml
File Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\searchplugins\Conduit.xml
File Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\searchplugins\Startsear.xml
File Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\searchplugins\SweetIm.xml
File Found : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\searchplugins\web-search.xml
File Found : C:\Windows\system32\conduitEngine.tmp

***** [Registry] *****
[*] Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2102572[*] Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2206084[*] Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2269050[*] Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2431245
Key Found : HKCU\Software\APN DTX
Key Found : HKCU\Software\BabylonToolbar
Key Found : HKCU\Software\Cr_Installer
Key Found : HKCU\Software\MediaFinder
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\SweetIm
Key Found : HKCU\Software\Zugo
Key Found : HKCU\Software\AppDataLow\Software\PriceGong
Key Found : HKCU\Software\AppDataLow\Software\ShoppingReport2
Key Found : HKLM\SOFTWARE\Babylon
Key Found : HKLM\SOFTWARE\BabylonToolbar
Key Found : HKLM\SOFTWARE\Dealio
Key Found : HKLM\SOFTWARE\Iminent
Key Found : HKLM\SOFTWARE\Incredibar.com
Key Found : HKLM\SOFTWARE\QuestScan
Key Found : HKLM\SOFTWARE\SweetIM
Key Found : HKLM\SOFTWARE\Tarma Installer
Key Found : HKLM\SOFTWARE\Classes\b
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Found : HKLM\SOFTWARE\Classes\ClickPotatoLiteAX.UserProfiles
Key Found : HKLM\SOFTWARE\Classes\ClickPotatoLiteAX.UserProfiles.1
Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Found : HKLM\SOFTWARE\Classes\Dealio.DealioBHO
Key Found : HKLM\SOFTWARE\Classes\Dealio.DealioBHO.1
Key Found : HKLM\SOFTWARE\Classes\Dealio.DealioSearch
Key Found : HKLM\SOFTWARE\Classes\Dealio.DealioSearch.1
Key Found : HKLM\SOFTWARE\Classes\Dealio.DealioToolbar
Key Found : HKLM\SOFTWARE\Classes\Dealio.DealioToolbar.1
Key Found : HKLM\SOFTWARE\Classes\Dealio.DealioToolbarHelper
Key Found : HKLM\SOFTWARE\Classes\Dealio.DealioToolbarHelper.1
Key Found : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Found : HKLM\SOFTWARE\Classes\f
Key Found : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Key Found : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
Key Found : HKLM\SOFTWARE\Classes\funmoods.dskBnd
Key Found : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1
Key Found : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr
Key Found : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1
Key Found : HKLM\SOFTWARE\Classes\funmoodsApp.appCore
Key Found : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1
Key Found : HKLM\SOFTWARE\Classes\gencrawler_gc.GenCrawler
Key Found : HKLM\SOFTWARE\Classes\MF
Key Found : HKLM\SOFTWARE\Classes\MenuButtonIE.ButtonIE.1
Key Found : HKLM\SOFTWARE\Classes\MenuButtonIE.ButtonIE
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx.1
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand.1
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton.1
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA.1
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl.1
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\MenuButtonIE.DLL
Key Found : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{D0C73318-7B4A-4D16-A0C4-3B83F075EA88}
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\lpmkgpnbiojfaoklbkpfneikocaobfai
Key Found : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\facemoods
Value Found : HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Media Finder]

***** [Registre - GUID] *****

Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D2083641-E57F-4EAB-BB85-0582424F4A29}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5C00A371-2011-4AF3-97C8-6CE66AA744CB}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6A87B991-A31F-4130-AE72-6D0C294BF082}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9F038672-0425-4792-BC9C-36DE3308E8AA}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CA4520F3-AE13-4FB1-A513-58E23991C86D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Found : HKLM\SOFTWARE\Classes\Interface\{03C390E8-B836-4B82-8D56-1BFDDC06AE8A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Key Found : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Key Found : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2C4470A2-E099-4B9E-ABFE-BBA56D046AFD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Key Found : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Key Found : HKLM\SOFTWARE\Classes\Interface\{391769AE-D8EC-45EC-967D-F5120456E514}
Key Found : HKLM\SOFTWARE\Classes\Interface\{39AEF150-C270-4690-AE7D-955E51BC8960}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3EDDA953-1C3B-4823-8F25-D075FBB2D2B5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Found : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Key Found : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Key Found : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B67A4CBA-520A-43DB-B03F-414E539F90EC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Found : HKLM\SOFTWARE\Classes\Interface\{CD73B1AB-3403-4E47-B196-517C57BE76A2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4C1E5902-FE99-4591-8582-2A2605462857}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65BCD620-07DD-012F-819F-073CF1B8F7C6}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B9C7CE32-DA91-43C2-B7E9-0E9AAFC675CD}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA4520F3-AE13-4FB1-A513-58E23991C86D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6A87B991-A31F-4130-AE72-6D0C294BF082}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E908B145-C847-4E85-B315-07E2E70DECF8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6A87B991-A31F-4130-AE72-6D0C294BF082}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA4520F3-AE13-4FB1-A513-58E23991C86D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E908B145-C847-4E85-B315-07E2E70DECF8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35D-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{043C5167-00BB-4324-AF7E-62013FAEDACF}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18882

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.funmoods.com/?f=1&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzuzztDtC0FtDtBtA0A0EzytByB0DtDtAzztN0D0TzutBtDtCtBtDyCtDtC&cr=1195242171
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.funmoods.com/?f=1&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzuzztDtC0FtDtBtA0A0EzytByB0DtDtAzztN0D0TzutBtDtCtBtDyCtDtC&cr=1195242171
[HKCU\Software\Microsoft\Internet Explorer\Main - Backup.Old.Start Page] = hxxp://www.bigseekpro.com/serialkeygenerator/{E57D463F-86CE-4DEC-8222-AD17F934C33F}

-\\ Mozilla Firefox v [Unable to get version]

Profile name : default
File : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\prefs.js

Found : user_pref("CT2102572..clientLogIsEnabled", true);
Found : user_pref("CT2102572..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2102572..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2102572.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2102572.AppTrackingLastCheckTime", "Mon Jun 13 2011 11:43:52 GMT+0200");
Found : user_pref("CT2102572.CTID", "CT2102572");
Found : user_pref("CT2102572.CurrentServerDate", "24-8-2011");
Found : user_pref("CT2102572.DialogsAlignMode", "LTR");
Found : user_pref("CT2102572.DialogsGetterLastCheckTime", "Tue Aug 23 2011 19:26:20 GMT+0200");
Found : user_pref("CT2102572.DownloadReferralCookieData", "");
Found : user_pref("CT2102572.EMailNotifierPollDate", "Tue Aug 23 2011 19:26:02 GMT+0200");
Found : user_pref("CT2102572.EnableClickToSearchBox", false);
Found : user_pref("CT2102572.EnableSearchHistory", false);
Found : user_pref("CT2102572.EnableSearchSuggest", false);
Found : user_pref("CT2102572.ExternalComponentPollDate128980152151612826", "Tue Aug 23 2011 19:26:02 GMT+020[...]
Found : user_pref("CT2102572.ExternalComponentPollDate129010430308906809", "Tue Aug 23 2011 19:26:02 GMT+020[...]
Found : user_pref("CT2102572.ExternalComponentPollDate129241049870851286", "Tue Aug 23 2011 19:26:02 GMT+020[...]
Found : user_pref("CT2102572.FeedLastCount128731380714969334", 609);
Found : user_pref("CT2102572.FeedLastCount129318697243744006", 450);
Found : user_pref("CT2102572.FeedPollDate128734848660238153", "Tue Aug 23 2011 19:26:35 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734848780081259", "Tue Aug 23 2011 19:26:35 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734848899768760", "Tue Aug 23 2011 19:26:35 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734849162893952", "Tue Aug 23 2011 19:26:36 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734849298831492", "Tue Aug 23 2011 19:26:36 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734849447894294", "Tue Aug 23 2011 19:26:36 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734849563988162", "Tue Aug 23 2011 19:26:36 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734849694613310", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734849871644036", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734850012112791", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734850140238024", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734850329613306", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734851254769189", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734851343519240", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734851486175530", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734851555550653", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734851626019450", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128734851705082013", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate128737465108387945", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate129318697244837786", "Tue Aug 23 2011 19:26:35 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate129318697244837787", "Tue Aug 23 2011 19:26:35 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate129318697244837788", "Tue Aug 23 2011 19:26:35 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate129318697244837789", "Tue Aug 23 2011 19:26:36 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate129318697244837790", "Tue Aug 23 2011 19:26:36 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate129318697244837791", "Tue Aug 23 2011 19:26:36 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate129318697244837792", "Tue Aug 23 2011 19:26:36 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate129318697244837793", "Tue Aug 23 2011 19:26:36 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate129318697244837794", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2102572.FeedPollDate129318697244837795", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2102572.FeedTTL128734849162893952", 2);
Found : user_pref("CT2102572.FeedTTL128734849563988162", 30);
Found : user_pref("CT2102572.FeedTTL128734849694613310", 5);
Found : user_pref("CT2102572.FeedTTL128734850012112791", 30);
Found : user_pref("CT2102572.FeedTTL128737465108387945", 5);
Found : user_pref("CT2102572.FeedTTL129318697244837786", 40);
Found : user_pref("CT2102572.FeedTTL129318697244837787", 40);
Found : user_pref("CT2102572.FeedTTL129318697244837788", 40);
Found : user_pref("CT2102572.FeedTTL129318697244837789", 40);
Found : user_pref("CT2102572.FeedTTL129318697244837790", 40);
Found : user_pref("CT2102572.FeedTTL129318697244837791", 40);
Found : user_pref("CT2102572.FeedTTL129318697244837792", 40);
Found : user_pref("CT2102572.FeedTTL129318697244837793", 40);
Found : user_pref("CT2102572.FeedTTL129318697244837795", 40);
Found : user_pref("CT2102572.FirstServerDate", "26-4-2011");
Found : user_pref("CT2102572.FirstTime", true);
Found : user_pref("CT2102572.FirstTimeFF3", true);
Found : user_pref("CT2102572.FixPageNotFoundErrors", false);
Found : user_pref("CT2102572.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2102572.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2102572.HasUserGlobalKeys", true);
Found : user_pref("CT2102572.HomePageProtectorEnabled", false);
Found : user_pref("CT2102572.Initialize", true);
Found : user_pref("CT2102572.InitializeCommonPrefs", true);
Found : user_pref("CT2102572.InstallationAndCookieDataSentCount", 3);
Found : user_pref("CT2102572.InstallationType", "UnknownIntegration");
Found : user_pref("CT2102572.InstalledDate", "Tue Apr 26 2011 18:14:34 GMT+0200");
Found : user_pref("CT2102572.InvalidateCache", false);
Found : user_pref("CT2102572.IsAlertDBUpdated", true);
Found : user_pref("CT2102572.IsGrouping", false);
Found : user_pref("CT2102572.IsMulticommunity", false);
Found : user_pref("CT2102572.IsOpenThankYouPage", true);
Found : user_pref("CT2102572.IsOpenUninstallPage", true);
Found : user_pref("CT2102572.LanguagePackLastCheckTime", "Tue Aug 23 2011 19:26:05 GMT+0200");
Found : user_pref("CT2102572.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2102572.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2102572.LastLogin_3.3.3.2", "Mon Jul 04 2011 20:45:34 GMT+0200");
Found : user_pref("CT2102572.LastLogin_3.5.0.12", "Wed Aug 24 2011 14:12:49 GMT+0200");
Found : user_pref("CT2102572.LatestVersion", "3.6.0.10");
Found : user_pref("CT2102572.Locale", "de");
Found : user_pref("CT2102572.MCDetectTooltipHeight", "83");
Found : user_pref("CT2102572.MCDetectTooltipShow", false);
Found : user_pref("CT2102572.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2102572.MCDetectTooltipWidth", "295");
Found : user_pref("CT2102572.MyStuffEnabledAtInstallation", true);
Found : user_pref("CT2102572.RadioIsPodcast", false);
Found : user_pref("CT2102572.RadioLastCheckTime", "Tue Aug 23 2011 19:26:35 GMT+0200");
Found : user_pref("CT2102572.RadioLastUpdateIPServer", "3");
Found : user_pref("CT2102572.RadioLastUpdateServer", "128929877726170000");
Found : user_pref("CT2102572.RadioMediaID", "9512588");
Found : user_pref("CT2102572.RadioMediaType", "Media Player");
Found : user_pref("CT2102572.RadioMenuSelectedID", "EBRadioMenu_CT21025729512588");
Found : user_pref("CT2102572.RadioShrinkedFromSetup", false);
Found : user_pref("CT2102572.RadioStationName", "Antenne%20Bayern%20Top%2040%20");
Found : user_pref("CT2102572.RadioStationURL", "hxxp://channels.webradio.antenne.de/top-40");
Found : user_pref("CT2102572.SearchBackToDefaultEngine", false);
Found : user_pref("CT2102572.SearchEngineBeforeUnload", "Ask.com");
Found : user_pref("CT2102572.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2102572.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT210[...]
Found : user_pref("CT2102572.SearchInNewTabEnabled", true);
Found : user_pref("CT2102572.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2102572.SearchInNewTabLastCheckTime", "Tue Aug 23 2011 19:25:58 GMT+0200");
Found : user_pref("CT2102572.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2102572.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2102572.SearchInNewTabUserEnabled", false);
Found : user_pref("CT2102572.SearchProtectorEnabled", false);
Found : user_pref("CT2102572.SearchProtectorToolbarDisabled", false);
Found : user_pref("CT2102572.ServiceMapLastCheckTime", "Tue Aug 23 2011 19:26:03 GMT+0200");
Found : user_pref("CT2102572.SettingsLastCheckTime", "Wed Aug 24 2011 14:12:40 GMT+0200");
Found : user_pref("CT2102572.SettingsLastUpdate", "1313573337");
Found : user_pref("CT2102572.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2102572.ThirdPartyComponentsLastCheck", "Thu Aug 11 2011 14:15:22 GMT+0200");
Found : user_pref("CT2102572.ThirdPartyComponentsLastUpdate", "1255344657");
Found : user_pref("CT2102572.ToolbarShrinkedFromSetup", false);
Found : user_pref("CT2102572.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2102572");
Found : user_pref("CT2102572.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Found : user_pref("CT2102572.UserID", "UN67167533912499875");
Found : user_pref("CT2102572.ValidationData_Toolbar", 0);
Found : user_pref("CT2102572.WeatherNetwork", "");
Found : user_pref("CT2102572.WeatherPollDate", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2102572.WeatherUnit", "C");
Found : user_pref("CT2102572.alertChannelId", "518348");
Found : user_pref("CT2102572.approveUntrustedApps", true);
Found : user_pref("CT2102572.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E");
Found : user_pref("CT2102572.componentAlertEnabled", false);
Found : user_pref("CT2102572.components.1000034", false);
Found : user_pref("CT2102572.components.1000082", false);
Found : user_pref("CT2102572.components.1000234", false);
Found : user_pref("CT2102572.components.128721053378556957", false);
Found : user_pref("CT2102572.components.128731375052312982", false);
Found : user_pref("CT2102572.components.128731380714969334", false);
Found : user_pref("CT2102572.components.128734807813831999", false);
Found : user_pref("CT2102572.components.128878100730731381", false);
Found : user_pref("CT2102572.components.128891037404994663", false);
Found : user_pref("CT2102572.components.128980152151612826", false);
Found : user_pref("CT2102572.components.129000685616787636", false);
Found : user_pref("CT2102572.components.129010430308906809", false);
Found : user_pref("CT2102572.components.129241049303820928", false);
Found : user_pref("CT2102572.components.129241049870851286", false);
Found : user_pref("CT2102572.components.129318697243744006", false);
Found : user_pref("CT2102572.components.129318698894212717", false);
Found : user_pref("CT2102572.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Found : user_pref("CT2102572.globalFirstTimeInfoLastCheckTime", "Wed Aug 24 2011 14:12:52 GMT+0200");
Found : user_pref("CT2102572.homepageProtectorEnableByLogin", true);
Found : user_pref("CT2102572.initDone", true);
Found : user_pref("CT2102572.isAppTrackingManagerOn", true);
Found : user_pref("CT2102572.isFirstRadioInstallation", false);
Found : user_pref("CT2102572.myStuffEnabled", true);
Found : user_pref("CT2102572.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2102572.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2102572.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2102572.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2102572.oldAppsList", "128719124367600658,128719124391506909,111,129241049303820928,129[...]
Found : user_pref("CT2102572.searchProtectorDialogDelayInSec", 10);
Found : user_pref("CT2102572.searchProtectorEnableByLogin", true);
Found : user_pref("CT2102572.testingCtid", "");
Found : user_pref("CT2102572.toolbarAppMetaDataLastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200");
Found : user_pref("CT2102572.toolbarContextMenuLastCheckTime", "Thu Aug 11 2011 14:15:41 GMT+0200");
Found : user_pref("CT2102572.usageEnabled", false);
Found : user_pref("CT2102572.usagesFlag", 2);
Found : user_pref("CT2206084..clientLogIsEnabled", false);
Found : user_pref("CT2206084..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2206084..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2206084.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2206084.AppTrackingLastCheckTime", "Wed Aug 24 2011 14:18:36 GMT+0200");
Found : user_pref("CT2206084.BrowserCompStateIsOpen_129453390520131510", true);
Found : user_pref("CT2206084.CT2206084", "CT2206084");
Found : user_pref("CT2206084.CurrentServerDate", "24-8-2011");
Found : user_pref("CT2206084.DialogsAlignMode", "LTR");
Found : user_pref("CT2206084.DialogsGetterLastCheckTime", "Tue Aug 23 2011 19:26:51 GMT+0200");
Found : user_pref("CT2206084.DownloadReferralCookieData", "");
Found : user_pref("CT2206084.EMailNotifierPollDate", "Tue Aug 23 2011 19:26:12 GMT+0200");
Found : user_pref("CT2206084.EnableClickToSearchBox", false);
Found : user_pref("CT2206084.EnableSearchHistory", false);
Found : user_pref("CT2206084.EnableSearchSuggest", false);
Found : user_pref("CT2206084.FeedLastCount128311388426518939", 1124);
Found : user_pref("CT2206084.FeedPollDate128394382574669410", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128394382574669411", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128394382574669412", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128394382574669413", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128394382574669414", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128559429569307240", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801410134769526", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801410271643768", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801410648675207", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801410803831945", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801411020863399", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801411145707150", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801411258362590", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801411369456587", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801411490081588", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801411659613144", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801411801956980", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128801411974300317", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128895535588356636", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128895536575232020", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128895541734450320", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128896127456250507", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128896133101250708", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128896136655781447", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128896138140469441", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2206084.FeedPollDate128896149451719443", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2206084.FeedTTL128801410648675207", 2);
Found : user_pref("CT2206084.FeedTTL128801411145707150", 30);
Found : user_pref("CT2206084.FeedTTL128801411258362590", 5);
Found : user_pref("CT2206084.FeedTTL128801411490081588", 30);
Found : user_pref("CT2206084.FeedTTL128801411974300317", 5);
Found : user_pref("CT2206084.FeedTTL128895535588356636", 5);
Found : user_pref("CT2206084.FeedTTL128896138140469441", 2);
Found : user_pref("CT2206084.FirstServerDate", "30-3-2011");
Found : user_pref("CT2206084.FirstTime", true);
Found : user_pref("CT2206084.FirstTimeFF3", true);
Found : user_pref("CT2206084.FixPageNotFoundErrors", false);
Found : user_pref("CT2206084.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2206084.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2206084.HasUserGlobalKeys", true);
Found : user_pref("CT2206084.HomePageProtectorEnabled", false);
Found : user_pref("CT2206084.Initialize", true);
Found : user_pref("CT2206084.InitializeCommonPrefs", true);
Found : user_pref("CT2206084.InstallationAndCookieDataSentCount", 3);
Found : user_pref("CT2206084.InstalledDate", "Wed Mar 30 2011 17:15:12 GMT+0200");
Found : user_pref("CT2206084.InvalidateCache", false);
Found : user_pref("CT2206084.IsAlertDBUpdated", true);
Found : user_pref("CT2206084.IsGrouping", false);
Found : user_pref("CT2206084.IsMulticommunity", false);
Found : user_pref("CT2206084.IsOpenThankYouPage", true);
Found : user_pref("CT2206084.IsOpenUninstallPage", true);
Found : user_pref("CT2206084.LanguagePackLastCheckTime", "Tue Aug 23 2011 19:26:39 GMT+0200");
Found : user_pref("CT2206084.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2206084.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2206084.LastLogin_3.3.3.2", "Sun Jul 17 2011 15:31:48 GMT+0200");
Found : user_pref("CT2206084.LastLogin_3.6.0.10", "Wed Aug 24 2011 14:18:27 GMT+0200");
Found : user_pref("CT2206084.LatestVersion", "3.5.0.12");
Found : user_pref("CT2206084.Locale", "de-de");
Found : user_pref("CT2206084.MCDetectTooltipHeight", "83");
Found : user_pref("CT2206084.MCDetectTooltipShow", false);
Found : user_pref("CT2206084.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2206084.MCDetectTooltipWidth", "295");
Found : user_pref("CT2206084.MyStuffEnabledAtInstallation", true);
Found : user_pref("CT2206084.RadioIsPodcast", false);
Found : user_pref("CT2206084.RadioLastCheckTime", "Tue Aug 23 2011 19:26:40 GMT+0200");
Found : user_pref("CT2206084.RadioLastUpdateIPServer", "3");
Found : user_pref("CT2206084.RadioLastUpdateServer", "128939446421370000");
Found : user_pref("CT2206084.RadioMediaID", "10559111");
Found : user_pref("CT2206084.RadioMediaType", "Media Player");
Found : user_pref("CT2206084.RadioMenuSelectedID", "EBRadioMenu_CT220608410559111");
Found : user_pref("CT2206084.RadioShrinkedFromSetup", false);
Found : user_pref("CT2206084.RadioStationName", "Antenne%20Bayern%20Top%2040");
Found : user_pref("CT2206084.RadioStationURL", "hxxp://channels.webradio.antenne.de/top-40");
Found : user_pref("CT2206084.SavedHomepage", "hxxp://vshare.toolbarhome.com/?hp=df");
Found : user_pref("CT2206084.SearchBackToDefaultEngine", false);
Found : user_pref("CT2206084.SearchEngineBeforeUnload", "Ask.com");
Found : user_pref("CT2206084.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2206084.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT220[...]
Found : user_pref("CT2206084.SearchInNewTabEnabled", true);
Found : user_pref("CT2206084.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2206084.SearchInNewTabLastCheckTime", "Tue Aug 23 2011 19:26:11 GMT+0200");
Found : user_pref("CT2206084.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2206084.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2206084.SearchInNewTabUserEnabled", false);
Found : user_pref("CT2206084.SearchProtectorEnabled", false);
Found : user_pref("CT2206084.SearchProtectorToolbarDisabled", false);
Found : user_pref("CT2206084.ServiceMapLastCheckTime", "Tue Aug 23 2011 19:26:19 GMT+0200");
Found : user_pref("CT2206084.SettingsLastCheckTime", "Wed Aug 24 2011 14:18:23 GMT+0200");
Found : user_pref("CT2206084.SettingsLastUpdate", "1312118247");
Found : user_pref("CT2206084.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2206084.ThirdPartyComponentsLastCheck", "Thu Aug 11 2011 14:15:38 GMT+0200");
Found : user_pref("CT2206084.ThirdPartyComponentsLastUpdate", "1255348257");
Found : user_pref("CT2206084.ToolbarShrinkedFromSetup", false);
Found : user_pref("CT2206084.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2206084");
Found : user_pref("CT2206084.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Found : user_pref("CT2206084.UserID", "UN50318706847251577");
Found : user_pref("CT2206084.ValidationData_Toolbar", 0);
Found : user_pref("CT2206084.WeatherNetwork", "");
Found : user_pref("CT2206084.WeatherPollDate", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2206084.WeatherUnit", "C");
Found : user_pref("CT2206084.alertChannelId", "604380");
Found : user_pref("CT2206084.approveUntrustedApps", true);
Found : user_pref("CT2206084.backendstorage.for_aoi", "31333036303935333530");
Found : user_pref("CT2206084.backendstorage.for_ccid", "5261746973626F6E");
Found : user_pref("CT2206084.backendstorage.for_cdtr5", "31333036303935333530");
Found : user_pref("CT2206084.backendstorage.for_cid", "4445");
Found : user_pref("CT2206084.backendstorage.for_ip", "38372E3136302E37302E313435");
Found : user_pref("CT2206084.backendstorage.for_lcut", "31333134313230343136");
Found : user_pref("CT2206084.backendstorage.for_pid", "31303130");
Found : user_pref("CT2206084.backendstorage.for_rid", "3032");
Found : user_pref("CT2206084.backendstorage.for_zoneid", "39363331");
Found : user_pref("CT2206084.componentAlertEnabled", false);
Found : user_pref("CT2206084.components.1000034", false);
Found : user_pref("CT2206084.components.1000082", false);
Found : user_pref("CT2206084.components.1000234", false);
Found : user_pref("CT2206084.components.128311388426518939", false);
Found : user_pref("CT2206084.components.128394149676563280", false);
Found : user_pref("CT2206084.components.128795241664163022", false);
Found : user_pref("CT2206084.components.128952322938437928", false);
Found : user_pref("CT2206084.components.128963628988794044", false);
Found : user_pref("CT2206084.components.129350935210162825", false);
Found : user_pref("CT2206084.components.129453390520131510", false);
Found : user_pref("CT2206084.components.129502776319825857", false);
Found : user_pref("CT2206084.components.241910600392622828", false);
Found : user_pref("CT2206084.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Found : user_pref("CT2206084.globalFirstTimeInfoLastCheckTime", "Wed Aug 24 2011 14:18:29 GMT+0200");
Found : user_pref("CT2206084.homepageProtectorEnableByLogin", true);
Found : user_pref("CT2206084.initDone", true);
Found : user_pref("CT2206084.isAppTrackingManagerOn", true);
Found : user_pref("CT2206084.isFirstRadioInstallation", false);
Found : user_pref("CT2206084.myStuffEnabled", true);
Found : user_pref("CT2206084.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2206084.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2206084.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2206084.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2206084.oldAppsList", "128325851945531999,128541998593412748,111,128952322938437928,100[...]
Found : user_pref("CT2206084.searchProtectorDialogDelayInSec", 10);
Found : user_pref("CT2206084.searchProtectorEnableByLogin", true);
Found : user_pref("CT2206084.testingCtid", "");
Found : user_pref("CT2206084.toolbarAppMetaDataLastCheckTime", "Tue Aug 23 2011 19:26:28 GMT+0200");
Found : user_pref("CT2206084.toolbarContextMenuLastCheckTime", "Thu Aug 11 2011 14:16:19 GMT+0200");
Found : user_pref("CT2206084.usageEnabled", false);
Found : user_pref("CT2206084.usagesFlag", 2);
Found : user_pref("CT2269050..clientLogIsEnabled", true);
Found : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2269050.AppTrackingLastCheckTime", "Tue Aug 23 2011 19:26:03 GMT+0200");
Found : user_pref("CT2269050.BrowserCompStateIsOpen_129575150554007677", true);
Found : user_pref("CT2269050.CTID", "CT2269050");
Found : user_pref("CT2269050.CurrentServerDate", "24-8-2011");
Found : user_pref("CT2269050.DialogsAlignMode", "LTR");
Found : user_pref("CT2269050.DialogsGetterLastCheckTime", "Wed Aug 24 2011 14:12:53 GMT+0200");
Found : user_pref("CT2269050.DownloadReferralCookieData", "");
Found : user_pref("CT2269050.EMailNotifierPollDate", "Tue Aug 23 2011 19:31:04 GMT+0200");
Found : user_pref("CT2269050.EnableClickToSearchBox", false);
Found : user_pref("CT2269050.EnableSearchHistory", false);
Found : user_pref("CT2269050.EnableSearchSuggest", false);
Found : user_pref("CT2269050.FirstServerDate", "7-3-2011");
Found : user_pref("CT2269050.FirstTime", true);
Found : user_pref("CT2269050.FirstTimeFF3", true);
Found : user_pref("CT2269050.FixPageNotFoundErrors", false);
Found : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2269050.HasUserGlobalKeys", true);
Found : user_pref("CT2269050.HomePageProtectorEnabled", false);
Found : user_pref("CT2269050.Initialize", true);
Found : user_pref("CT2269050.InitializeCommonPrefs", true);
Found : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);
Found : user_pref("CT2269050.InstallationType", "UnknownIntegration");
Found : user_pref("CT2269050.InstalledDate", "Mon Mar 07 2011 15:45:51 GMT+0100");
Found : user_pref("CT2269050.InvalidateCache", false);
Found : user_pref("CT2269050.IsAlertDBUpdated", true);
Found : user_pref("CT2269050.IsGrouping", false);
Found : user_pref("CT2269050.IsMulticommunity", false);
Found : user_pref("CT2269050.IsOpenThankYouPage", false);
Found : user_pref("CT2269050.IsOpenUninstallPage", false);
Found : user_pref("CT2269050.LanguagePackLastCheckTime", "Tue Aug 23 2011 19:25:57 GMT+0200");
Found : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2269050.LastLogin_3.2.5.2", "Tue Mar 15 2011 17:19:54 GMT+0100");
Found : user_pref("CT2269050.LastLogin_3.3.3.2", "Sun Jul 17 2011 15:31:35 GMT+0200");
Found : user_pref("CT2269050.LastLogin_3.5.0.12", "Wed Aug 24 2011 14:12:41 GMT+0200");
Found : user_pref("CT2269050.LatestVersion", "3.6.0.10");
Found : user_pref("CT2269050.Locale", "en");
Found : user_pref("CT2269050.MCDetectTooltipHeight", "83");
Found : user_pref("CT2269050.MCDetectTooltipShow", false);
Found : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2269050.MCDetectTooltipWidth", "295");
Found : user_pref("CT2269050.MyStuffEnabledAtInstallation", true);
Found : user_pref("CT2269050.RadioIsPodcast", false);
Found : user_pref("CT2269050.RadioLastCheckTime", "Tue Aug 23 2011 19:26:34 GMT+0200");
Found : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
Found : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
Found : user_pref("CT2269050.RadioMediaID", "12473383");
Found : user_pref("CT2269050.RadioMediaType", "Media Player");
Found : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");
Found : user_pref("CT2269050.RadioShrinkedFromSetup", false);
Found : user_pref("CT2269050.RadioStationName", "Hotmix%20108");
Found : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");
Found : user_pref("CT2269050.SavedHomepage", "resource:/browserconfig.properties");
Found : user_pref("CT2269050.SearchBackToDefaultEngine", false);
Found : user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Found : user_pref("CT2269050.SearchEngineBeforeUnload", "Ask.com");
Found : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]
Found : user_pref("CT2269050.SearchInNewTabEnabled", true);
Found : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Tue Aug 23 2011 19:25:42 GMT+0200");
Found : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2269050.SearchInNewTabUserEnabled", false);
Found : user_pref("CT2269050.SearchProtectorEnabled", false);
Found : user_pref("CT2269050.SearchProtectorToolbarDisabled", false);
Found : user_pref("CT2269050.ServiceMapLastCheckTime", "Tue Aug 23 2011 19:25:53 GMT+0200");
Found : user_pref("CT2269050.SettingsLastCheckTime", "Wed Aug 24 2011 14:12:31 GMT+0200");
Found : user_pref("CT2269050.SettingsLastUpdate", "1313595511");
Found : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Thu Aug 11 2011 14:15:17 GMT+0200");
Found : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1246790578");
Found : user_pref("CT2269050.ToolbarShrinkedFromSetup", false);
Found : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2269050");
Found : user_pref("CT2269050.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Found : user_pref("CT2269050.UserID", "UN63881599739340297");
Found : user_pref("CT2269050.WeatherNetwork", "");
Found : user_pref("CT2269050.WeatherPollDate", "Tue Aug 23 2011 19:26:34 GMT+0200");
Found : user_pref("CT2269050.WeatherUnit", "C");
Found : user_pref("CT2269050.alertChannelId", "666138");
Found : user_pref("CT2269050.approveUntrustedApps", true);
Found : user_pref("CT2269050.backendstorage./9b*68f17dh6fm9;", "6E6D706F736E716D6E747B757676");
Found : user_pref("CT2269050.backendstorage./9b*68f17dh6fm<9j;l", "247E2D2F226A7473767579747773747A227B7C7C2[...]
Found : user_pref("CT2269050.backendstorage./9b*68fcf4h><e

:>e", "");
Found : user_pref("CT2269050.backendstorage./9b+7e.:2z527", "247E706A73744345343D4436387E4A3F422F77317D7C207[...]
Found : user_pref("CT2269050.backendstorage./9b+7e06cg5el8:", "6E6D706E727275727471");
Found : user_pref("CT2269050.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A7473767478787B787A77242F4B4947[...]
Found : user_pref("CT2269050.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Found : user_pref("CT2269050.backendstorage./9b-0?3g>d", "6C3E686C414274757A4573477B20754A494C25212152502A53[...]
Found : user_pref("CT2269050.backendstorage./9b-0?3g@6:5;", "");
Found : user_pref("CT2269050.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332[...]
Found : user_pref("CT2269050.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "676A6D7273747576");
Found : user_pref("CT2269050.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484779213F3E484F4E4D464[...]
Found : user_pref("CT2269050.backendstorage./9b5ba==9cjag", "6C3B6D6F413F416F7A7743777B474C754D4C204F22");
Found : user_pref("CT2269050.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D706E727275736F6F747278");
Found : user_pref("CT2269050.backendstorage./9b9643g3/9e", "6A");
Found : user_pref("CT2269050.backendstorage./9b<:222h64<", "393F352F3E");
Found : user_pref("CT2269050.backendstorage./9b=+03eh8h8j?:", "4443");
Found : user_pref("CT2269050.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Found : user_pref("CT2269050.backendstorage./9b?b0d:8aj62<h", "6D");
Found : user_pref("CT2269050.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Found : user_pref("CT2269050.components.1000034", false);
Found : user_pref("CT2269050.components.1000082", false);
Found : user_pref("CT2269050.components.1000234", false);
Found : user_pref("CT2269050.components.129023235807856892", false);
Found : user_pref("CT2269050.components.129121052374999726", false);
Found : user_pref("CT2269050.components.129351672002618989", false);
Found : user_pref("CT2269050.components.129351776130744254", false);
Found : user_pref("CT2269050.components.129391330693125668", false);
Found : user_pref("CT2269050.components.129466585396013141", false);
Found : user_pref("CT2269050.components.129466585399606892", false);
Found : user_pref("CT2269050.components.129575150554007677", false);
Found : user_pref("CT2269050.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Found : user_pref("CT2269050.globalFirstTimeInfoLastCheckTime", "Wed Aug 24 2011 14:12:49 GMT+0200");
Found : user_pref("CT2269050.homepageProtectorEnableByLogin", true);
Found : user_pref("CT2269050.initDone", true);
Found : user_pref("CT2269050.isAppTrackingManagerOn", true);
Found : user_pref("CT2269050.isFirstRadioInstallation", false);
Found : user_pref("CT2269050.myStuffEnabled", true);
Found : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2269050.oldAppsList", "128834881989343894,128834881989343895,111,129391330693125668,129[...]
Found : user_pref("CT2269050.searchProtectorDialogDelayInSec", 10);
Found : user_pref("CT2269050.searchProtectorEnableByLogin", true);
Found : user_pref("CT2269050.testingCtid", "");
Found : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Tue Aug 23 2011 19:25:55 GMT+0200");
Found : user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Thu Aug 11 2011 14:15:26 GMT+0200");
Found : user_pref("CT2269050.usageEnabled", false);
Found : user_pref("CT2269050.usagesFlag", 2);
Found : user_pref("CT2431245..clientLogIsEnabled", false);
Found : user_pref("CT2431245..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2431245..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2431245.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2431245.AppTrackingLastCheckTime", "Sun May 22 2011 23:59:21 GMT+0200");
Found : user_pref("CT2431245.BrowserCompStateIsOpen_129453394044193841", true);
Found : user_pref("CT2431245.CTID", "CT2431245");
Found : user_pref("CT2431245.CurrentServerDate", "24-8-2011");
Found : user_pref("CT2431245.DialogsAlignMode", "LTR");
Found : user_pref("CT2431245.DialogsGetterLastCheckTime", "Tue Aug 23 2011 19:26:27 GMT+0200");
Found : user_pref("CT2431245.DownloadReferralCookieData", "");
Found : user_pref("CT2431245.EMailNotifierPollDate", "Tue Aug 23 2011 19:26:06 GMT+0200");
Found : user_pref("CT2431245.EnableClickToSearchBox", false);
Found : user_pref("CT2431245.EnableSearchHistory", false);
Found : user_pref("CT2431245.EnableSearchSuggest", false);
Found : user_pref("CT2431245.FeedLastCount129009402595187825", 1133);
Found : user_pref("CT2431245.FeedPollDate7470634014180506963", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634014269327586", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634014329599698", "Tue Aug 23 2011 19:26:38 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634014537505092", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634014970726540", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634015410831318", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634015483395460", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634015636754705", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634015768347545", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634015855543602", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634016030710453", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634016114705611", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634016129205152", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634016143724791", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634016271239162", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634016568520719", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634016726993788", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634017109031809", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634017132743740", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634017299547668", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634017302327846", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634017344111490", "Tue Aug 23 2011 19:26:41 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634017478360748", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634017732797593", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634017821686064", "Tue Aug 23 2011 19:26:43 GMT+0200");
Found : user_pref("CT2431245.FeedPollDate7470634018090228721", "Tue Aug 23 2011 19:26:42 GMT+0200");
Found : user_pref("CT2431245.FeedTTL7470634014269327586", 5);
Found : user_pref("CT2431245.FeedTTL7470634014537505092", 5);
Found : user_pref("CT2431245.FeedTTL7470634014970726540", 2);
Found : user_pref("CT2431245.FeedTTL7470634015636754705", 5);
Found : user_pref("CT2431245.FeedTTL7470634016568520719", 30);
Found : user_pref("CT2431245.FeedTTL7470634017109031809", 30);
Found : user_pref("CT2431245.FeedTTL7470634017299547668", 2);
Found : user_pref("CT2431245.FirstServerDate", "7-3-2011");
Found : user_pref("CT2431245.FirstTime", true);
Found : user_pref("CT2431245.FirstTimeFF3", true);
Found : user_pref("CT2431245.FixPageNotFoundErrors", true);
Found : user_pref("CT2431245.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2431245.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2431245.HasUserGlobalKeys", true);
Found : user_pref("CT2431245.HomePageProtectorEnabled", false);
Found : user_pref("CT2431245.Initialize", true);
Found : user_pref("CT2431245.InitializeCommonPrefs", true);
Found : user_pref("CT2431245.InstallationAndCookieDataSentCount", 3);
Found : user_pref("CT2431245.InstallationId", "Unknown");
Found : user_pref("CT2431245.InstallationType", "ExternalIntegration");
Found : user_pref("CT2431245.InstalledDate", "Mon Mar 07 2011 15:45:55 GMT+0100");
Found : user_pref("CT2431245.InvalidateCache", false);
Found : user_pref("CT2431245.IsAlertDBUpdated", true);
Found : user_pref("CT2431245.IsGrouping", false);
Found : user_pref("CT2431245.IsMulticommunity", false);
Found : user_pref("CT2431245.IsOpenThankYouPage", false);
Found : user_pref("CT2431245.IsOpenUninstallPage", true);
Found : user_pref("CT2431245.LanguagePackLastCheckTime", "Tue Aug 23 2011 19:26:28 GMT+0200");
Found : user_pref("CT2431245.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2431245.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2431245.LastLogin_3.2.5.2", "Wed Mar 16 2011 17:53:16 GMT+0100");
Found : user_pref("CT2431245.LastLogin_3.3.3.2", "Sun Jul 17 2011 15:31:41 GMT+0200");
Found : user_pref("CT2431245.LastLogin_3.6.0.10", "Wed Aug 24 2011 14:18:22 GMT+0200");
Found : user_pref("CT2431245.LatestVersion", "3.5.0.12");
Found : user_pref("CT2431245.Locale", "de-de");
Found : user_pref("CT2431245.MCDetectTooltipHeight", "83");
Found : user_pref("CT2431245.MCDetectTooltipShow", false);
Found : user_pref("CT2431245.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2431245.MCDetectTooltipWidth", "295");
Found : user_pref("CT2431245.MyStuffEnabledAtInstallation", true);
Found : user_pref("CT2431245.RadioIsPodcast", false);
Found : user_pref("CT2431245.RadioLastCheckTime", "Tue Aug 23 2011 19:26:37 GMT+0200");
Found : user_pref("CT2431245.RadioLastUpdateIPServer", "3");
Found : user_pref("CT2431245.RadioLastUpdateServer", "129167771525870000");
Found : user_pref("CT2431245.RadioMediaID", "20503672");
Found : user_pref("CT2431245.RadioMediaType", "Media Player");
Found : user_pref("CT2431245.RadioMenuSelectedID", "EBRadioMenu_CT243124520503672");
Found : user_pref("CT2431245.RadioShrinkedFromSetup", false);
Found : user_pref("CT2431245.RadioStationName", "Team%20Radio%20Deutschland");
Found : user_pref("CT2431245.RadioStationURL", "hxxp://trd.stream.w-u-s.org:6666/dsl.m3u");
Found : user_pref("CT2431245.SavedHomepage", "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13");
Found : user_pref("CT2431245.SearchBackToDefaultEngine", false);
Found : user_pref("CT2431245.SearchEngineBeforeUnload", "Ask.com");
Found : user_pref("CT2431245.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2431245.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
Found : user_pref("CT2431245.SearchInNewTabEnabled", true);
Found : user_pref("CT2431245.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2431245.SearchInNewTabLastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200");
Found : user_pref("CT2431245.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2431245.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2431245.SearchInNewTabUserEnabled", false);
Found : user_pref("CT2431245.SearchProtectorEnabled", false);
Found : user_pref("CT2431245.SearchProtectorToolbarDisabled", false);
Found : user_pref("CT2431245.ServiceMapLastCheckTime", "Tue Aug 23 2011 19:26:11 GMT+0200");
Found : user_pref("CT2431245.SettingsLastCheckTime", "Wed Aug 24 2011 14:18:13 GMT+0200");
Found : user_pref("CT2431245.SettingsLastUpdate", "1313660189");
Found : user_pref("CT2431245.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2431245.ThirdPartyComponentsLastCheck", "Thu Aug 11 2011 14:15:29 GMT+0200");
Found : user_pref("CT2431245.ThirdPartyComponentsLastUpdate", "1255348257");
Found : user_pref("CT2431245.ToolbarShrinkedFromSetup", false);
Found : user_pref("CT2431245.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2431245");
Found : user_pref("CT2431245.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Found : user_pref("CT2431245.UserID", "UN57636076319668882");
Found : user_pref("CT2431245.ValidationData_Toolbar", 2);
Found : user_pref("CT2431245.WeatherNetwork", "");
Found : user_pref("CT2431245.WeatherPollDate", "Wed Jun 01 2011 21:28:52 GMT+0200");
Found : user_pref("CT2431245.WeatherUnit", "C");
Found : user_pref("CT2431245.alertChannelId", "825452");
Found : user_pref("CT2431245.approveUntrustedApps", true);
Found : user_pref("CT2431245.backendstorage.10032", "31333037323139353738363039");
Found : user_pref("CT2431245.backendstorage.10432", "31333037323139393638383038");
Found : user_pref("CT2431245.backendstorage.11870", "31333037323231313030343532");
Found : user_pref("CT2431245.backendstorage._fb_dailyactivity", "31333032323835303230313232");
Found : user_pref("CT2431245.backendstorage._fb_lifetimesent", "54525545");
Found : user_pref("CT2431245.backendstorage.active", "796573");
Found : user_pref("CT2431245.backendstorage.ct2431245ads1", "25374225323261647325323225334125354225374225323[...]
Found : user_pref("CT2431245.backendstorage.ct2431245current_term", "656C746F6E2B76732B73696D6F6E2B736368696[...]
Found : user_pref("CT2431245.backendstorage.ct2431245sdate", "3131");
Found : user_pref("CT2431245.backendstorage.ctid", "435432343331323435");
Found : user_pref("CT2431245.backendstorage.eule_tb_id", "46383736313937323137313837303832395447353334333038[...]
Found : user_pref("CT2431245.backendstorage.facebook_ctid_connect_send", "73656E646564");
Found : user_pref("CT2431245.backendstorage.fb_dailyactivity", "31333033373637323533313935");
Found : user_pref("CT2431245.backendstorage.fb_lifetimesent", "54525545");
Found : user_pref("CT2431245.backendstorage.firstinstall", "796573");
Found : user_pref("CT2431245.backendstorage.firsttime", "796573");
Found : user_pref("CT2431245.backendstorage.for_aoi", "31333036303939383633");
Found : user_pref("CT2431245.backendstorage.for_ccid", "5261746973626F6E");
Found : user_pref("CT2431245.backendstorage.for_cdtr5", "31333036303939383633");
Found : user_pref("CT2431245.backendstorage.for_cid", "4445");
Found : user_pref("CT2431245.backendstorage.for_ip", "38372E3136302E37302E313435");
Found : user_pref("CT2431245.backendstorage.for_lcut", "31333134313230343135");
Found : user_pref("CT2431245.backendstorage.for_pid", "31303130");
Found : user_pref("CT2431245.backendstorage.for_rid", "3032");
Found : user_pref("CT2431245.backendstorage.for_zoneid", "39353933");
Found : user_pref("CT2431245.backendstorage.gsdomain", "");
Found : user_pref("CT2431245.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E");
Found : user_pref("CT2431245.backendstorage.lastrun", "31333133313538303933323033");
Found : user_pref("CT2431245.backendstorage.li_dailyactivity", "31333031343938303831393934");
Found : user_pref("CT2431245.backendstorage.li_lifetimesent", "54525545");
Found : user_pref("CT2431245.backendstorage.partner_id", "3937346665643236");
Found : user_pref("CT2431245.backendstorage.short", "30");
Found : user_pref("CT2431245.backendstorage.tbready", "74727565");
Found : user_pref("CT2431245.componentAlertEnabled", false);
Found : user_pref("CT2431245.components.1000034", false);
Found : user_pref("CT2431245.components.1000082", false);
Found : user_pref("CT2431245.components.129009402593156547", false);
Found : user_pref("CT2431245.components.129009402595187825", false);
Found : user_pref("CT2431245.components.129009402595656583", false);
Found : user_pref("CT2431245.components.129453393919975934", false);
Found : user_pref("CT2431245.components.129453393922944692", false);
Found : user_pref("CT2431245.components.129453393923725944", false);
Found : user_pref("CT2431245.components.129453394044193841", false);
Found : user_pref("CT2431245.components.129460318377631679", false);
Found : user_pref("CT2431245.components.129502739333844312", false);
Found : user_pref("CT2431245.components.129530497903908208", false);
Found : user_pref("CT2431245.components.129530498480786171", false);
Found : user_pref("CT2431245.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Found : user_pref("CT2431245.globalFirstTimeInfoLastCheckTime", "Wed Aug 24 2011 14:18:22 GMT+0200");
Found : user_pref("CT2431245.homepageProtectorEnableByLogin", true);
Found : user_pref("CT2431245.initDone", true);
Found : user_pref("CT2431245.isAppTrackingManagerOn", true);
Found : user_pref("CT2431245.isFirstRadioInstallation", false);
Found : user_pref("CT2431245.myStuffEnabled", true);
Found : user_pref("CT2431245.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2431245.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2431245.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2431245.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2431245.oldAppsList", "129009402577063104,129009402577844366,111,129460318377631679,129[...]
Found : user_pref("CT2431245.searchProtectorDialogDelayInSec", 10);
Found : user_pref("CT2431245.searchProtectorEnableByLogin", true);
Found : user_pref("CT2431245.testingCtid", "");
Found : user_pref("CT2431245.toolbarAppMetaDataLastCheckTime", "Tue Aug 23 2011 19:26:19 GMT+0200");
Found : user_pref("CT2431245.toolbarContextMenuLastCheckTime", "Thu Aug 11 2011 14:15:55 GMT+0200");
Found : user_pref("CT2431245.usageEnabled", false);
Found : user_pref("CT2431245.usagesFlag", 2);
Found : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2431245,CT2269050,CT2206084,CT2102572");
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/518348/514218/DE", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/604380/600242/DE", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/666138/661999/DE", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/825452/821260/DE", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2102572", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2206084", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2431245", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2102572",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2206084",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2431245",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2102572&octid=[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2206084&octid=[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2269050&octid=[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2431245&octid=[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2102572/CT2102572[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2206084/CT2206084[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2269050/CT2269050[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2431245/CT2431245[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"634[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de-de", "\"[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16409683.xml", "\"1a384490966b462b272[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16727535.xml", "\"d879280c813d5b51c05[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/18863815.xml", "\"d49774327a1f6362739[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19058681.xml", "\"d38dbd09bcb7ca21206[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19248106.xml", "\"c9219d560178a4b8763[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19554706.xml", "\"c34be92bc13970c6ffa[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml", "\"0c869988559671eb0ef35[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/807095.xml", "\"8383a0e974da7233f6669[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/813286.xml", "\"40de96c74dfa6d307ae39[...]
Found : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");
Found : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");
Found : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");
Found : user_pref("CommunityToolbar.IsEngineShown", true);
Found : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Dankesreiter\\AppData\\Roaming\\Moz[...]
Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.5.0.12");
Found : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://s3-eu-west-1.amazonaws.com/tbe/974fed26-albam[...]
Found : user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine");
Found : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com");
Found : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine");
Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.icq.com/search/afe_results[...]
Found : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2269050,CT2431245,CT2206084,CT2102572");
Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050,CT2431245,CT2206084,CT2102572");
Found : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue Mar 22 2011 17:59:26 GMT+01[...]
Found : user_pref("CommunityToolbar.alert.alertEnabled", true);
Found : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Found : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jul 02 2011 13:10:53 GMT+0200");
Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.alert.locale", "en");
Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Jul 17 2011 15:31:30 GMT+0200");
Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.alert.userId", "939eae73-3a2b-4d6f-a000-dde77144cc95");
Found : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Aug 23 2011 19:26:03 GMT+0200");
Found : user_pref("CommunityToolbar.globalUserId", "bb0a6943-1d53-4b26-92fc-f3afd3a31c47");
Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Aug 20 2011 20:03:3[...]
Found : user_pref("CommunityToolbar.notifications.alertEnabled", false);
Found : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Found : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Aug 23 2011 19:25:57 GMT+020[...]
Found : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.notifications.locale", "en");
Found : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Found : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue Aug 23 2011 19:25:43 GMT+0200");
Found : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Found : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Found : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.notifications.userId", "332f33c0-6ea6-45a2-ba2d-923862d53af9");
Found : user_pref("CommunityToolbar.twitter.user_16409683.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_16727535.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_18863815.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_19058681.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_19248106.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_19554706.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_19757371.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200")[...]
Found : user_pref("CommunityToolbar.twitter.user_807095.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200")[...]
Found : user_pref("CommunityToolbar.twitter.user_813286.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200")[...]
Found : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Mon Jun 06 2011 15:34:48 GMT+0200");
Found : user_pref("ConduitEngine.CTID", "ConduitEngine");
Found : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Mon Jul 04 2011 20:46:50 GMT+0200");
Found : user_pref("ConduitEngine.FirstServerDate", "03/04/2011 17");
Found : user_pref("ConduitEngine.FirstTime", true);
Found : user_pref("ConduitEngine.FirstTimeFF3", true);
Found : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Found : user_pref("ConduitEngine.Initialize", true);
Found : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Found : user_pref("ConduitEngine.InstalledDate", "Fri Mar 04 2011 15:41:14 GMT+0100");
Found : user_pref("ConduitEngine.IsMulticommunity", false);
Found : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Found : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Found : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Mon Jul 04 2011 20:45:41 GMT+0200");
Found : user_pref("ConduitEngine.LastLogin_3.2.5.2", "Sat Mar 19 2011 12:50:08 GMT+0100");
Found : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Mon Jul 04 2011 20:45:44 GMT+0200");
Found : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Found : user_pref("ConduitEngine.SettingsLastCheckTime", "Mon Jul 04 2011 20:45:47 GMT+0200");
Found : user_pref("ConduitEngine.UserID", "UN06558719254291434");
Found : user_pref("ConduitEngine.componentAlertEnabled", true);
Found : user_pref("ConduitEngine.engineLocale", "de");
Found : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Mon Jul 04 2011 20:45:42 GMT+0200");
Found : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Mon Jul 04 2011 20:45:41 GMT+0200");
Found : user_pref("ConduitEngine.initDone", true);
Found : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Found : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Found : user_pref("browser.search.defaultengine", "Ask.com");
Found : user_pref("browser.search.defaultthis.engineName", "Softonic Deutsch FF Customized Web Search");
Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2206084&Sea[...]
Found : user_pref("browser.startup.homepage", "hxxp://start.funmoods.com/?f=1&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L[...]
Found : user_pref("extensions.BabylonToolbar.cntry", "DE");
Found : user_pref("extensions.BabylonToolbar.firstRun", false);
Found : user_pref("extensions.BabylonToolbar.hdrMd5", "4C9BBEEB9A88E911F80543C0A370D841");
Found : user_pref("extensions.BabylonToolbar.lastActv", "17");
Found : user_pref("extensions.asktb.InstallDir", "C:\\Program Files\\Ask.com\\");
Found : user_pref("extensions.asktb.abar-war-timeout", "4000");
Found : user_pref("extensions.asktb.cbid", "PV");
Found : user_pref("extensions.asktb.config-updated", false);
Found : user_pref("extensions.asktb.crumb", "");
Found : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://de.ask.com/web?q={query}&qsrc={qsrc}&[...]
Found : user_pref("extensions.asktb.dtid", "YYYYYYYYDE");
Found : user_pref("extensions.asktb.dyn-weather-do-locid-lookup-weatherWidget", false);
Found : user_pref("extensions.asktb.dyn-weather-locid-weatherWidget", "GMXX0223");
Found : user_pref("extensions.asktb.dyn-weather-tempunit-weatherWidget", "C");
Found : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://de.search.yahoo.com/search?fr=greentre[...]
Found : user_pref("extensions.asktb.first-launch-url", "hxxps://www.regnow.com/softsell/nph-softsell.cgi?ite[...]
Found : user_pref("extensions.asktb.fresh-install", false);
Found : user_pref("extensions.asktb.guid", "42442BE4-D9AC-494D-AD8C-AEC9F1D8A4C2");
Found : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com[...]
Found : user_pref("extensions.asktb.if", "su");
Found : user_pref("extensions.asktb.l", "dis");
Found : user_pref("extensions.asktb.last-config-req", "1314120329875");
Found : user_pref("extensions.asktb.last-search-timestamp", "1303854738229");
Found : user_pref("extensions.asktb.last-v", "3.11.3.100005");
Found : user_pref("extensions.asktb.locale", "de_DE");
Found : user_pref("extensions.asktb.location", "Regensburg,Germany");
Found : user_pref("extensions.asktb.o", "15000");
Found : user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Found : user_pref("extensions.asktb.qsrc", "2871");
Found : user_pref("extensions.asktb.r", "4");
Found : user_pref("extensions.asktb.sa", "YES");
Found : user_pref("extensions.asktb.saguid", "83F71ECC-B18F-4949-9792-1001F164800F");
Found : user_pref("extensions.asktb.search-suggestions-enabled", true);
Found : user_pref("extensions.asktb.silent-upgrade", true);
Found : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", true);
Found : user_pref("extensions.asktb.socialmini-first", true);
Found : user_pref("extensions.asktb.socialmini-interval", "1200000");
Found : user_pref("extensions.asktb.socialmini-max-char-ticker", "33");
Found : user_pref("extensions.asktb.socialmini-max-items", "30");
Found : user_pref("extensions.asktb.socialmini-native-on", true);
Found : user_pref("extensions.asktb.socialmini-speed", "5000");
Found : user_pref("extensions.asktb.socialmini-transition-first-open", false);
Found : user_pref("extensions.asktb.themeid", "");
Found : user_pref("extensions.asktb.v", "3.11.3.100006");
Found : user_pref("extensions.asktb.version", "5.11.3.15590");
Found : user_pref("extensions.enabledAddons", "{EEE6C361-6118-11DC-9C72-001320C79847}:1.2.0.2,{872b5b88-9db5[...]
Found : user_pref("extensions.facemoods.aflt", "_#stonicde");
Found : user_pref("extensions.facemoods.firstRun", false);
Found : user_pref("extensions.facemoods.lastActv", "17");
Found : user_pref("extensions.vshare@toolbar.update.enabled", false);
Found : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Found : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Found : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Found : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Found : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Found : user_pref("sweetim.toolbar.mode.debug", "false");
Found : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://de.search.yahoo.com/search?fr=greentree_ff[...]
Found : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Found : user_pref("sweetim.toolbar.search.history.capacity", "10");
Found : user_pref("sweetim.toolbar.simapp_id", "{618B8246-6F32-11E0-9A0A-001C252E9461}");
Found : user_pref("vshare.install.date", "1300579200000");
Found : user_pref("vshare.install.finished", "1.0.0");
Found : user_pref("vshare.install.guid", "{7a867ea7-821b-4d8a-afac-89b3cae007b8}");
Found : user_pref("vshare.install.istoolbarhp", true);
Found : user_pref("vshare.install.istoolbarsearch", true);
Found : user_pref("vshare.install.laststatreq", "1310860800000");
Found : user_pref("vshare.install.newtab", true);
Found : user_pref("vshare.install.overlayVersion", 1);
Found : user_pref("backup.old.browser.startup.homepage", "hxxp://search.babylon.com/?babsrc=HP_ss&affID=1006[...]

-\\ Google Chrome v19.0.1084.52

File : C:\Users\Dankesreiter\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found : "update_url": "hxxp://funmoods.com/public/download/chrome/update.xml",
Found : "description": "The plug-in from the General-Crawler.com website which lets the users[...]
Found : "homepage_url": "hxxp://www.general-crawler.com",
Found : "name": "General Crawler",
Found : "update_url": "hxxp://1.update.general-crawler.com/updates/update_chrome.xml",
Found : "name": "Funmoods",
Found : "update_url": "hxxp://funmoods.com/public/download/chrome/update.xml",

-\\ Opera v11.64.1403.0

File : C:\Users\Dankesreiter\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [94326 octets] - [05/06/2012 12:09:54]

########## EOF - C:\AdwCleaner[R1].txt - [94455 octets] ##########
mfg

Psychotic · 05.06.2012, 14:57

Schritt 1: Fix mit AdwCleaner

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Delete.
Bestätige jeweils mit Ok.
Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.

Schritt 2: Combofix

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

kunz123 · 05.06.2012, 20:52

hallo,
der awd cleaner hat ganz normal fuktioniert, aber mit combofix habe ich ein problem. bei den ersten paar mal bin ich nie zum sytemwiederherstellungspunkt gekommen. Dann irgendwann habe ich es geschafft musste das programm aber beenden, weil ich einen termin hatte. danach habe ich es wieder versucht und bin wieder nicht bis dahin gekommen. gibt es da irgendein problem oder soll ich es eimfach später wieder versuchen.
mfg
awdfile:
# AdwCleaner v1.608 - Logfile created 06/05/2012 at 19:41:18
# Updated 27/05/2012 by Xplode
# Operating system : Windows Vista (TM) Home Premium (32 bits)
# User : Dankesreiter - DANKESREITER-PC
# Running from : C:\Users\Dankesreiter\Desktop\adwcleaner.exe
# Option [Delete]

***** [Services] *****

***** [Files / Folders] *****

Folder Deleted : C:\Users\Dankesreiter\AppData\Local\Conduit
Folder Deleted : C:\Users\Dankesreiter\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki
Folder Deleted : C:\Users\Dankesreiter\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Folder Deleted : C:\Users\Dankesreiter\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\Dankesreiter\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Dankesreiter\AppData\LocalLow\facemoods.com
Folder Deleted : C:\Users\Dankesreiter\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Dankesreiter\AppData\LocalLow\ShoppingReport2
Folder Deleted : C:\Users\Dankesreiter\AppData\LocalLow\Toolbar4
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Ask.com
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\BrowserCompanion
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Media Finder
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\Conduit
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\ConduitCommon
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\ConduitEngine
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\SweetIMToolbarData
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\crossriderapp2258@crossrider.com
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\engine@conduit.com
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\ffxtlbr@babylon.com
Folder Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\extensions\ffxtlbr@funmoods.com
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder
File Deleted : C:\Users\Dankesreiter\AppData\Local\funmoods.crx
File Deleted : C:\Users\Dankesreiter\AppData\Local\funmoods-speeddial.crx
File Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\searchplugins\Askcom.xml
File Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\searchplugins\Conduit.xml
File Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\searchplugins\Startsear.xml
File Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\searchplugins\SweetIm.xml
File Deleted : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\searchplugins\web-search.xml
File Deleted : C:\Windows\system32\conduitEngine.tmp

***** [Registry] *****
[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2102572[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2206084[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2269050[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2431245
Key Deleted : HKCU\Software\APN DTX
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\Cr_Installer
Key Deleted : HKCU\Software\MediaFinder
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\SweetIm
Key Deleted : HKCU\Software\Zugo
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\ShoppingReport2
Key Deleted : HKLM\SOFTWARE\Babylon
Key Deleted : HKLM\SOFTWARE\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Dealio
Key Deleted : HKLM\SOFTWARE\Iminent
Key Deleted : HKLM\SOFTWARE\Incredibar.com
Key Deleted : HKLM\SOFTWARE\QuestScan
Key Deleted : HKLM\SOFTWARE\SweetIM
Key Deleted : HKLM\SOFTWARE\Tarma Installer
Key Deleted : HKLM\SOFTWARE\Classes\b
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\ClickPotatoLiteAX.UserProfiles
Key Deleted : HKLM\SOFTWARE\Classes\ClickPotatoLiteAX.UserProfiles.1
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\Dealio.DealioBHO
Key Deleted : HKLM\SOFTWARE\Classes\Dealio.DealioBHO.1
Key Deleted : HKLM\SOFTWARE\Classes\Dealio.DealioSearch
Key Deleted : HKLM\SOFTWARE\Classes\Dealio.DealioSearch.1
Key Deleted : HKLM\SOFTWARE\Classes\Dealio.DealioToolbar
Key Deleted : HKLM\SOFTWARE\Classes\Dealio.DealioToolbar.1
Key Deleted : HKLM\SOFTWARE\Classes\Dealio.DealioToolbarHelper
Key Deleted : HKLM\SOFTWARE\Classes\Dealio.DealioToolbarHelper.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\f
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\gencrawler_gc.GenCrawler
Key Deleted : HKLM\SOFTWARE\Classes\MF
Key Deleted : HKLM\SOFTWARE\Classes\MenuButtonIE.ButtonIE.1
Key Deleted : HKLM\SOFTWARE\Classes\MenuButtonIE.ButtonIE
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx.1
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand.1
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton.1
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA.1
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\MenuButtonIE.DLL
Key Deleted : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{D0C73318-7B4A-4D16-A0C4-3B83F075EA88}
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lpmkgpnbiojfaoklbkpfneikocaobfai
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\facemoods
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Media Finder]

***** [Registre - GUID] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D2083641-E57F-4EAB-BB85-0582424F4A29}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C00A371-2011-4AF3-97C8-6CE66AA744CB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6A87B991-A31F-4130-AE72-6D0C294BF082}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F038672-0425-4792-BC9C-36DE3308E8AA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA4520F3-AE13-4FB1-A513-58E23991C86D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03C390E8-B836-4B82-8D56-1BFDDC06AE8A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2C4470A2-E099-4B9E-ABFE-BBA56D046AFD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{391769AE-D8EC-45EC-967D-F5120456E514}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{39AEF150-C270-4690-AE7D-955E51BC8960}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3EDDA953-1C3B-4823-8F25-D075FBB2D2B5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B67A4CBA-520A-43DB-B03F-414E539F90EC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CD73B1AB-3403-4E47-B196-517C57BE76A2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4C1E5902-FE99-4591-8582-2A2605462857}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65BCD620-07DD-012F-819F-073CF1B8F7C6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B9C7CE32-DA91-43C2-B7E9-0E9AAFC675CD}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA4520F3-AE13-4FB1-A513-58E23991C86D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6A87B991-A31F-4130-AE72-6D0C294BF082}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E908B145-C847-4E85-B315-07E2E70DECF8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6A87B991-A31F-4130-AE72-6D0C294BF082}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA4520F3-AE13-4FB1-A513-58E23991C86D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E908B145-C847-4E85-B315-07E2E70DECF8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35D-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{043C5167-00BB-4324-AF7E-62013FAEDACF}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18882

Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.funmoods.com/?f=1&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzuzztDtC0FtDtBtA0A0EzytByB0DtDtAzztN0D0TzutBtDtCtBtDyCtDtC&cr=1195242171 --> hxxp://www.google.fr
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.funmoods.com/?f=1&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzuzztDtC0FtDtBtA0A0EzytByB0DtDtAzztN0D0TzutBtDtCtBtDyCtDtC&cr=1195242171 --> hxxp://www.google.fr
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Backup.Old.Start Page] = hxxp://www.bigseekpro.com/serialkeygenerator/{E57D463F-86CE-4DEC-8222-AD17F934C33F} --> hxxp://www.google.fr

-\\ Mozilla Firefox v [Unable to get version]

Profile name : default
File : C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\prefs.js

C:\Users\Dankesreiter\AppData\Roaming\Mozilla\Firefox\Profiles\zjb5pq3m.default\user.js ... Deleted !

Deleted : user_pref("CT2102572..clientLogIsEnabled", true);
Deleted : user_pref("CT2102572..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2102572..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2102572.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2102572.AppTrackingLastCheckTime", "Mon Jun 13 2011 11:43:52 GMT+0200");
Deleted : user_pref("CT2102572.CTID", "CT2102572");
Deleted : user_pref("CT2102572.CurrentServerDate", "24-8-2011");
Deleted : user_pref("CT2102572.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2102572.DialogsGetterLastCheckTime", "Tue Aug 23 2011 19:26:20 GMT+0200");
Deleted : user_pref("CT2102572.DownloadReferralCookieData", "");
Deleted : user_pref("CT2102572.EMailNotifierPollDate", "Tue Aug 23 2011 19:26:02 GMT+0200");
Deleted : user_pref("CT2102572.EnableClickToSearchBox", false);
Deleted : user_pref("CT2102572.EnableSearchHistory", false);
Deleted : user_pref("CT2102572.EnableSearchSuggest", false);
Deleted : user_pref("CT2102572.ExternalComponentPollDate128980152151612826", "Tue Aug 23 2011 19:26:02 GMT+020[...]
Deleted : user_pref("CT2102572.ExternalComponentPollDate129010430308906809", "Tue Aug 23 2011 19:26:02 GMT+020[...]
Deleted : user_pref("CT2102572.ExternalComponentPollDate129241049870851286", "Tue Aug 23 2011 19:26:02 GMT+020[...]
Deleted : user_pref("CT2102572.FeedLastCount128731380714969334", 609);
Deleted : user_pref("CT2102572.FeedLastCount129318697243744006", 450);
Deleted : user_pref("CT2102572.FeedPollDate128734848660238153", "Tue Aug 23 2011 19:26:35 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734848780081259", "Tue Aug 23 2011 19:26:35 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734848899768760", "Tue Aug 23 2011 19:26:35 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734849162893952", "Tue Aug 23 2011 19:26:36 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734849298831492", "Tue Aug 23 2011 19:26:36 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734849447894294", "Tue Aug 23 2011 19:26:36 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734849563988162", "Tue Aug 23 2011 19:26:36 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734849694613310", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734849871644036", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734850012112791", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734850140238024", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734850329613306", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734851254769189", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734851343519240", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734851486175530", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734851555550653", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734851626019450", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128734851705082013", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate128737465108387945", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate129318697244837786", "Tue Aug 23 2011 19:26:35 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate129318697244837787", "Tue Aug 23 2011 19:26:35 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate129318697244837788", "Tue Aug 23 2011 19:26:35 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate129318697244837789", "Tue Aug 23 2011 19:26:36 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate129318697244837790", "Tue Aug 23 2011 19:26:36 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate129318697244837791", "Tue Aug 23 2011 19:26:36 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate129318697244837792", "Tue Aug 23 2011 19:26:36 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate129318697244837793", "Tue Aug 23 2011 19:26:36 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate129318697244837794", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2102572.FeedPollDate129318697244837795", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2102572.FeedTTL128734849162893952", 2);
Deleted : user_pref("CT2102572.FeedTTL128734849563988162", 30);
Deleted : user_pref("CT2102572.FeedTTL128734849694613310", 5);
Deleted : user_pref("CT2102572.FeedTTL128734850012112791", 30);
Deleted : user_pref("CT2102572.FeedTTL128737465108387945", 5);
Deleted : user_pref("CT2102572.FeedTTL129318697244837786", 40);
Deleted : user_pref("CT2102572.FeedTTL129318697244837787", 40);
Deleted : user_pref("CT2102572.FeedTTL129318697244837788", 40);
Deleted : user_pref("CT2102572.FeedTTL129318697244837789", 40);
Deleted : user_pref("CT2102572.FeedTTL129318697244837790", 40);
Deleted : user_pref("CT2102572.FeedTTL129318697244837791", 40);
Deleted : user_pref("CT2102572.FeedTTL129318697244837792", 40);
Deleted : user_pref("CT2102572.FeedTTL129318697244837793", 40);
Deleted : user_pref("CT2102572.FeedTTL129318697244837795", 40);
Deleted : user_pref("CT2102572.FirstServerDate", "26-4-2011");
Deleted : user_pref("CT2102572.FirstTime", true);
Deleted : user_pref("CT2102572.FirstTimeFF3", true);
Deleted : user_pref("CT2102572.FixPageNotFoundErrors", false);
Deleted : user_pref("CT2102572.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2102572.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2102572.HasUserGlobalKeys", true);
Deleted : user_pref("CT2102572.HomePageProtectorEnabled", false);
Deleted : user_pref("CT2102572.Initialize", true);
Deleted : user_pref("CT2102572.InitializeCommonPrefs", true);
Deleted : user_pref("CT2102572.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2102572.InstallationType", "UnknownIntegration");
Deleted : user_pref("CT2102572.InstalledDate", "Tue Apr 26 2011 18:14:34 GMT+0200");
Deleted : user_pref("CT2102572.InvalidateCache", false);
Deleted : user_pref("CT2102572.IsAlertDBUpdated", true);
Deleted : user_pref("CT2102572.IsGrouping", false);
Deleted : user_pref("CT2102572.IsMulticommunity", false);
Deleted : user_pref("CT2102572.IsOpenThankYouPage", true);
Deleted : user_pref("CT2102572.IsOpenUninstallPage", true);
Deleted : user_pref("CT2102572.LanguagePackLastCheckTime", "Tue Aug 23 2011 19:26:05 GMT+0200");
Deleted : user_pref("CT2102572.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2102572.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2102572.LastLogin_3.3.3.2", "Mon Jul 04 2011 20:45:34 GMT+0200");
Deleted : user_pref("CT2102572.LastLogin_3.5.0.12", "Wed Aug 24 2011 14:12:49 GMT+0200");
Deleted : user_pref("CT2102572.LatestVersion", "3.6.0.10");
Deleted : user_pref("CT2102572.Locale", "de");
Deleted : user_pref("CT2102572.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2102572.MCDetectTooltipShow", false);
Deleted : user_pref("CT2102572.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2102572.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2102572.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2102572.RadioIsPodcast", false);
Deleted : user_pref("CT2102572.RadioLastCheckTime", "Tue Aug 23 2011 19:26:35 GMT+0200");
Deleted : user_pref("CT2102572.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2102572.RadioLastUpdateServer", "128929877726170000");
Deleted : user_pref("CT2102572.RadioMediaID", "9512588");
Deleted : user_pref("CT2102572.RadioMediaType", "Media Player");
Deleted : user_pref("CT2102572.RadioMenuSelectedID", "EBRadioMenu_CT21025729512588");
Deleted : user_pref("CT2102572.RadioShrinkedFromSetup", false);
Deleted : user_pref("CT2102572.RadioStationName", "Antenne%20Bayern%20Top%2040%20");
Deleted : user_pref("CT2102572.RadioStationURL", "hxxp://channels.webradio.antenne.de/top-40");
Deleted : user_pref("CT2102572.SearchBackToDefaultEngine", false);
Deleted : user_pref("CT2102572.SearchEngineBeforeUnload", "Ask.com");
Deleted : user_pref("CT2102572.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2102572.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT210[...]
Deleted : user_pref("CT2102572.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2102572.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2102572.SearchInNewTabLastCheckTime", "Tue Aug 23 2011 19:25:58 GMT+0200");
Deleted : user_pref("CT2102572.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2102572.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2102572.SearchInNewTabUserEnabled", false);
Deleted : user_pref("CT2102572.SearchProtectorEnabled", false);
Deleted : user_pref("CT2102572.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2102572.ServiceMapLastCheckTime", "Tue Aug 23 2011 19:26:03 GMT+0200");
Deleted : user_pref("CT2102572.SettingsLastCheckTime", "Wed Aug 24 2011 14:12:40 GMT+0200");
Deleted : user_pref("CT2102572.SettingsLastUpdate", "1313573337");
Deleted : user_pref("CT2102572.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2102572.ThirdPartyComponentsLastCheck", "Thu Aug 11 2011 14:15:22 GMT+0200");
Deleted : user_pref("CT2102572.ThirdPartyComponentsLastUpdate", "1255344657");
Deleted : user_pref("CT2102572.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT2102572.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2102572");
Deleted : user_pref("CT2102572.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT2102572.UserID", "UN67167533912499875");
Deleted : user_pref("CT2102572.ValidationData_Toolbar", 0);
Deleted : user_pref("CT2102572.WeatherNetwork", "");
Deleted : user_pref("CT2102572.WeatherPollDate", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2102572.WeatherUnit", "C");
Deleted : user_pref("CT2102572.alertChannelId", "518348");
Deleted : user_pref("CT2102572.approveUntrustedApps", true);
Deleted : user_pref("CT2102572.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E");
Deleted : user_pref("CT2102572.componentAlertEnabled", false);
Deleted : user_pref("CT2102572.components.1000034", false);
Deleted : user_pref("CT2102572.components.1000082", false);
Deleted : user_pref("CT2102572.components.1000234", false);
Deleted : user_pref("CT2102572.components.128721053378556957", false);
Deleted : user_pref("CT2102572.components.128731375052312982", false);
Deleted : user_pref("CT2102572.components.128731380714969334", false);
Deleted : user_pref("CT2102572.components.128734807813831999", false);
Deleted : user_pref("CT2102572.components.128878100730731381", false);
Deleted : user_pref("CT2102572.components.128891037404994663", false);
Deleted : user_pref("CT2102572.components.128980152151612826", false);
Deleted : user_pref("CT2102572.components.129000685616787636", false);
Deleted : user_pref("CT2102572.components.129010430308906809", false);
Deleted : user_pref("CT2102572.components.129241049303820928", false);
Deleted : user_pref("CT2102572.components.129241049870851286", false);
Deleted : user_pref("CT2102572.components.129318697243744006", false);
Deleted : user_pref("CT2102572.components.129318698894212717", false);
Deleted : user_pref("CT2102572.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT2102572.globalFirstTimeInfoLastCheckTime", "Wed Aug 24 2011 14:12:52 GMT+0200");
Deleted : user_pref("CT2102572.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT2102572.initDone", true);
Deleted : user_pref("CT2102572.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2102572.isFirstRadioInstallation", false);
Deleted : user_pref("CT2102572.myStuffEnabled", true);
Deleted : user_pref("CT2102572.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2102572.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2102572.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2102572.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2102572.oldAppsList", "128719124367600658,128719124391506909,111,129241049303820928,129[...]
Deleted : user_pref("CT2102572.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT2102572.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT2102572.testingCtid", "");
Deleted : user_pref("CT2102572.toolbarAppMetaDataLastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200");
Deleted : user_pref("CT2102572.toolbarContextMenuLastCheckTime", "Thu Aug 11 2011 14:15:41 GMT+0200");
Deleted : user_pref("CT2102572.usageEnabled", false);
Deleted : user_pref("CT2102572.usagesFlag", 2);
Deleted : user_pref("CT2206084..clientLogIsEnabled", false);
Deleted : user_pref("CT2206084..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2206084..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2206084.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2206084.AppTrackingLastCheckTime", "Wed Aug 24 2011 14:18:36 GMT+0200");
Deleted : user_pref("CT2206084.BrowserCompStateIsOpen_129453390520131510", true);
Deleted : user_pref("CT2206084.CT2206084", "CT2206084");
Deleted : user_pref("CT2206084.CurrentServerDate", "24-8-2011");
Deleted : user_pref("CT2206084.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2206084.DialogsGetterLastCheckTime", "Tue Aug 23 2011 19:26:51 GMT+0200");
Deleted : user_pref("CT2206084.DownloadReferralCookieData", "");
Deleted : user_pref("CT2206084.EMailNotifierPollDate", "Tue Aug 23 2011 19:26:12 GMT+0200");
Deleted : user_pref("CT2206084.EnableClickToSearchBox", false);
Deleted : user_pref("CT2206084.EnableSearchHistory", false);
Deleted : user_pref("CT2206084.EnableSearchSuggest", false);
Deleted : user_pref("CT2206084.FeedLastCount128311388426518939", 1124);
Deleted : user_pref("CT2206084.FeedPollDate128394382574669410", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128394382574669411", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128394382574669412", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128394382574669413", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128394382574669414", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128559429569307240", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801410134769526", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801410271643768", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801410648675207", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801410803831945", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801411020863399", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801411145707150", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801411258362590", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801411369456587", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801411490081588", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801411659613144", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801411801956980", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128801411974300317", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128895535588356636", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128895536575232020", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128895541734450320", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128896127456250507", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128896133101250708", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128896136655781447", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128896138140469441", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2206084.FeedPollDate128896149451719443", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2206084.FeedTTL128801410648675207", 2);
Deleted : user_pref("CT2206084.FeedTTL128801411145707150", 30);
Deleted : user_pref("CT2206084.FeedTTL128801411258362590", 5);
Deleted : user_pref("CT2206084.FeedTTL128801411490081588", 30);
Deleted : user_pref("CT2206084.FeedTTL128801411974300317", 5);
Deleted : user_pref("CT2206084.FeedTTL128895535588356636", 5);
Deleted : user_pref("CT2206084.FeedTTL128896138140469441", 2);
Deleted : user_pref("CT2206084.FirstServerDate", "30-3-2011");
Deleted : user_pref("CT2206084.FirstTime", true);
Deleted : user_pref("CT2206084.FirstTimeFF3", true);
Deleted : user_pref("CT2206084.FixPageNotFoundErrors", false);
Deleted : user_pref("CT2206084.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2206084.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2206084.HasUserGlobalKeys", true);
Deleted : user_pref("CT2206084.HomePageProtectorEnabled", false);
Deleted : user_pref("CT2206084.Initialize", true);
Deleted : user_pref("CT2206084.InitializeCommonPrefs", true);
Deleted : user_pref("CT2206084.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2206084.InstalledDate", "Wed Mar 30 2011 17:15:12 GMT+0200");
Deleted : user_pref("CT2206084.InvalidateCache", false);
Deleted : user_pref("CT2206084.IsAlertDBUpdated", true);
Deleted : user_pref("CT2206084.IsGrouping", false);
Deleted : user_pref("CT2206084.IsMulticommunity", false);
Deleted : user_pref("CT2206084.IsOpenThankYouPage", true);
Deleted : user_pref("CT2206084.IsOpenUninstallPage", true);
Deleted : user_pref("CT2206084.LanguagePackLastCheckTime", "Tue Aug 23 2011 19:26:39 GMT+0200");
Deleted : user_pref("CT2206084.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2206084.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2206084.LastLogin_3.3.3.2", "Sun Jul 17 2011 15:31:48 GMT+0200");
Deleted : user_pref("CT2206084.LastLogin_3.6.0.10", "Wed Aug 24 2011 14:18:27 GMT+0200");
Deleted : user_pref("CT2206084.LatestVersion", "3.5.0.12");
Deleted : user_pref("CT2206084.Locale", "de-de");
Deleted : user_pref("CT2206084.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2206084.MCDetectTooltipShow", false);
Deleted : user_pref("CT2206084.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2206084.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2206084.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2206084.RadioIsPodcast", false);
Deleted : user_pref("CT2206084.RadioLastCheckTime", "Tue Aug 23 2011 19:26:40 GMT+0200");
Deleted : user_pref("CT2206084.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2206084.RadioLastUpdateServer", "128939446421370000");
Deleted : user_pref("CT2206084.RadioMediaID", "10559111");
Deleted : user_pref("CT2206084.RadioMediaType", "Media Player");
Deleted : user_pref("CT2206084.RadioMenuSelectedID", "EBRadioMenu_CT220608410559111");
Deleted : user_pref("CT2206084.RadioShrinkedFromSetup", false);
Deleted : user_pref("CT2206084.RadioStationName", "Antenne%20Bayern%20Top%2040");
Deleted : user_pref("CT2206084.RadioStationURL", "hxxp://channels.webradio.antenne.de/top-40");
Deleted : user_pref("CT2206084.SavedHomepage", "hxxp://vshare.toolbarhome.com/?hp=df");
Deleted : user_pref("CT2206084.SearchBackToDefaultEngine", false);
Deleted : user_pref("CT2206084.SearchEngineBeforeUnload", "Ask.com");
Deleted : user_pref("CT2206084.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2206084.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT220[...]
Deleted : user_pref("CT2206084.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2206084.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2206084.SearchInNewTabLastCheckTime", "Tue Aug 23 2011 19:26:11 GMT+0200");
Deleted : user_pref("CT2206084.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2206084.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2206084.SearchInNewTabUserEnabled", false);
Deleted : user_pref("CT2206084.SearchProtectorEnabled", false);
Deleted : user_pref("CT2206084.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2206084.ServiceMapLastCheckTime", "Tue Aug 23 2011 19:26:19 GMT+0200");
Deleted : user_pref("CT2206084.SettingsLastCheckTime", "Wed Aug 24 2011 14:18:23 GMT+0200");
Deleted : user_pref("CT2206084.SettingsLastUpdate", "1312118247");
Deleted : user_pref("CT2206084.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2206084.ThirdPartyComponentsLastCheck", "Thu Aug 11 2011 14:15:38 GMT+0200");
Deleted : user_pref("CT2206084.ThirdPartyComponentsLastUpdate", "1255348257");
Deleted : user_pref("CT2206084.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT2206084.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2206084");
Deleted : user_pref("CT2206084.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT2206084.UserID", "UN50318706847251577");
Deleted : user_pref("CT2206084.ValidationData_Toolbar", 0);
Deleted : user_pref("CT2206084.WeatherNetwork", "");
Deleted : user_pref("CT2206084.WeatherPollDate", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2206084.WeatherUnit", "C");
Deleted : user_pref("CT2206084.alertChannelId", "604380");
Deleted : user_pref("CT2206084.approveUntrustedApps", true);
Deleted : user_pref("CT2206084.backendstorage.for_aoi", "31333036303935333530");
Deleted : user_pref("CT2206084.backendstorage.for_ccid", "5261746973626F6E");
Deleted : user_pref("CT2206084.backendstorage.for_cdtr5", "31333036303935333530");
Deleted : user_pref("CT2206084.backendstorage.for_cid", "4445");
Deleted : user_pref("CT2206084.backendstorage.for_ip", "38372E3136302E37302E313435");
Deleted : user_pref("CT2206084.backendstorage.for_lcut", "31333134313230343136");
Deleted : user_pref("CT2206084.backendstorage.for_pid", "31303130");
Deleted : user_pref("CT2206084.backendstorage.for_rid", "3032");
Deleted : user_pref("CT2206084.backendstorage.for_zoneid", "39363331");
Deleted : user_pref("CT2206084.componentAlertEnabled", false);
Deleted : user_pref("CT2206084.components.1000034", false);
Deleted : user_pref("CT2206084.components.1000082", false);
Deleted : user_pref("CT2206084.components.1000234", false);
Deleted : user_pref("CT2206084.components.128311388426518939", false);
Deleted : user_pref("CT2206084.components.128394149676563280", false);
Deleted : user_pref("CT2206084.components.128795241664163022", false);
Deleted : user_pref("CT2206084.components.128952322938437928", false);
Deleted : user_pref("CT2206084.components.128963628988794044", false);
Deleted : user_pref("CT2206084.components.129350935210162825", false);
Deleted : user_pref("CT2206084.components.129453390520131510", false);
Deleted : user_pref("CT2206084.components.129502776319825857", false);
Deleted : user_pref("CT2206084.components.241910600392622828", false);
Deleted : user_pref("CT2206084.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT2206084.globalFirstTimeInfoLastCheckTime", "Wed Aug 24 2011 14:18:29 GMT+0200");
Deleted : user_pref("CT2206084.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT2206084.initDone", true);
Deleted : user_pref("CT2206084.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2206084.isFirstRadioInstallation", false);
Deleted : user_pref("CT2206084.myStuffEnabled", true);
Deleted : user_pref("CT2206084.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2206084.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2206084.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2206084.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2206084.oldAppsList", "128325851945531999,128541998593412748,111,128952322938437928,100[...]
Deleted : user_pref("CT2206084.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT2206084.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT2206084.testingCtid", "");
Deleted : user_pref("CT2206084.toolbarAppMetaDataLastCheckTime", "Tue Aug 23 2011 19:26:28 GMT+0200");
Deleted : user_pref("CT2206084.toolbarContextMenuLastCheckTime", "Thu Aug 11 2011 14:16:19 GMT+0200");
Deleted : user_pref("CT2206084.usageEnabled", false);
Deleted : user_pref("CT2206084.usagesFlag", 2);
Deleted : user_pref("CT2269050..clientLogIsEnabled", true);
Deleted : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2269050.AppTrackingLastCheckTime", "Tue Aug 23 2011 19:26:03 GMT+0200");
Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_129575150554007677", true);
Deleted : user_pref("CT2269050.CTID", "CT2269050");
Deleted : user_pref("CT2269050.CurrentServerDate", "24-8-2011");
Deleted : user_pref("CT2269050.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2269050.DialogsGetterLastCheckTime", "Wed Aug 24 2011 14:12:53 GMT+0200");
Deleted : user_pref("CT2269050.DownloadReferralCookieData", "");
Deleted : user_pref("CT2269050.EMailNotifierPollDate", "Tue Aug 23 2011 19:31:04 GMT+0200");
Deleted : user_pref("CT2269050.EnableClickToSearchBox", false);
Deleted : user_pref("CT2269050.EnableSearchHistory", false);
Deleted : user_pref("CT2269050.EnableSearchSuggest", false);
Deleted : user_pref("CT2269050.FirstServerDate", "7-3-2011");
Deleted : user_pref("CT2269050.FirstTime", true);
Deleted : user_pref("CT2269050.FirstTimeFF3", true);
Deleted : user_pref("CT2269050.FixPageNotFoundErrors", false);
Deleted : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2269050.HasUserGlobalKeys", true);
Deleted : user_pref("CT2269050.HomePageProtectorEnabled", false);
Deleted : user_pref("CT2269050.Initialize", true);
Deleted : user_pref("CT2269050.InitializeCommonPrefs", true);
Deleted : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2269050.InstallationType", "UnknownIntegration");
Deleted : user_pref("CT2269050.InstalledDate", "Mon Mar 07 2011 15:45:51 GMT+0100");
Deleted : user_pref("CT2269050.InvalidateCache", false);
Deleted : user_pref("CT2269050.IsAlertDBUpdated", true);
Deleted : user_pref("CT2269050.IsGrouping", false);
Deleted : user_pref("CT2269050.IsMulticommunity", false);
Deleted : user_pref("CT2269050.IsOpenThankYouPage", false);
Deleted : user_pref("CT2269050.IsOpenUninstallPage", false);
Deleted : user_pref("CT2269050.LanguagePackLastCheckTime", "Tue Aug 23 2011 19:25:57 GMT+0200");
Deleted : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2269050.LastLogin_3.2.5.2", "Tue Mar 15 2011 17:19:54 GMT+0100");
Deleted : user_pref("CT2269050.LastLogin_3.3.3.2", "Sun Jul 17 2011 15:31:35 GMT+0200");
Deleted : user_pref("CT2269050.LastLogin_3.5.0.12", "Wed Aug 24 2011 14:12:41 GMT+0200");
Deleted : user_pref("CT2269050.LatestVersion", "3.6.0.10");
Deleted : user_pref("CT2269050.Locale", "en");
Deleted : user_pref("CT2269050.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2269050.MCDetectTooltipShow", false);
Deleted : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2269050.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2269050.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2269050.RadioIsPodcast", false);
Deleted : user_pref("CT2269050.RadioLastCheckTime", "Tue Aug 23 2011 19:26:34 GMT+0200");
Deleted : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
Deleted : user_pref("CT2269050.RadioMediaID", "12473383");
Deleted : user_pref("CT2269050.RadioMediaType", "Media Player");
Deleted : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");
Deleted : user_pref("CT2269050.RadioShrinkedFromSetup", false);
Deleted : user_pref("CT2269050.RadioStationName", "Hotmix%20108");
Deleted : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");
Deleted : user_pref("CT2269050.SavedHomepage", "resource:/browserconfig.properties");
Deleted : user_pref("CT2269050.SearchBackToDefaultEngine", false);
Deleted : user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Deleted : user_pref("CT2269050.SearchEngineBeforeUnload", "Ask.com");
Deleted : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]
Deleted : user_pref("CT2269050.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Tue Aug 23 2011 19:25:42 GMT+0200");
Deleted : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2269050.SearchInNewTabUserEnabled", false);
Deleted : user_pref("CT2269050.SearchProtectorEnabled", false);
Deleted : user_pref("CT2269050.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2269050.ServiceMapLastCheckTime", "Tue Aug 23 2011 19:25:53 GMT+0200");
Deleted : user_pref("CT2269050.SettingsLastCheckTime", "Wed Aug 24 2011 14:12:31 GMT+0200");
Deleted : user_pref("CT2269050.SettingsLastUpdate", "1313595511");
Deleted : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Thu Aug 11 2011 14:15:17 GMT+0200");
Deleted : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1246790578");
Deleted : user_pref("CT2269050.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2269050");
Deleted : user_pref("CT2269050.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT2269050.UserID", "UN63881599739340297");
Deleted : user_pref("CT2269050.WeatherNetwork", "");
Deleted : user_pref("CT2269050.WeatherPollDate", "Tue Aug 23 2011 19:26:34 GMT+0200");
Deleted : user_pref("CT2269050.WeatherUnit", "C");
Deleted : user_pref("CT2269050.alertChannelId", "666138");
Deleted : user_pref("CT2269050.approveUntrustedApps", true);
Deleted : user_pref("CT2269050.backendstorage./9b*68f17dh6fm9;", "6E6D706F736E716D6E747B757676");
Deleted : user_pref("CT2269050.backendstorage./9b*68f17dh6fm<9j;l", "247E2D2F226A7473767579747773747A227B7C7C2[...]
Deleted : user_pref("CT2269050.backendstorage./9b*68fcf4h><e

:>e", "");
Deleted : user_pref("CT2269050.backendstorage./9b+7e.:2z527", "247E706A73744345343D4436387E4A3F422F77317D7C207[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e06cg5el8:", "6E6D706E727275727471");
Deleted : user_pref("CT2269050.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A7473767478787B787A77242F4B4947[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Deleted : user_pref("CT2269050.backendstorage./9b-0?3g>d", "6C3E686C414274757A4573477B20754A494C25212152502A53[...]
Deleted : user_pref("CT2269050.backendstorage./9b-0?3g@6:5;", "");
Deleted : user_pref("CT2269050.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332[...]
Deleted : user_pref("CT2269050.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "676A6D7273747576");
Deleted : user_pref("CT2269050.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484779213F3E484F4E4D464[...]
Deleted : user_pref("CT2269050.backendstorage./9b5ba==9cjag", "6C3B6D6F413F416F7A7743777B474C754D4C204F22");
Deleted : user_pref("CT2269050.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D706E727275736F6F747278");
Deleted : user_pref("CT2269050.backendstorage./9b9643g3/9e", "6A");
Deleted : user_pref("CT2269050.backendstorage./9b<:222h64<", "393F352F3E");
Deleted : user_pref("CT2269050.backendstorage./9b=+03eh8h8j?:", "4443");
Deleted : user_pref("CT2269050.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Deleted : user_pref("CT2269050.backendstorage./9b?b0d:8aj62<h", "6D");
Deleted : user_pref("CT2269050.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Deleted : user_pref("CT2269050.components.1000034", false);
Deleted : user_pref("CT2269050.components.1000082", false);
Deleted : user_pref("CT2269050.components.1000234", false);
Deleted : user_pref("CT2269050.components.129023235807856892", false);
Deleted : user_pref("CT2269050.components.129121052374999726", false);
Deleted : user_pref("CT2269050.components.129351672002618989", false);
Deleted : user_pref("CT2269050.components.129351776130744254", false);
Deleted : user_pref("CT2269050.components.129391330693125668", false);
Deleted : user_pref("CT2269050.components.129466585396013141", false);
Deleted : user_pref("CT2269050.components.129466585399606892", false);
Deleted : user_pref("CT2269050.components.129575150554007677", false);
Deleted : user_pref("CT2269050.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT2269050.globalFirstTimeInfoLastCheckTime", "Wed Aug 24 2011 14:12:49 GMT+0200");
Deleted : user_pref("CT2269050.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT2269050.initDone", true);
Deleted : user_pref("CT2269050.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2269050.isFirstRadioInstallation", false);
Deleted : user_pref("CT2269050.myStuffEnabled", true);
Deleted : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2269050.oldAppsList", "128834881989343894,128834881989343895,111,129391330693125668,129[...]
Deleted : user_pref("CT2269050.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT2269050.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT2269050.testingCtid", "");
Deleted : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Tue Aug 23 2011 19:25:55 GMT+0200");
Deleted : user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Thu Aug 11 2011 14:15:26 GMT+0200");
Deleted : user_pref("CT2269050.usageEnabled", false);
Deleted : user_pref("CT2269050.usagesFlag", 2);
Deleted : user_pref("CT2431245..clientLogIsEnabled", false);
Deleted : user_pref("CT2431245..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2431245..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2431245.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2431245.AppTrackingLastCheckTime", "Sun May 22 2011 23:59:21 GMT+0200");
Deleted : user_pref("CT2431245.BrowserCompStateIsOpen_129453394044193841", true);
Deleted : user_pref("CT2431245.CTID", "CT2431245");
Deleted : user_pref("CT2431245.CurrentServerDate", "24-8-2011");
Deleted : user_pref("CT2431245.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2431245.DialogsGetterLastCheckTime", "Tue Aug 23 2011 19:26:27 GMT+0200");
Deleted : user_pref("CT2431245.DownloadReferralCookieData", "");
Deleted : user_pref("CT2431245.EMailNotifierPollDate", "Tue Aug 23 2011 19:26:06 GMT+0200");
Deleted : user_pref("CT2431245.EnableClickToSearchBox", false);
Deleted : user_pref("CT2431245.EnableSearchHistory", false);
Deleted : user_pref("CT2431245.EnableSearchSuggest", false);
Deleted : user_pref("CT2431245.FeedLastCount129009402595187825", 1133);
Deleted : user_pref("CT2431245.FeedPollDate7470634014180506963", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634014269327586", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634014329599698", "Tue Aug 23 2011 19:26:38 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634014537505092", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634014970726540", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634015410831318", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634015483395460", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634015636754705", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634015768347545", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634015855543602", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634016030710453", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634016114705611", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634016129205152", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634016143724791", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634016271239162", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634016568520719", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634016726993788", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634017109031809", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634017132743740", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634017299547668", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634017302327846", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634017344111490", "Tue Aug 23 2011 19:26:41 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634017478360748", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634017732797593", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634017821686064", "Tue Aug 23 2011 19:26:43 GMT+0200");
Deleted : user_pref("CT2431245.FeedPollDate7470634018090228721", "Tue Aug 23 2011 19:26:42 GMT+0200");
Deleted : user_pref("CT2431245.FeedTTL7470634014269327586", 5);
Deleted : user_pref("CT2431245.FeedTTL7470634014537505092", 5);
Deleted : user_pref("CT2431245.FeedTTL7470634014970726540", 2);
Deleted : user_pref("CT2431245.FeedTTL7470634015636754705", 5);
Deleted : user_pref("CT2431245.FeedTTL7470634016568520719", 30);
Deleted : user_pref("CT2431245.FeedTTL7470634017109031809", 30);
Deleted : user_pref("CT2431245.FeedTTL7470634017299547668", 2);
Deleted : user_pref("CT2431245.FirstServerDate", "7-3-2011");
Deleted : user_pref("CT2431245.FirstTime", true);
Deleted : user_pref("CT2431245.FirstTimeFF3", true);
Deleted : user_pref("CT2431245.FixPageNotFoundErrors", true);
Deleted : user_pref("CT2431245.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2431245.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2431245.HasUserGlobalKeys", true);
Deleted : user_pref("CT2431245.HomePageProtectorEnabled", false);
Deleted : user_pref("CT2431245.Initialize", true);
Deleted : user_pref("CT2431245.InitializeCommonPrefs", true);
Deleted : user_pref("CT2431245.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2431245.InstallationId", "Unknown");
Deleted : user_pref("CT2431245.InstallationType", "ExternalIntegration");
Deleted : user_pref("CT2431245.InstalledDate", "Mon Mar 07 2011 15:45:55 GMT+0100");
Deleted : user_pref("CT2431245.InvalidateCache", false);
Deleted : user_pref("CT2431245.IsAlertDBUpdated", true);
Deleted : user_pref("CT2431245.IsGrouping", false);
Deleted : user_pref("CT2431245.IsMulticommunity", false);
Deleted : user_pref("CT2431245.IsOpenThankYouPage", false);
Deleted : user_pref("CT2431245.IsOpenUninstallPage", true);
Deleted : user_pref("CT2431245.LanguagePackLastCheckTime", "Tue Aug 23 2011 19:26:28 GMT+0200");
Deleted : user_pref("CT2431245.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2431245.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2431245.LastLogin_3.2.5.2", "Wed Mar 16 2011 17:53:16 GMT+0100");
Deleted : user_pref("CT2431245.LastLogin_3.3.3.2", "Sun Jul 17 2011 15:31:41 GMT+0200");
Deleted : user_pref("CT2431245.LastLogin_3.6.0.10", "Wed Aug 24 2011 14:18:22 GMT+0200");
Deleted : user_pref("CT2431245.LatestVersion", "3.5.0.12");
Deleted : user_pref("CT2431245.Locale", "de-de");
Deleted : user_pref("CT2431245.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2431245.MCDetectTooltipShow", false);
Deleted : user_pref("CT2431245.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2431245.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2431245.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2431245.RadioIsPodcast", false);
Deleted : user_pref("CT2431245.RadioLastCheckTime", "Tue Aug 23 2011 19:26:37 GMT+0200");
Deleted : user_pref("CT2431245.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2431245.RadioLastUpdateServer", "129167771525870000");
Deleted : user_pref("CT2431245.RadioMediaID", "20503672");
Deleted : user_pref("CT2431245.RadioMediaType", "Media Player");
Deleted : user_pref("CT2431245.RadioMenuSelectedID", "EBRadioMenu_CT243124520503672");
Deleted : user_pref("CT2431245.RadioShrinkedFromSetup", false);
Deleted : user_pref("CT2431245.RadioStationName", "Team%20Radio%20Deutschland");
Deleted : user_pref("CT2431245.RadioStationURL", "hxxp://trd.stream.w-u-s.org:6666/dsl.m3u");
Deleted : user_pref("CT2431245.SavedHomepage", "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13");
Deleted : user_pref("CT2431245.SearchBackToDefaultEngine", false);
Deleted : user_pref("CT2431245.SearchEngineBeforeUnload", "Ask.com");
Deleted : user_pref("CT2431245.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2431245.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
Deleted : user_pref("CT2431245.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2431245.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2431245.SearchInNewTabLastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200");
Deleted : user_pref("CT2431245.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2431245.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2431245.SearchInNewTabUserEnabled", false);
Deleted : user_pref("CT2431245.SearchProtectorEnabled", false);
Deleted : user_pref("CT2431245.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2431245.ServiceMapLastCheckTime", "Tue Aug 23 2011 19:26:11 GMT+0200");
Deleted : user_pref("CT2431245.SettingsLastCheckTime", "Wed Aug 24 2011 14:18:13 GMT+0200");
Deleted : user_pref("CT2431245.SettingsLastUpdate", "1313660189");
Deleted : user_pref("CT2431245.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2431245.ThirdPartyComponentsLastCheck", "Thu Aug 11 2011 14:15:29 GMT+0200");
Deleted : user_pref("CT2431245.ThirdPartyComponentsLastUpdate", "1255348257");
Deleted : user_pref("CT2431245.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT2431245.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2431245");
Deleted : user_pref("CT2431245.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT2431245.UserID", "UN57636076319668882");
Deleted : user_pref("CT2431245.ValidationData_Toolbar", 2);
Deleted : user_pref("CT2431245.WeatherNetwork", "");
Deleted : user_pref("CT2431245.WeatherPollDate", "Wed Jun 01 2011 21:28:52 GMT+0200");
Deleted : user_pref("CT2431245.WeatherUnit", "C");
Deleted : user_pref("CT2431245.alertChannelId", "825452");
Deleted : user_pref("CT2431245.approveUntrustedApps", true);
Deleted : user_pref("CT2431245.backendstorage.10032", "31333037323139353738363039");
Deleted : user_pref("CT2431245.backendstorage.10432", "31333037323139393638383038");
Deleted : user_pref("CT2431245.backendstorage.11870", "31333037323231313030343532");
Deleted : user_pref("CT2431245.backendstorage._fb_dailyactivity", "31333032323835303230313232");
Deleted : user_pref("CT2431245.backendstorage._fb_lifetimesent", "54525545");
Deleted : user_pref("CT2431245.backendstorage.active", "796573");
Deleted : user_pref("CT2431245.backendstorage.ct2431245ads1", "25374225323261647325323225334125354225374225323[...]
Deleted : user_pref("CT2431245.backendstorage.ct2431245current_term", "656C746F6E2B76732B73696D6F6E2B736368696[...]
Deleted : user_pref("CT2431245.backendstorage.ct2431245sdate", "3131");
Deleted : user_pref("CT2431245.backendstorage.ctid", "435432343331323435");
Deleted : user_pref("CT2431245.backendstorage.eule_tb_id", "46383736313937323137313837303832395447353334333038[...]
Deleted : user_pref("CT2431245.backendstorage.facebook_ctid_connect_send", "73656E646564");
Deleted : user_pref("CT2431245.backendstorage.fb_dailyactivity", "31333033373637323533313935");
Deleted : user_pref("CT2431245.backendstorage.fb_lifetimesent", "54525545");
Deleted : user_pref("CT2431245.backendstorage.firstinstall", "796573");
Deleted : user_pref("CT2431245.backendstorage.firsttime", "796573");
Deleted : user_pref("CT2431245.backendstorage.for_aoi", "31333036303939383633");
Deleted : user_pref("CT2431245.backendstorage.for_ccid", "5261746973626F6E");
Deleted : user_pref("CT2431245.backendstorage.for_cdtr5", "31333036303939383633");
Deleted : user_pref("CT2431245.backendstorage.for_cid", "4445");
Deleted : user_pref("CT2431245.backendstorage.for_ip", "38372E3136302E37302E313435");
Deleted : user_pref("CT2431245.backendstorage.for_lcut", "31333134313230343135");
Deleted : user_pref("CT2431245.backendstorage.for_pid", "31303130");
Deleted : user_pref("CT2431245.backendstorage.for_rid", "3032");
Deleted : user_pref("CT2431245.backendstorage.for_zoneid", "39353933");
Deleted : user_pref("CT2431245.backendstorage.gsdomain", "");
Deleted : user_pref("CT2431245.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E");
Deleted : user_pref("CT2431245.backendstorage.lastrun", "31333133313538303933323033");
Deleted : user_pref("CT2431245.backendstorage.li_dailyactivity", "31333031343938303831393934");
Deleted : user_pref("CT2431245.backendstorage.li_lifetimesent", "54525545");
Deleted : user_pref("CT2431245.backendstorage.partner_id", "3937346665643236");
Deleted : user_pref("CT2431245.backendstorage.short", "30");
Deleted : user_pref("CT2431245.backendstorage.tbready", "74727565");
Deleted : user_pref("CT2431245.componentAlertEnabled", false);
Deleted : user_pref("CT2431245.components.1000034", false);
Deleted : user_pref("CT2431245.components.1000082", false);
Deleted : user_pref("CT2431245.components.129009402593156547", false);
Deleted : user_pref("CT2431245.components.129009402595187825", false);
Deleted : user_pref("CT2431245.components.129009402595656583", false);
Deleted : user_pref("CT2431245.components.129453393919975934", false);
Deleted : user_pref("CT2431245.components.129453393922944692", false);
Deleted : user_pref("CT2431245.components.129453393923725944", false);
Deleted : user_pref("CT2431245.components.129453394044193841", false);
Deleted : user_pref("CT2431245.components.129460318377631679", false);
Deleted : user_pref("CT2431245.components.129502739333844312", false);
Deleted : user_pref("CT2431245.components.129530497903908208", false);
Deleted : user_pref("CT2431245.components.129530498480786171", false);
Deleted : user_pref("CT2431245.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT2431245.globalFirstTimeInfoLastCheckTime", "Wed Aug 24 2011 14:18:22 GMT+0200");
Deleted : user_pref("CT2431245.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT2431245.initDone", true);
Deleted : user_pref("CT2431245.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2431245.isFirstRadioInstallation", false);
Deleted : user_pref("CT2431245.myStuffEnabled", true);
Deleted : user_pref("CT2431245.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2431245.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2431245.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2431245.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2431245.oldAppsList", "129009402577063104,129009402577844366,111,129460318377631679,129[...]
Deleted : user_pref("CT2431245.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT2431245.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT2431245.testingCtid", "");
Deleted : user_pref("CT2431245.toolbarAppMetaDataLastCheckTime", "Tue Aug 23 2011 19:26:19 GMT+0200");
Deleted : user_pref("CT2431245.toolbarContextMenuLastCheckTime", "Thu Aug 11 2011 14:15:55 GMT+0200");
Deleted : user_pref("CT2431245.usageEnabled", false);
Deleted : user_pref("CT2431245.usagesFlag", 2);
Deleted : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2431245,CT2269050,CT2206084,CT2102572");
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/518348/514218/DE", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/604380/600242/DE", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/666138/661999/DE", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/825452/821260/DE", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2102572", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2206084", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2431245", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2102572",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2206084",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2431245",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2102572&octid=[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2206084&octid=[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2269050&octid=[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2431245&octid=[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2102572/CT2102572[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2206084/CT2206084[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2269050/CT2269050[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2431245/CT2431245[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"634[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de-de", "\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16409683.xml", "\"1a384490966b462b272[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16727535.xml", "\"d879280c813d5b51c05[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/18863815.xml", "\"d49774327a1f6362739[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19058681.xml", "\"d38dbd09bcb7ca21206[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19248106.xml", "\"c9219d560178a4b8763[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19554706.xml", "\"c34be92bc13970c6ffa[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml", "\"0c869988559671eb0ef35[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/807095.xml", "\"8383a0e974da7233f6669[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/813286.xml", "\"40de96c74dfa6d307ae39[...]
Deleted : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");
Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");
Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");
Deleted : user_pref("CommunityToolbar.IsEngineShown", true);
Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Dankesreiter\\AppData\\Roaming\\Moz[...]
Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.5.0.12");
Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://s3-eu-west-1.amazonaws.com/tbe/974fed26-albam[...]
Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.icq.com/search/afe_results[...]
Deleted : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2269050,CT2431245,CT2206084,CT2102572");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050,CT2431245,CT2206084,CT2102572");
Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue Mar 22 2011 17:59:26 GMT+01[...]
Deleted : user_pref("CommunityToolbar.alert.alertEnabled", true);
Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jul 02 2011 13:10:53 GMT+0200");
Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Jul 17 2011 15:31:30 GMT+0200");
Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.alert.userId", "939eae73-3a2b-4d6f-a000-dde77144cc95");
Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Aug 23 2011 19:26:03 GMT+0200");
Deleted : user_pref("CommunityToolbar.globalUserId", "bb0a6943-1d53-4b26-92fc-f3afd3a31c47");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Aug 20 2011 20:03:3[...]
Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", false);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Aug 23 2011 19:25:57 GMT+020[...]
Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue Aug 23 2011 19:25:43 GMT+0200");
Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.notifications.userId", "332f33c0-6ea6-45a2-ba2d-923862d53af9");
Deleted : user_pref("CommunityToolbar.twitter.user_16409683.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_16727535.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_18863815.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_19058681.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_19248106.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_19554706.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_19757371.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200")[...]
Deleted : user_pref("CommunityToolbar.twitter.user_807095.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200")[...]
Deleted : user_pref("CommunityToolbar.twitter.user_813286.LastCheckTime", "Tue Aug 23 2011 19:26:06 GMT+0200")[...]
Deleted : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Mon Jun 06 2011 15:34:48 GMT+0200");
Deleted : user_pref("ConduitEngine.CTID", "ConduitEngine");
Deleted : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Mon Jul 04 2011 20:46:50 GMT+0200");
Deleted : user_pref("ConduitEngine.FirstServerDate", "03/04/2011 17");
Deleted : user_pref("ConduitEngine.FirstTime", true);
Deleted : user_pref("ConduitEngine.FirstTimeFF3", true);
Deleted : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Deleted : user_pref("ConduitEngine.Initialize", true);
Deleted : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Deleted : user_pref("ConduitEngine.InstalledDate", "Fri Mar 04 2011 15:41:14 GMT+0100");
Deleted : user_pref("ConduitEngine.IsMulticommunity", false);
Deleted : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Deleted : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Deleted : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Mon Jul 04 2011 20:45:41 GMT+0200");
Deleted : user_pref("ConduitEngine.LastLogin_3.2.5.2", "Sat Mar 19 2011 12:50:08 GMT+0100");
Deleted : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Mon Jul 04 2011 20:45:44 GMT+0200");
Deleted : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Deleted : user_pref("ConduitEngine.SettingsLastCheckTime", "Mon Jul 04 2011 20:45:47 GMT+0200");
Deleted : user_pref("ConduitEngine.UserID", "UN06558719254291434");
Deleted : user_pref("ConduitEngine.componentAlertEnabled", true);
Deleted : user_pref("ConduitEngine.engineLocale", "de");
Deleted : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Mon Jul 04 2011 20:45:42 GMT+0200");
Deleted : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Mon Jul 04 2011 20:45:41 GMT+0200");
Deleted : user_pref("ConduitEngine.initDone", true);
Deleted : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Deleted : user_pref("browser.search.defaultthis.engineName", "Softonic Deutsch FF Customized Web Search");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2206084&Sea[...]
Deleted : user_pref("browser.startup.homepage", "hxxp://start.funmoods.com/?f=1&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L[...]
Deleted : user_pref("extensions.BabylonToolbar.cntry", "DE");
Deleted : user_pref("extensions.BabylonToolbar.firstRun", false);
Deleted : user_pref("extensions.BabylonToolbar.hdrMd5", "4C9BBEEB9A88E911F80543C0A370D841");
Deleted : user_pref("extensions.BabylonToolbar.lastActv", "17");
Deleted : user_pref("extensions.asktb.InstallDir", "C:\\Program Files\\Ask.com\\");
Deleted : user_pref("extensions.asktb.abar-war-timeout", "4000");
Deleted : user_pref("extensions.asktb.cbid", "PV");
Deleted : user_pref("extensions.asktb.config-updated", false);
Deleted : user_pref("extensions.asktb.crumb", "");
Deleted : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://de.ask.com/web?q={query}&qsrc={qsrc}&[...]
Deleted : user_pref("extensions.asktb.dtid", "YYYYYYYYDE");
Deleted : user_pref("extensions.asktb.dyn-weather-do-locid-lookup-weatherWidget", false);
Deleted : user_pref("extensions.asktb.dyn-weather-locid-weatherWidget", "GMXX0223");
Deleted : user_pref("extensions.asktb.dyn-weather-tempunit-weatherWidget", "C");
Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://de.search.yahoo.com/search?fr=greentre[...]
Deleted : user_pref("extensions.asktb.first-launch-url", "hxxps://www.regnow.com/softsell/nph-softsell.cgi?ite[...]
Deleted : user_pref("extensions.asktb.fresh-install", false);
Deleted : user_pref("extensions.asktb.guid", "42442BE4-D9AC-494D-AD8C-AEC9F1D8A4C2");
Deleted : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com[...]
Deleted : user_pref("extensions.asktb.if", "su");
Deleted : user_pref("extensions.asktb.l", "dis");
Deleted : user_pref("extensions.asktb.last-config-req", "1314120329875");
Deleted : user_pref("extensions.asktb.last-search-timestamp", "1303854738229");
Deleted : user_pref("extensions.asktb.last-v", "3.11.3.100005");
Deleted : user_pref("extensions.asktb.locale", "de_DE");
Deleted : user_pref("extensions.asktb.location", "Regensburg,Germany");
Deleted : user_pref("extensions.asktb.o", "15000");
Deleted : user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Deleted : user_pref("extensions.asktb.qsrc", "2871");
Deleted : user_pref("extensions.asktb.r", "4");
Deleted : user_pref("extensions.asktb.sa", "YES");
Deleted : user_pref("extensions.asktb.saguid", "83F71ECC-B18F-4949-9792-1001F164800F");
Deleted : user_pref("extensions.asktb.search-suggestions-enabled", true);
Deleted : user_pref("extensions.asktb.silent-upgrade", true);
Deleted : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", true);
Deleted : user_pref("extensions.asktb.socialmini-first", true);
Deleted : user_pref("extensions.asktb.socialmini-interval", "1200000");
Deleted : user_pref("extensions.asktb.socialmini-max-char-ticker", "33");
Deleted : user_pref("extensions.asktb.socialmini-max-items", "30");
Deleted : user_pref("extensions.asktb.socialmini-native-on", true);
Deleted : user_pref("extensions.asktb.socialmini-speed", "5000");
Deleted : user_pref("extensions.asktb.socialmini-transition-first-open", false);
Deleted : user_pref("extensions.asktb.themeid", "");
Deleted : user_pref("extensions.asktb.v", "3.11.3.100006");
Deleted : user_pref("extensions.asktb.version", "5.11.3.15590");
Deleted : user_pref("extensions.enabledAddons", "{EEE6C361-6118-11DC-9C72-001320C79847}:1.2.0.2,{872b5b88-9db5[...]
Deleted : user_pref("extensions.facemoods.aflt", "_#stonicde");
Deleted : user_pref("extensions.facemoods.firstRun", false);
Deleted : user_pref("extensions.facemoods.lastActv", "17");
Deleted : user_pref("extensions.vshare@toolbar.update.enabled", false);
Deleted : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Deleted : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Deleted : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Deleted : user_pref("sweetim.toolbar.mode.debug", "false");
Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://de.search.yahoo.com/search?fr=greentree_ff[...]
Deleted : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Deleted : user_pref("sweetim.toolbar.search.history.capacity", "10");
Deleted : user_pref("sweetim.toolbar.simapp_id", "{618B8246-6F32-11E0-9A0A-001C252E9461}");
Deleted : user_pref("vshare.install.date", "1300579200000");
Deleted : user_pref("vshare.install.finished", "1.0.0");
Deleted : user_pref("vshare.install.guid", "{7a867ea7-821b-4d8a-afac-89b3cae007b8}");
Deleted : user_pref("vshare.install.istoolbarhp", true);
Deleted : user_pref("vshare.install.istoolbarsearch", true);
Deleted : user_pref("vshare.install.laststatreq", "1310860800000");
Deleted : user_pref("vshare.install.newtab", true);
Deleted : user_pref("vshare.install.overlayVersion", 1);
Deleted : user_pref("backup.old.browser.startup.homepage", "hxxp://search.babylon.com/?babsrc=HP_ss&affID=1006[...]

-\\ Google Chrome v19.0.1084.52

File : C:\Users\Dankesreiter\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted : "update_url": "hxxp://funmoods.com/public/download/chrome/update.xml",
Deleted : "description": "The plug-in from the General-Crawler.com website which lets the users[...]
Deleted : "homepage_url": "hxxp://www.general-crawler.com",
Deleted : "name": "General Crawler",
Deleted : "update_url": "hxxp://1.update.general-crawler.com/updates/update_chrome.xml",
Deleted : "name": "Funmoods",
Deleted : "update_url": "hxxp://funmoods.com/public/download/chrome/update.xml",

-\\ Opera v11.64.1403.0

File : C:\Users\Dankesreiter\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [94457 octets] - [05/06/2012 12:09:54]
AdwCleaner[S1].txt - [96870 octets] - [05/06/2012 19:41:18]

########## EOF - C:\AdwCleaner[S1].txt - [96999 octets] ##########

Psychotic · 06.06.2012, 06:47

Combofix zu beenden ist keine gute Idee gewesen!

Was heißt, du kommst nicht bis dahin? Schließt sich Combofix? Stürzt der Rechner ab? was passiert?

kunz123 · 06.06.2012, 11:37

also wenn ich combofix starte läuft so ein balken durch, wo steht dekomprimiere und lösche und danach passiert einfach nichts mehr, also schließt sich im endeffekt combofix
mfg

Psychotic · 06.06.2012, 11:51

Starte den Rechner im abgesicherten Modus mit Netzwerktreibern und führe Combofix von dort aus!

Abgesicherter Modus zur Bereinigung

Windows mit F8-Taste beim Start in den abgesicherten Modus bringen.
Starte den Rechner in den abgesicherten Modus mit Netzwerktreibern:

kunz123 · 06.06.2012, 15:34

hallo, mein pc startet alle 2 minuten einen neustart wieder mit der meldung ein kritischer fehler wurde entdeckt. weiß auch nicht an was das liegt. combofix konnte ich deshalb nocht nicht wieder ausprobieren. ich hofffe du hast dazu einen rat.

Psychotic · 11.06.2012, 06:51

Das meinte ich mit "keine gute Idee gewesen!

Bei Systemstart, drücke F8, bis du in das Menü gelangst.
Wähle Automatischen Neustart bei Systemfehler deaktivieren.

Starte Windows - nun wird der Rechner beim anzeigen des Fehlers gestoppt.

Poste mir vom blauen Bildschirm die fett gedruckte Fehlermeldung (oben im Kopf) sowie den STOP-Fehlercode (ganz unten, sieh ungefähr so aus: STOP 0x000000000 (...)

kunz123 · 11.06.2012, 21:17

danke für deine weitere hilfe, obwohl ich diesen fehler gemacht habe. deinen ratschlag habe ich befolgt, aber wenn ich windows mit dieser option starte wird der computer dennoch wieder mit der fehlermeldung neu gestartet, es bleibt also alles wie beim alten. wie soll ich weitermachen?
mfg

Trojan:Win32/Sirefef.ah kann nicht enfernt werden

Log-Analyse und Auswertung: Trojan:Win32/Sirefef.ah kann nicht enfernt werden