|
Log-Analyse und Auswertung: Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustartWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
04.04.2013, 11:19 | #16 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Im Anschluss: adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen Downloade Dir bitte AdwCleaner auf deinen Desktop.
Danach eine Kontrolle mit OTL bitte:
__________________ Logfiles bitte immer in CODE-Tags posten |
04.04.2013, 13:27 | #17 |
| Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart [CODE]hier der log.JRT Logfile:
__________________Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 4.8.1 (04.03.2013:1) OS: Microsoft Windows XP x86 Ran by Pietro on 04.04.2013 at 13:40:55,79 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] hkey_current_user\software\microsoft\internet explorer\main\\Start Page Successfully repaired: [Registry Value] hkey_users\.default\software\microsoft\internet explorer\main\\Start Page Successfully repaired: [Registry Value] hkey_users\s-1-5-18\software\microsoft\internet explorer\main\\Start Page Successfully repaired: [Registry Value] hkey_users\s-1-5-19\software\microsoft\internet explorer\main\\Start Page Successfully repaired: [Registry Value] hkey_users\s-1-5-20\software\microsoft\internet explorer\main\\Start Page Successfully repaired: [Registry Value] hkey_users\\software\microsoft\internet explorer\main\\Start Page ~~~ Registry Keys Successfully deleted: [Registry Key] hkey_current_user\software\filescout ~~~ Files Successfully deleted: [File] "C:\end" Successfully deleted: [File] C:\eula.1028.txt Successfully deleted: [File] C:\eula.1031.txt Successfully deleted: [File] C:\eula.1033.txt Successfully deleted: [File] C:\eula.1036.txt Successfully deleted: [File] C:\eula.1040.txt Successfully deleted: [File] C:\eula.1041.txt Successfully deleted: [File] C:\eula.1042.txt Successfully deleted: [File] C:\eula.2052.txt Successfully deleted: [File] C:\install.res.1028.dll Successfully deleted: [File] C:\install.res.1031.dll Successfully deleted: [File] C:\install.res.1033.dll Successfully deleted: [File] C:\install.res.1036.dll Successfully deleted: [File] C:\install.res.1040.dll Successfully deleted: [File] C:\install.res.1041.dll Successfully deleted: [File] C:\install.res.1042.dll Successfully deleted: [File] C:\install.res.2052.dll Successfully deleted: [File] C:\install.res.3082.dll ~~~ Folders Successfully deleted: [Folder] "C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\file scout" Successfully deleted: [Folder] "C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\performersoft" Successfully deleted: [Folder] "C:\Programme\Gemeinsame Dateien\umbrella" ~~~ FireFox Successfully deleted: [File] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\user.js Successfully deleted: [File] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\searchplugins\conduit.xml Successfully deleted: [Folder] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\conduitcommon Successfully deleted: [Folder] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\extensions\LogMeInClient@logmein.com Successfully deleted the following from C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\prefs.js user_pref("CT2197656.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); user_pref("CT2197656.CTID", "CT2197656"); user_pref("CT2197656.CommunitiesChangesLastCheckTime", "0"); user_pref("CT2197656.CurrentServerDate", "20-9-2010"); user_pref("CT2197656.DialogsAlignMode", "LTR"); user_pref("CT2197656.DownloadReferralCookieData", ""); user_pref("CT2197656.FirstServerDate", "13-1-2010"); user_pref("CT2197656.FirstTime", true); user_pref("CT2197656.FirstTimeFF3", true); user_pref("CT2197656.FirstTimeSettingsDone", true); user_pref("CT2197656.GroupingInvalidateCache", false); user_pref("CT2197656.GroupingLastCheckTime", "0"); user_pref("CT2197656.GroupingLastServerUpdateTime", "0"); user_pref("CT2197656.GroupingServerCheckInterval", 1440); user_pref("CT2197656.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); user_pref("CT2197656.Initialize", true); user_pref("CT2197656.InitializeCommonPrefs", true); user_pref("CT2197656.InstallationAndCookieDataSentCount", 1); user_pref("CT2197656.InstalledDate", "Wed Jan 13 2010 09:45:00 GMT+0100"); user_pref("CT2197656.InvalidateCache", false); user_pref("CT2197656.IsGrouping", false); user_pref("CT2197656.IsMulticommunity", false); user_pref("CT2197656.IsOpenThankYouPage", true); user_pref("CT2197656.IsOpenUninstallPage", true); user_pref("CT2197656.LanguagePackLastCheckTime", "Mon Sep 20 2010 09:11:25 GMT+0200"); user_pref("CT2197656.LanguagePackReloadIntervalMM", 1440); user_pref("CT2197656.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx"); user_pref("CT2197656.LastLogin_2.5.4.7", "Wed Jan 27 2010 19:02:47 GMT+0100"); user_pref("CT2197656.LastLogin_2.5.6.0", "Fri Mar 26 2010 10:02:45 GMT+0100"); user_pref("CT2197656.LastLogin_2.5.8.6", "Sat Aug 14 2010 09:38:54 GMT+0200"); user_pref("CT2197656.LastLogin_2.7.2.0", "Mon Sep 20 2010 09:11:24 GMT+0200"); user_pref("CT2197656.LatestVersion", "2.7.2.0"); user_pref("CT2197656.Locale", "en-us"); user_pref("CT2197656.LoginCache", 4); user_pref("CT2197656.MCDetectTooltipHeight", "83"); user_pref("CT2197656.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); user_pref("CT2197656.MCDetectTooltipWidth", "295"); user_pref("CT2197656.RadioLastCheckTime", "0"); user_pref("CT2197656.RadioLastUpdateIPServer", "0"); user_pref("CT2197656.RadioLastUpdateServer", "0"); user_pref("CT2197656.SHRINK_TOOLBAR", 1); user_pref("CT2197656.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2197656&octid=EB_ORIGINAL_CTID&SearchSource=1"); user_pref("CT2197656.SearchFromAddressBarIsInit", true); user_pref("CT2197656.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2197656&q="); user_pref("CT2197656.SearchInNewTabEnabled", true); user_pref("CT2197656.SearchInNewTabIntervalMM", 1440); user_pref("CT2197656.SearchInNewTabLastCheckTime", "Mon Sep 20 2010 09:11:24 GMT+0200"); user_pref("CT2197656.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"); user_pref("CT2197656.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID"); user_pref("CT2197656.SettingsCheckIntervalMin", 120); user_pref("CT2197656.SettingsLastCheckTime", "Mon Sep 20 2010 09:11:23 GMT+0200"); user_pref("CT2197656.SettingsLastUpdate", "1283883615"); user_pref("CT2197656.ThirdPartyComponentsInterval", 504); user_pref("CT2197656.ThirdPartyComponentsLastCheck", "Mon Sep 20 2010 09:11:23 GMT+0200"); user_pref("CT2197656.ThirdPartyComponentsLastUpdate", "1274024365"); user_pref("CT2197656.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112"); user_pref("CT2197656.UserID", "UN33991039097292663"); user_pref("CT2197656.ValidationData_Search", 0); user_pref("CT2197656.ValidationData_Toolbar", 2); user_pref("CT2197656.alertChannelId", "596102"); user_pref("CT2197656.clientLogIsEnabled", true); user_pref("CT2197656.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); user_pref("CT2197656.components.1000034", false); user_pref("CT2197656.components.1000082", false); user_pref("CT2197656.components.1000234", false); user_pref("CT2197656.myStuffEnabled", true); user_pref("CT2197656.myStuffPublihserMinWidth", 400); user_pref("CT2197656.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"); user_pref("CT2197656.myStuffServiceIntervalMM", 1440); user_pref("CT2197656.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"); user_pref("CT2197656.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); user_pref("CT2319505.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); user_pref("CT2319505.CT2436753.CommunityChanged", true); user_pref("CT2319505.CT2438091.CommunityChanged", true); user_pref("CT2319505.CT2439704.CommunityChanged", true); user_pref("CT2319505.CT2442024.CommunityChanged", true); user_pref("CT2319505.CT2442042.CommunityChanged", true); user_pref("CT2319505.CTID", "CT2319505"); user_pref("CT2319505.CommunitiesChangesLastCheckTime", "Fri Mar 12 2010 17:56:08 GMT+0100"); user_pref("CT2319505.CommunityChanged", true); user_pref("CT2319505.CurrentServerDate", "12-3-2010"); user_pref("CT2319505.DialogsAlignMode", "LTR"); user_pref("CT2319505.FeedLastCount128764853596838177", 50); user_pref("CT2319505.FeedPollDate128764853596838177", "Fri Mar 12 2010 18:57:26 GMT+0100"); user_pref("CT2319505.FeedPollDate128764877651838405", "Fri Mar 12 2010 18:57:26 GMT+0100"); user_pref("CT2319505.FeedPollDate128764921528556346", "Fri Mar 12 2010 18:57:26 GMT+0100"); user_pref("CT2319505.FeedPollDate128764922136681407", "Fri Mar 12 2010 18:57:26 GMT+0100"); user_pref("CT2319505.FeedPollDate128764929494025056", "Fri Mar 12 2010 18:57:26 GMT+0100"); user_pref("CT2319505.FeedPollDate128764934074025307", "Fri Mar 12 2010 18:57:26 GMT+0100"); user_pref("CT2319505.FirstServerDate", "17-12-2009"); user_pref("CT2319505.FirstTime", true); user_pref("CT2319505.FirstTimeFF3", true); user_pref("CT2319505.GroupingLastCheckTime", "Fri Mar 12 2010 09:14:40 GMT+0100"); user_pref("CT2319505.GroupingLastErrorCode", ""); user_pref("CT2319505.GroupingLastResponse", true); user_pref("CT2319505.GroupingLastServerUpdateTime", "129125382913730000"); user_pref("CT2319505.GroupingServerCheckInterval", 1440); user_pref("CT2319505.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); user_pref("CT2319505.Initialize", true); user_pref("CT2319505.InitializeCommonPrefs", true); user_pref("CT2319505.InstalledDate", "Thu Dec 17 2009 16:05:37 GMT+0100"); user_pref("CT2319505.InvalidateCache", false); user_pref("CT2319505.IsGrouping", true); user_pref("CT2319505.IsMulticommunity", false); user_pref("CT2319505.IsOpenThankYouPage", true); user_pref("CT2319505.IsOpenUninstallPage", true); user_pref("CT2319505.LanguagePackLastCheckTime", "Fri Mar 12 2010 15:51:13 GMT+0100"); user_pref("CT2319505.LanguagePackReloadIntervalMM", 1440); user_pref("CT2319505.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx"); user_pref("CT2319505.LastLogin_2.5.2.13", "Mon Jan 04 2010 15:14:07 GMT+0100"); user_pref("CT2319505.LastLogin_2.5.2.14", "Wed Jan 13 2010 09:22:52 GMT+0100"); user_pref("CT2319505.LastLogin_2.5.4.7", "Wed Jan 27 2010 19:02:45 GMT+0100"); user_pref("CT2319505.LastLogin_2.5.6.0", "Fri Mar 12 2010 15:51:13 GMT+0100"); user_pref("CT2319505.LatestVersion", "2.1.0.18"); user_pref("CT2319505.Locale", "en-us"); user_pref("CT2319505.LoginCache", 4); user_pref("CT2319505.MCDetectTooltipHeight", "83"); user_pref("CT2319505.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); user_pref("CT2319505.MCDetectTooltipWidth", "295"); user_pref("CT2319505.RadioIsPodcast", false); user_pref("CT2319505.RadioLastCheckTime", "Fri Mar 12 2010 15:51:13 GMT+0100"); user_pref("CT2319505.RadioLastUpdateIPServer", "4"); user_pref("CT2319505.RadioLastUpdateServer", "129057893328970000"); user_pref("CT2319505.RadioMediaID", "12965783"); user_pref("CT2319505.RadioMediaType", "Media Player"); user_pref("CT2319505.RadioMenuSelectedID", "EBRadioMenu_CT231950512965783"); user_pref("CT2319505.RadioShrinked", "shrinked"); user_pref("CT2319505.RadioStationName", "%3D%3D%3D%3D%3D%20News%20%26%20Talk%20%3D%3D%3D%3D%3D"); user_pref("CT2319505.RadioStationURL", "hxxp://www.cnn.com/audio/radio/liveaudio.asx"); user_pref("CT2319505.SHRINK_TOOLBAR", 1); user_pref("CT2319505.SearchFromAddressBarIsInit", true); user_pref("CT2319505.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2319505&SearchSource=2&q="); user_pref("CT2319505.SearchInNewTabEnabled", true); user_pref("CT2319505.SearchInNewTabIntervalMM", 1440); user_pref("CT2319505.SearchInNewTabServiceUrl", "hxxp://hosting.conduit-services.com/newtab/?ctid=EB_TOOLBAR_ID"); user_pref("CT2319505.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID"); user_pref("CT2319505.SettingsCheckIntervalMin", 120); user_pref("CT2319505.SettingsLastCheckTime", "Fri Mar 12 2010 17:56:08 GMT+0100"); user_pref("CT2319505.SettingsLastUpdate", "1268057491"); user_pref("CT2319505.ThirdPartyComponentsInterval", 504); user_pref("CT2319505.ThirdPartyComponentsLastCheck", "Tue Mar 02 2010 21:54:05 GMT+0100"); user_pref("CT2319505.ThirdPartyComponentsLastUpdate", "1262598007"); user_pref("CT2319505.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112"); user_pref("CT2319505.UserID", "UN09225496386369703"); user_pref("CT2319505.backendstorage.hxxp://conduit-fb-toolbar_conduit_com/fbtoolbar.firsttime", "74727565"); user_pref("CT2319505.clientLogIsEnabled", true); user_pref("CT2319505.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); user_pref("CT2319505.components.1000034", false); user_pref("CT2319505.components.1000234", false); user_pref("CT2319505.myStuffEnabled", true); user_pref("CT2319505.myStuffPublihserMinWidth", 400); user_pref("CT2319505.myStuffSearchUrl", "hxxp://search.conduit.com/Results.aspx?q=SEARCH_TERM&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID&SearchType=ToolbarComponents"); user_pref("CT2319505.myStuffServiceIntervalMM", 1440); user_pref("CT2319505.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"); user_pref("CT2319505.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); user_pref("CT2405727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); user_pref("CT2405727.CTID", "CT2405727"); user_pref("CT2405727.CurrentServerDate", "6-4-2010"); user_pref("CT2405727.DialogsAlignMode", "LTR"); user_pref("CT2405727.EMailNotifierPollDate", "Tue Apr 06 2010 16:22:16 GMT+0200"); user_pref("CT2405727.ExternalComponentPollDate129078516974368471", "Tue Apr 06 2010 09:13:51 GMT+0200"); user_pref("CT2405727.ExternalComponentPollDate8694032229628448321", "Mon Mar 29 2010 11:54:05 GMT+0200"); user_pref("CT2405727.FirstServerDate", "16-3-2010"); user_pref("CT2405727.FirstTime", true); user_pref("CT2405727.FirstTimeFF3", true); user_pref("CT2405727.GroupingServerCheckInterval", 1440); user_pref("CT2405727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); user_pref("CT2405727.Initialize", true); user_pref("CT2405727.InitializeCommonPrefs", true); user_pref("CT2405727.InstalledDate", "Tue Mar 16 2010 09:28:07 GMT+0100"); user_pref("CT2405727.InvalidateCache", false); user_pref("CT2405727.IsGrouping", false); user_pref("CT2405727.IsMulticommunity", false); user_pref("CT2405727.IsOpenThankYouPage", true); user_pref("CT2405727.IsOpenUninstallPage", true); user_pref("CT2405727.LanguagePackLastCheckTime", "Tue Apr 06 2010 09:13:53 GMT+0200"); user_pref("CT2405727.LanguagePackReloadIntervalMM", 1440); user_pref("CT2405727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx"); user_pref("CT2405727.LastLogin_2.5.6.0", "Fri Mar 26 2010 10:02:46 GMT+0100"); user_pref("CT2405727.LastLogin_2.5.8.6", "Tue Apr 06 2010 13:13:55 GMT+0200"); user_pref("CT2405727.LatestVersion", "2.1.0.18"); user_pref("CT2405727.Locale", "en"); user_pref("CT2405727.LoginCache", 4); user_pref("CT2405727.MCDetectTooltipHeight", "83"); user_pref("CT2405727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); user_pref("CT2405727.MCDetectTooltipWidth", "295"); user_pref("CT2405727.RadioIsPodcast", false); user_pref("CT2405727.RadioLastCheckTime", "Tue Apr 06 2010 09:13:53 GMT+0200"); user_pref("CT2405727.RadioLastUpdateIPServer", "3"); user_pref("CT2405727.RadioLastUpdateServer", "3"); user_pref("CT2405727.RadioMediaID", "9962"); user_pref("CT2405727.RadioMediaType", "Media Player"); user_pref("CT2405727.RadioMenuSelectedID", "EBRadioMenu_CT2405727_RECENT9962"); user_pref("CT2405727.RadioStationName", "California%20Rock"); user_pref("CT2405727.RadioStationURL", "hxxp://feedlive.net/california.asx"); user_pref("CT2405727.RadioVolume", "100"); user_pref("CT2405727.SHRINK_TOOLBAR", 1); user_pref("CT2405727.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2405727&octid=EB_ORIGINAL_CTID"); user_pref("CT2405727.SearchFromAddressBarIsInit", true); user_pref("CT2405727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405727&q="); user_pref("CT2405727.SearchInNewTabEnabled", true); user_pref("CT2405727.SearchInNewTabIntervalMM", 1440); user_pref("CT2405727.SearchInNewTabLastCheckTime", "Tue Apr 06 2010 09:13:51 GMT+0200"); user_pref("CT2405727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"); user_pref("CT2405727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID"); user_pref("CT2405727.SettingsCheckIntervalMin", 120); user_pref("CT2405727.SettingsLastCheckTime", "Tue Apr 06 2010 15:11:35 GMT+0200"); user_pref("CT2405727.SettingsLastUpdate", "1269767550"); user_pref("CT2405727.ThirdPartyComponentsInterval", 504); user_pref("CT2405727.ThirdPartyComponentsLastCheck", "Tue Mar 16 2010 09:28:04 GMT+0100"); user_pref("CT2405727.ThirdPartyComponentsLastUpdate", "1267120534"); user_pref("CT2405727.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112"); user_pref("CT2405727.UserID", "UN59044191848858177"); user_pref("CT2405727.ValidationData_Toolbar", 2); user_pref("CT2405727.WeatherNetwork", ""); user_pref("CT2405727.WeatherPollDate", "Tue Apr 06 2010 15:14:15 GMT+0200"); user_pref("CT2405727.WeatherUnit", "C"); user_pref("CT2405727.alertChannelId", "800210"); user_pref("CT2405727.clientLogIsEnabled", true); user_pref("CT2405727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); user_pref("CT2405727.myStuffEnabled", true); user_pref("CT2405727.myStuffPublihserMinWidth", 400); user_pref("CT2405727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=2&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"); user_pref("CT2405727.myStuffServiceIntervalMM", 1440); user_pref("CT2405727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"); user_pref("CT2405727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); user_pref("CT292072..clientLogIsEnabled", true); user_pref("CT292072..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); user_pref("CT292072..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); user_pref("CT292072.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); user_pref("CT292072.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); user_pref("CT292072.AppTrackingLastCheckTime", "Wed Aug 29 2012 09:02:43 GMT+0200"); user_pref("CT292072.CTID", "CT292072"); user_pref("CT292072.CurrentServerDate", "12-10-2012"); user_pref("CT292072.DialogsAlignMode", "LTR"); user_pref("CT292072.DialogsGetterLastCheckTime", "Thu Oct 11 2012 10:06:37 GMT+0200"); user_pref("CT292072.DownloadReferralCookieData", ""); user_pref("CT292072.EMailNotifierPollDate", "Mon Jan 04 2010 16:50:30 GMT+0100"); user_pref("CT292072.FeedLastCount127980423826619355", 0); user_pref("CT292072.FeedPollDate128433105078593902", "Fri Oct 12 2012 17:38:53 GMT+0200"); user_pref("CT292072.FeedPollDate128433105078593903", "Fri Oct 12 2012 18:01:42 GMT+0200"); user_pref("CT292072.FeedPollDate128433105078593904", "Fri Oct 12 2012 18:01:38 GMT+0200"); user_pref("CT292072.FeedPollDate128433105078593905", "Fri Oct 12 2012 18:01:40 GMT+0200"); user_pref("CT292072.FeedPollDate128433105078593906", "Fri Oct 12 2012 17:08:53 GMT+0200"); user_pref("CT292072.FeedPollDate128433105078593907", "Fri Oct 12 2012 17:08:53 GMT+0200"); user_pref("CT292072.FeedPollDate128526559992594353", "Fri Oct 12 2012 17:08:53 GMT+0200"); user_pref("CT292072.FeedPollDate128706408669044644", "Fri Oct 12 2012 17:08:53 GMT+0200"); user_pref("CT292072.FeedPollDatehxxp://www.radiomarte.it/rdmarte.asx", "Thu Dec 16 2010 18:04:49 GMT+0100"); user_pref("CT292072.FeedTTL128433105078593904", 10); user_pref("CT292072.FeedTTL128433105078593905", 30); user_pref("CT292072.FeedTTL128433105078593907", 5); user_pref("CT292072.FeedTTL128706408669044644", 5); user_pref("CT292072.FirstServerDate", "17-12-2009"); user_pref("CT292072.FirstTime", true); user_pref("CT292072.FirstTimeFF3", true); user_pref("CT292072.FirstTimeSettingsDone", true); user_pref("CT292072.GroupingServerCheckInterval", 1440); user_pref("CT292072.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); user_pref("CT292072.HasUserGlobalKeys", true); user_pref("CT292072.HomePageProtectorEnabled", false); user_pref("CT292072.Initialize", true); user_pref("CT292072.InitializeCommonPrefs", true); user_pref("CT292072.InstallationAndCookieDataSentCount", 3); user_pref("CT292072.InstalledDate", "Thu Dec 17 2009 16:04:09 GMT+0100"); user_pref("CT292072.InvalidateCache", false); user_pref("CT292072.IsAlertDBUpdated", true); user_pref("CT292072.IsGrouping", false); user_pref("CT292072.IsMulticommunity", false); user_pref("CT292072.IsOpenThankYouPage", true); user_pref("CT292072.IsOpenUninstallPage", true); user_pref("CT292072.LanguagePackLastCheckTime", "Fri Oct 12 2012 09:02:22 GMT+0200"); user_pref("CT292072.LanguagePackReloadIntervalMM", 1440); user_pref("CT292072.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx"); user_pref("CT292072.LastLogin_2.5.2.13", "Mon Jan 04 2010 15:14:07 GMT+0100"); user_pref("CT292072.LastLogin_2.5.2.14", "Wed Jan 13 2010 09:22:38 GMT+0100"); user_pref("CT292072.LastLogin_2.5.4.7", "Wed Jan 27 2010 19:02:46 GMT+0100"); user_pref("CT292072.LastLogin_2.5.6.0", "Thu Feb 11 2010 11:41:06 GMT+0100"); user_pref("CT292072.LastLogin_2.5.8.6", "Thu Aug 19 2010 09:02:55 GMT+0200"); user_pref("CT292072.LastLogin_2.7.2.0", "Mon Mar 21 2011 09:07:53 GMT+0100"); user_pref("CT292072.LastLogin_3.10.0.1", "Wed Apr 25 2012 09:07:49 GMT+0200"); user_pref("CT292072.LastLogin_3.11.0.3", "Mon May 07 2012 17:00:45 GMT+0200"); user_pref("CT292072.LastLogin_3.12.2.3", "Sun May 20 2012 17:56:29 GMT+0200"); user_pref("CT292072.LastLogin_3.13.0.6", "Sun Jul 08 2012 18:45:37 GMT+0200"); user_pref("CT292072.LastLogin_3.14.1.0", "Wed Aug 29 2012 17:02:43 GMT+0200"); user_pref("CT292072.LastLogin_3.15.1.0", "Fri Oct 12 2012 17:01:42 GMT+0200"); user_pref("CT292072.LastLogin_3.2.5.2", "Thu Jan 06 2011 17:36:28 GMT+0100"); user_pref("CT292072.LastLogin_3.3.2.1", "Fri Apr 01 2011 17:06:40 GMT+0200"); user_pref("CT292072.LastLogin_3.3.3.2", "Fri Jun 24 2011 16:04:12 GMT+0200"); user_pref("CT292072.LastLogin_3.5.0.12", "Tue Aug 02 2011 13:51:31 GMT+0200"); user_pref("CT292072.LastLogin_3.6.0.10", "Wed Oct 05 2011 08:59:12 GMT+0200"); user_pref("CT292072.LastLogin_3.7.0.6", "Tue Oct 11 2011 17:21:57 GMT+0200"); user_pref("CT292072.LastLogin_3.8.0.8", "Mon Dec 05 2011 13:36:17 GMT+0100"); user_pref("CT292072.LastLogin_3.8.1.0", "Tue Jan 31 2012 17:22:52 GMT+0100"); user_pref("CT292072.LastLogin_3.9.0.3", "Mon Feb 13 2012 09:28:39 GMT+0100"); user_pref("CT292072.LatestVersion", "3.14.1.0"); user_pref("CT292072.Locale", "de"); user_pref("CT292072.LoginCache", 4); user_pref("CT292072.MCDetectTooltipHeight", "83"); user_pref("CT292072.MCDetectTooltipShow", false); user_pref("CT292072.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); user_pref("CT292072.MCDetectTooltipWidth", "295"); user_pref("CT292072.MyStuffEnabledAtInstallation", true); user_pref("CT292072.RadioIsPodcast", false); user_pref("CT292072.RadioLastCheckTime", "Fri Oct 12 2012 09:02:42 GMT+0200"); user_pref("CT292072.RadioLastUpdateIPServer", "0"); user_pref("CT292072.RadioLastUpdateServer", "129696277231000000"); user_pref("CT292072.RadioMediaID", "8415661"); user_pref("CT292072.RadioMediaType", "Media Player"); user_pref("CT292072.RadioMenuSelectedID", "EBRadioMenu_CT292072_RECENT8415661"); user_pref("CT292072.RadioShrinked", "expanded"); user_pref("CT292072.RadioShrinkedFromSetup", false); user_pref("CT292072.RadioStationName", "IDN%20(Italian%20Dance%20Network)"); user_pref("CT292072.RadioStationURL", "hxxp://www.italiandancenetwork.com/stream/links/listen.asx"); user_pref("CT292072.RadioVolume", "100"); user_pref("CT292072.SHRINK_TOOLBAR", 1); user_pref("CT292072.SavedHomepage", "www.google.de"); user_pref("CT292072.SearchBoxWidth", 150); user_pref("CT292072.SearchEngine", "Suchen||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT292072&octid=EB_ORIGINAL_CTID&SearchSource=1"); user_pref("CT292072.SearchEngineBeforeUnload", "DAEMON Search"); user_pref("CT292072.SearchFromAddressBarIsInit", true); user_pref("CT292072.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT292072&q="); user_pref("CT292072.SearchInNewTabEnabled", true); user_pref("CT292072.SearchInNewTabIntervalMM", 1440); user_pref("CT292072.SearchInNewTabLastCheckTime", "Fri Oct 12 2012 09:02:18 GMT+0200"); user_pref("CT292072.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"); user_pref("CT292072.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"); user_pref("CT292072.SearchProtectorEnabled", false); user_pref("CT292072.SearchProtectorToolbarDisabled", true); user_pref("CT292072.ServiceMapLastCheckTime", "Fri Oct 12 2012 09:02:19 GMT+0200"); user_pref("CT292072.SettingsCheckIntervalMin", 120); user_pref("CT292072.SettingsLastCheckTime", "Fri Oct 12 2012 17:08:52 GMT+0200"); user_pref("CT292072.SettingsLastUpdate", "1349971046"); user_pref("CT292072.ThirdPartyComponentsInterval", 504); user_pref("CT292072.ThirdPartyComponentsLastCheck", "Sun Sep 30 2012 09:22:26 GMT+0200"); user_pref("CT292072.ThirdPartyComponentsLastUpdate", "1331806000"); user_pref("CT292072.ToolbarDisabled", false); user_pref("CT292072.TrusteLinkUrl", "hxxp://trust.conduit.com/CT292072"); user_pref("CT292072.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com, user_pref("CT292072.UserID", "UN28161568897515626"); user_pref("CT292072.ValidationData_Search", 2); user_pref("CT292072.ValidationData_Toolbar", 2); user_pref("CT292072.WeatherNetwork", ""); user_pref("CT292072.WeatherPollDate", "Fri Oct 12 2012 18:02:56 GMT+0200"); user_pref("CT292072.WeatherUnit", "C"); user_pref("CT292072.alertChannelId", "2050"); user_pref("CT292072.approveUntrustedApps", false); user_pref("CT292072.backendstorage.ct292072ads1", "25374225323261647325323225334125354225374225323261696425323225334125323235313939332532322532432532327469746C6525323225334125 user_pref("CT292072.backendstorage.ct292072current_term", "616E6E65782B622B6C253235433325323541346E646572"); user_pref("CT292072.backendstorage.ct292072sdate", "3132"); user_pref("CT292072.clientLogIsEnabled", true); user_pref("CT292072.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); user_pref("CT292072.components.1000034", false); user_pref("CT292072.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPa user_pref("CT292072.globalFirstTimeInfoLastCheckTime", "Mon Oct 08 2012 09:12:55 GMT+0200"); user_pref("CT292072.homepageProtectorEnableByLogin", true); user_pref("CT292072.initDone", true); user_pref("CT292072.isAppTrackingManagerOn", false); user_pref("CT292072.myStuffEnabled", true); user_pref("CT292072.myStuffPublihserMinWidth", 400); user_pref("CT292072.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"); user_pref("CT292072.myStuffServiceIntervalMM", 1440); user_pref("CT292072.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"); user_pref("CT292072.oldAppsList", "128344096801806658,128530302388825347,1000048,111,1000082,128537290694631967,128562659353262628,128839743997025524,128880706733682176,129245 user_pref("CT292072.revertSettingsEnabled", true); user_pref("CT292072.searchProtectorDialogDelayInSec", 10); user_pref("CT292072.searchProtectorEnableByLogin", true); user_pref("CT292072.testingCtid", ""); user_pref("CT292072.toolbarAppMetaDataLastCheckTime", "Fri Oct 12 2012 09:02:22 GMT+0200"); user_pref("CT292072.toolbarContextMenuLastCheckTime", "Sat Oct 06 2012 09:12:53 GMT+0200"); user_pref("CT292072.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); user_pref("CT292072.usagesFlag", 2); user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT292072"); user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT292072/CT292072", "\"d41d8cd98f00b204e9800998ecf8427e3\""); user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/2050/2050/DE", "\"0\""); user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/715594/711454/DE", "\"3-192980-48286800\""); user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/830903/826706/DE", "\"0\""); user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832216/828019/DE", "\"0\""); user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/833802/829605/DE", "\"0\""); user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/836077/831880/DE", "\"0\""); user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/836095/831898/DE", "\"0\""); user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\""); user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT292072", "\"0\""); user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=de", "oIwsta2spzadhjRgiY1Nhw=="); user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=de", "WiZSpHJzJ/uTUKvfHHyj/w=="); user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=de", "9H/gICSaMqbmx+Gd+8W4Sg=="); user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=de", "eJfMrdrGnhGHiiPiYjgAww=="); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"8076e3ce381dcd1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.2.1", "\"0652eeacc6cb1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.11.0.3", "\"4ead38b3e6bcd1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0e0a4327275cd1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.2.1", "\"0652eeacc6cb1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"07b2625f8cb1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.0.12", "\"8028f138140cc1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.0.10", "\"0ee90707f77cc1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.0.6", "\"0ee90707f77cc1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.0.8", "\"80ee9485875dcc1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.1.0", "\"80ee9485875dcc1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.0.3", "\"801a319dd78ccc1:0\""); user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT292072", "\"f1c77625c0e9bd1c80a2fd6901845fa9\""); user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2010 4:33:06 PM", "634293235860000000"); user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000"); user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT292072&octid=CT292072", "\"1321973020\""); user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT292072/CT292072", "\"1310989086\""); user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"c6960976a618e81645094348c65a4014\""); user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"5f18cd8784b2c41199661ad75d198ddb\""); user_pref("CommunityToolbar.EngineHiddenByUser", true); user_pref("CommunityToolbar.EngineOwner", ""); user_pref("CommunityToolbar.EngineOwnerGuid", ""); user_pref("CommunityToolbar.EngineOwnerToolbarId", ""); user_pref("CommunityToolbar.IsEngineShown", false); user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Dokumente und Einstellungen\\Pietro\\Anwendungsdaten\\Mozilla\\Firefox\\Profiles\\nim9nd3a.default\\conduitCommon\\mo user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.15.1.0"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://storage.conduit.com/52/156/CT1561552/Gadgets/a4709183-4a1f-4321-a83e-4ae33d3f7f99.html", "360x250"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://storage.conduit.com/72/29/CT292072/Gadgets/22e85617-7e46-4e8d-b90d-2be1d9b7f726.html", "122x23"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://tvtoolbar.org/tvtoolbar/gadget/tvplayer.php?subcategory=368&category=24", "327x39"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/11.swf&player=flash", "226x113"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/131.swf&player=flash", "261x166"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/152.swf&player=flash", "233x74"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/179.swf&player=flash", "418x122"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/180.swf&player=flash", "226x94"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/53.swf&player=flash", "330x160"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/55.swf&player=flash", "337x92"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/79.swf&player=flash", "216x96"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash3.php?source=swf/13.swf&player=flash", "418x60"); user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash3.php?source=swf/178.swf&player=flash", "389x80"); user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://storage.conduit.com/72/29/CT292072/Gadgets/22e85617-7e46-4e8d-b90d-2be1d9b7f726.html", "774x659"); user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/11.swf&player=flash", "500x430"); user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/179.swf&player=flash", "490x358"); user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/55.swf&player=flash", "488x430"); user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/79.swf&player=flash", "488x430"); user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash2.php?source=swf/58.swf&player=flash", "700x650"); user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash3.php?source=swf/178.swf&player=flash", "488x430"); user_pref("CommunityToolbar.OriginalEngineOwner", ""); user_pref("CommunityToolbar.OriginalEngineOwnerGuid", ""); user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", ""); user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties"); user_pref("CommunityToolbar.ToolbarsList", "CT292072,CT2319505,CT2197656,CT2405727"); user_pref("CommunityToolbar.ToolbarsList2", "CT292072,CT2197656,CT2405727"); user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Mon Mar 21 2011 15:23:09 GMT+0100"); user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jun 18 2011 22:18:45 GMT+0200"); user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); user_pref("CommunityToolbar.alert.firstTimeAlertShown", true); user_pref("CommunityToolbar.alert.locale", "en"); user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); user_pref("CommunityToolbar.alert.loginLastCheckTime", "Thu Jun 23 2011 18:07:03 GMT+0200"); user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); user_pref("CommunityToolbar.alert.showTrayIcon", false); user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); user_pref("CommunityToolbar.alert.userId", "{ada1af42-700e-4dfd-92fa-5012f0c62045}"); user_pref("CommunityToolbar.globalUserId", "0191840a-6c8c-491d-a17e-7c15504599a0"); user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT292072"); user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Oct 06 2012 09:13:05 GMT+0200"); user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440); user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Fri Oct 12 2012 09:24:38 GMT+0200"); user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com"); user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true); user_pref("CommunityToolbar.notifications.locale", "en"); user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri Oct 12 2012 09:24:30 GMT+0200"); user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com"); user_pref("CommunityToolbar.notifications.showTrayIcon", false); user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); user_pref("CommunityToolbar.notifications.userId", "8cdb738e-9409-4f66-84b7-45b28b6cc357"); user_pref("CommunityToolbar.twitter.user_16332734.LastCheckTime", "Mon Dec 21 2009 15:05:52 GMT+0100"); user_pref("browser.search.defaultthis.engineName", "Deutschland Radio Customized Web Search"); user_pref("browser.search.defaulturl", "hxxp://search.aol.com/search/search?query={searchTerms}&invocationType=tb50-ff-aolTB50CL-chromesbox-en-us"); user_pref("extensions.alexa.searchconf", "{\n \"google\" : {\n \"urlexp\" : \"hxxp:\\\\/\\\\/www\\\\.google\\\\..*\\\\/.*[?#&]q=([^&]+)\"\n },\n \"bing\" : {\n \"ur user_pref("extensions.alexa.toolbarXMLText", "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<toolbar>\n <replacements>\n <replacement>\n <key><![CDATA[__REGION__PLACEHO user_pref("extensions.seoquake.params.0.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97 user_pref("extensions.seoquake.params.1.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97 user_pref("extensions.seoquake.params.108.icon", "AAABAAIAEBAAAAAAAABoBQAAJgAAACAgAAAAAAAAqAgAAI4FAAAoAAAAEAAAACAAAAABAAgAAAAAAEABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP///wAGgvsA63YdA user_pref("extensions.seoquake.params.2.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97 user_pref("extensions.seoquake.params.20.icon", "AAABAAEAEBAAAAEAGABoAwAAFgAAACgAAAAQAAAAIAAAAAEAGAAAAAAAAAAAABMLAAATCwAAAAAAAAAAAAAVpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv user_pref("extensions.seoquake.params.3.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97 user_pref("extensions.seoquake.params.51.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAQAABILAAASCwAAAAAAAAAAAACgoKB+oKCg56CgoP+goKD/oKCg/6CgoP+goKD/oKCg/6 user_pref("extensions.veohsearchrecs.SupportedSites", "<?xml version=\"1.0\" ?>\r\n<results revision=\"1.5.2\">\r\n <sites>\r\n <searchsite MatchesDomain=\"google.\" user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT292072&q="); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 04.04.2013 at 14:17:50,57 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [CODE]hier die nächste.AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v2.200 - Datei am 04/04/2013 um 14:28:44 erstellt # Aktualisiert am 02/04/2013 von Xplode # Betriebssystem : Microsoft Windows XP Service Pack 2 (32 bits) # Benutzer : Pietro - COMPUTERCASA # Bootmodus : Normal # Ausgeführt unter : C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Desktop\adwcleaner.exe # Option [Löschen] **** [Dienste] **** ***** [Dateien / Ordner] ***** Datei Gelöscht : C:\Programme\Mozilla Firefox\searchplugins\StartWeb.xml Ordner Gelöscht : C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Tarma Installer ***** [Registrierungsdatenbank] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com] Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com] ***** [Internet Browser] ***** -\\ Internet Explorer v6.0.2900.2180 [OK] Die Registrierungsdatenbank ist sauber. -\\ Mozilla Firefox v20.0 (de) ************************* AdwCleaner[S1].txt - [1085 octets] - [04/04/2013 14:28:44] ########## EOF - C:\AdwCleaner[S1].txt - [1145 octets] ########## |
04.04.2013, 15:18 | #18 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart Was ist mit OTL?
__________________
__________________ |
04.04.2013, 16:14 | #19 |
| Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart ich werde gegen 19 Uhr zu Hause sein und wenn OTL schon fertig ist werde ich den log posten. Danke dir |
04.04.2013, 16:32 | #20 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart Ok, aber eine Bitte: lass solche Zwischenrufe, poste nur wenn es Probleme gibt oder wenn du die Logs hast (diese dann auch posten in CODE-Tags)
__________________ Logfiles bitte immer in CODE-Tags posten |
05.04.2013, 19:32 | #21 |
| Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustartCode:
ATTFilter sorry, als code tag ist zu lang. |
05.04.2013, 19:34 | #22 |
| Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustartCode:
ATTFilter hier der 2. log. |
06.04.2013, 03:20 | #23 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart Ich weiß nicht was du mit den OTL-Logs gemacht hast, aber was du in den ZIP gepackt hast, da steht großer Quatsch drin bzw. mein Texteditor kann es nicht darstellen Bitte die Original-Logdatei so belassen und hier hochladen => File-Upload.net - Ihr kostenloser File Hoster! Und hier verlinken
__________________ Logfiles bitte immer in CODE-Tags posten |
06.04.2013, 13:46 | #24 |
| Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustartCode:
ATTFilter hxxp://www.file-upload.net/download-7433312/Extras.Txt.html hxxp://www.file-upload.net/download-7433313/OTL.Txt.html |
06.04.2013, 16:59 | #25 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes - denk bitte vorher daran, Malwarebytes über den Updatebutton zu aktualisieren Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
07.04.2013, 11:30 | #26 |
| Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustartCode:
ATTFilter Malwarebytes Anti-Malware 1.70.0.1100 www.malwarebytes.org Datenbank Version: v2013.04.06.06 Windows XP Service Pack 2 x86 NTFS Internet Explorer 6.0.2900.2180 Pietro :: COMPUTERCASA [Administrator] 07.04.2013 00:47:24 mbam-log-2013-04-07 (00-47-24).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 321662 Laufzeit: 1 Stunde(n), 1 Minute(n), 5 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) |
07.04.2013, 22:17 | #27 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart Was ist mit dem anderen Log (ESET)?
__________________ Logfiles bitte immer in CODE-Tags posten |
07.04.2013, 22:46 | #28 |
| Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustartCode:
ATTFilter ESETSmartInstaller@High as downloader log: all ok esets_scanner_update returned -1 esets_gle=1 # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=94862f2ad1e97542a8ddeb084c9a863c # engine=13567 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-04-07 09:39:23 # local_time=2013-04-07 11:39:23 (+0100, Westeuropäische Normalzeit) # country="Germany" # lang=1033 # osver=5.1.2600 NT Service Pack 2 # scanned=153495 # found=6 # cleaned=0 # scan_time=38266 sh=3AEF532A0211CE7869F0EB51E940D9E0C7CAE321 ft=1 fh=c7560653d3ee2314 vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll" sh=D9F91FA435BDBB0764D4CEC8ED99BFF722D87F93 ft=1 fh=602781cac6882f06 vn="a variant of Win32/Adware.Yontoo.A application" ac=I fn="C:\System Volume Information\_restore{CB5C8FD2-5438-4188-888F-E6B7E5FE958C}\RP32\A0003022.dll" sh=75DFDC05C5D5F0C3B930B5B6871B6528EC9C22EA ft=1 fh=cff868ace0c06f1a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\System Volume Information\_restore{CB5C8FD2-5438-4188-888F-E6B7E5FE958C}\RP35\A0003176.dll" sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\System Volume Information\_restore{CB5C8FD2-5438-4188-888F-E6B7E5FE958C}\RP41\A0006102.dll" sh=5B80FC504E8CA6B6BEB68C2B398DEAFCE811426C ft=0 fh=0000000000000000 vn="Win32/Adware.Yontoo application" ac=I fn="D:\Firefox 12.0 (de) - 2012-05-07.pcv" sh=D84249CE051B0513391DECC5419C0F27AEC7F645 ft=0 fh=0000000000000000 vn="Win32/Adware.Yontoo application" ac=I fn="D:\Dokumente und Einstellungen\Pietro\Anwendungsdaten\Mozilla\Firefox\Profiles\4yyze240.default\extensions\plugin@yontoo.com\content\overlay.js" |
08.04.2013, 09:47 | #29 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart Wo kommt denn dieser Tarma-Müll schon wieder her? Hast du JRT vorher nicht neu runtergeladen? Bitte JRT und adwCleaner nochmal machen, beide Tools vorher neu runterladen bitte!
__________________ Logfiles bitte immer in CODE-Tags posten |
08.04.2013, 13:39 | #30 |
| Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustartCode:
ATTFilter sorry, ich glaube es stand nicht da das ich es erneut herunterladen muss aber jetzt habe ich es getan und hier der lo: von JRT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 4.8.3 (04.05.2013:1) OS: Microsoft Windows XP x86 Ran by Pietro on 08.04.2013 at 14:16:34,61 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ FireFox Successfully deleted: [Folder] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\extensions\LogMeInClient@logmein.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 08.04.2013 at 14:33:38,74 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter # AdwCleaner v2.200 - Datei am 08/04/2013 um 14:45:15 erstellt # Aktualisiert am 02/04/2013 von Xplode # Betriebssystem : Microsoft Windows XP Service Pack 2 (32 bits) # Benutzer : Pietro - COMPUTERCASA # Bootmodus : Normal # Ausgeführt unter : C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Desktop\AdwCleaner(1).exe # Option [Suche] **** [Dienste] **** ***** [Dateien / Ordner] ***** ***** [Registrierungsdatenbank] ***** ***** [Internet Browser] ***** -\\ Internet Explorer v6.0.2900.2180 [OK] Die Registrierungsdatenbank ist sauber. -\\ Mozilla Firefox v20.0 (de) ************************* AdwCleaner[R1].txt - [639 octets] - [08/04/2013 14:45:15] AdwCleaner[S1].txt - [1214 octets] - [04/04/2013 14:28:44] ########## EOF - C:\AdwCleaner[R1].txt - [758 octets] ########## |
Themen zu Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart |
.com, automatisch, code, einstellungen, ergebnis, gmer, harddisk, ide, internet, log, neustart, ordner, popup, registry, rootkit, scan, sich automatisch, suche, system, system32, temp, udp, windows, windows xp, öffnet |