dejah307

Members
 View Profile  See their activity

  • Content Count

    6

  • Joined

  • Last visited

 Content Type 

Posts posted by dejah307

  1. Need help removing Malware

    in Malware Removal

    Posted

    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2012-11-20.01)
    .
    Microsoft Windows 7 Home Premium
    Boot Device: \Device\HarddiskVolume1
    Install Date: 1/28/2010 4:07:34 PM
    System Uptime: 10/13/2013 6:05:57 PM (2 hours ago)
    .
    Motherboard: Quanta |  | 363F
    Processor: AMD Athlon II Dual-Core M300 | Socket S1G3 | 800/200mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 219 GiB total, 5.818 GiB free.
    D: is FIXED (NTFS) - 13 GiB total, 2.179 GiB free.
    E: is CDROM (UDF)
    F: is Removable
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    RP538: 10/13/2013 1:57:03 PM - Revo Uninstaller's restore point - Optimizer Pro v3.2
    RP539: 10/13/2013 2:01:58 PM - Revo Uninstaller's restore point - Optimizer Pro v3.2
    .
    ==== Installed Programs ======================
    .
     Update for Microsoft Office 2007 (KB2508958)
    Acrobat.com
    Activate Norton Online Backup
    Adobe Acrobat 9 Pro - English, Français, Deutsch
    Adobe Acrobat 9.5.5 - CPSID_83708
    Adobe AIR
    Adobe Community Help
    Adobe Connect Add-in
    Adobe Content Viewer
    Adobe Creative Suite 5 Design Standard
    Adobe Flash Player 11 ActiveX
    Adobe Flash Player 11 Plugin
    Adobe Folio Producer tools for InDesign CS5
    Adobe Media Player
    Adobe Photoshop Elements 10
    Adobe Photoshop Lightroom 3.5 64-bit
    Adobe Photoshop.com Inspiration Browser
    Adobe Reader XI (11.0.02)
    Adobe Support Advisor
    aioprnt
    aioscnnr
    Amazon Kindle
    AMD USB Filter Driver
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    ArcSoft Print Creations
    ArcSoft Print Creations - Album Page
    ArcSoft Print Creations - Funhouse
    ArcSoft Print Creations - Greeting Card
    ArcSoft Print Creations - Photo Book
    ArcSoft Print Creations - Photo Calendar
    ArcSoft Print Creations - Scrapbook
    ArcSoft Print Creations - Slimline Card
    Atheros Driver Installation Program
    ATI Catalyst Install Manager
    AVG 2012
    Bonjour
    C4USelfUpdater
    Catalyst Control Center - Branding
    Catalyst Control Center Core Implementation
    Catalyst Control Center Graphics Full Existing
    Catalyst Control Center Graphics Full New
    Catalyst Control Center Graphics Light
    Catalyst Control Center Graphics Previews Common
    Catalyst Control Center Graphics Previews Vista
    Catalyst Control Center InstallProxy
    Catalyst Control Center Localization All
    ccc-core-static
    ccc-utility64
    CCC Help Chinese Standard
    CCC Help Chinese Traditional
    CCC Help Czech
    CCC Help Danish
    CCC Help Dutch
    CCC Help English
    CCC Help Finnish
    CCC Help French
    CCC Help German
    CCC Help Greek
    CCC Help Hungarian
    CCC Help Italian
    CCC Help Japanese
    CCC Help Korean
    CCC Help Norwegian
    CCC Help Polish
    CCC Help Portuguese
    CCC Help Russian
    CCC Help Spanish
    CCC Help Swedish
    CCC Help Thai
    CCC Help Turkish
    CCScore
    center
    Cisco EAP-FAST Module
    Cisco LEAP Module
    Cisco PEAP Module
    Coach WDM x64
    Compatibility Pack for the 2007 Office system
    CyberLink DVD Suite
    CyberLink YouCam
    D3DX10
    Elements 10 Organizer
    ESSBrwr
    ESSCDBK
    ESScore
    essentials
    ESSgui
    ESSini
    ESSPCD
    ESSPDock
    ESSTOOLS
    essvatgt
    Facebook Messenger 2.1.4814.0
    Facebook Plug-In
    Facebook Video Calling 1.2.0.287
    ffdshow [rev 2527] [2008-12-19]
    Google Chrome
    Google Toolbar for Internet Explorer
    Haali Media Splitter
    Hewlett-Packard ACLM.NET v1.2.1.1
    Homepage Protection
    Hotel Mahjong Deluxe
    Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946040)
    Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946308)
    Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946344)
    Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947540)
    Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789)
    HP Advisor
    HP Customer Experience Enhancements
    HP DVD Play 3.7
    HP Games
    HP Quick Launch Buttons
    HP Setup
    HP Smart Web Printing 4.60
    HP Support Assistant
    HP Update
    HP User Guides 0148
    HP Wireless Assistant
    hppMSRedist
    hppusgP1000
    HPSSupply
    IDT Audio
    Intel® C++ Redistributables for Windows* on Intel® 64
    iTunes
    Java Auto Updater
    Java 6 Update 14 (64-bit)
    Java 6 Update 26
    Junk Mail filter update
    Kodak AIO Printer
    KODAK AiO Software
    Kodak EasyShare software
    ksDIP
    LabelPrint
    Learning Lodge Navigator
    LG USB Modem driver
    Lightroom Plug-in Merge to 32-bit HDR 1.0.2
    LightScribe System Software
    LSI HDA Modem
    Malwarebytes Anti-Malware version 1.75.0.1300
    MarketResearch
    McAfee Security Scan Plus
    Mesh Runtime
    Messenger Companion
    Microsoft .NET Framework 4 Client Profile
    Microsoft Application Error Reporting
    Microsoft Live Search Toolbar
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office File Validation Add-In
    Microsoft Office InfoPath MUI (English) 2007
    Microsoft Office Office 64-bit Components 2007
    Microsoft Office Outlook Connector
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office PowerPoint Viewer 2007 (English)
    Microsoft Office Professional Plus 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Shared 64-bit MUI (English) 2007
    Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2005 Redistributable (x64)
    Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
    Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Visual Studio Tools for Applications 2.0 - ENU
    Microsoft Visual Studio Tools for Applications 2.0 Runtime
    Microsoft_VC80_ATL_x86
    Microsoft_VC80_ATL_x86_x64
    Microsoft_VC80_CRT_x86
    Microsoft_VC80_CRT_x86_x64
    Microsoft_VC80_MFC_x86
    Microsoft_VC80_MFC_x86_x64
    Microsoft_VC80_MFCLOC_x86
    Microsoft_VC80_MFCLOC_x86_x64
    Microsoft_VC90_ATL_x86
    Microsoft_VC90_ATL_x86_x64
    Microsoft_VC90_CRT_x86
    Microsoft_VC90_CRT_x86_x64
    Microsoft_VC90_MFC_x86
    Microsoft_VC90_MFC_x86_x64
    Move Media Player
    Mozilla Firefox 24.0 (x86 en-US)
    Mozilla Maintenance Service
    MrvlUsgTracking
    MSVCRT
    MSVCRT_amd64
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    MSXML 4.0 SP2 Parser and SDK
    MSXML 4.0 SP3 Parser
    MSXML 4.0 SP3 Parser (KB2721691)
    MSXML 4.0 SP3 Parser (KB2758694)
    MSXML 4.0 SP3 Parser (KB973685)
    muvee Reveal
    netbrdg
    Notepad++
    ocr
    OfotoXMI
    onOne PerfectPresets
    PC Health Kit v3.2
    PDF Settings CS5
    PhotoFrame 4.6.5 Free
    PhotoTools 2.6.3 Free
    PMB
    Power2Go
    PowerDirector
    PowerRecover
    PreReq
    Primo
    Pro Media Director Version 1.1.1.1
    PSE10 STI Installer
    QLBCASL
    QuickTime
    Realtek 8136 8168 8169 Ethernet Driver
    Realtek USB 2.0 Card Reader
    Respondus LockDown Browser
    Revo Uninstaller 1.95
    Runtime
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)
    Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687309) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2827329) 32-Bit Edition
    Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition
    Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
    Security Update for Microsoft Office Outlook 2007 (KB2825999) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
    Security Update for Microsoft Office Publisher 2007 (KB2597971) 32-Bit Edition
    Security Update for Microsoft Office Word 2007 (KB2827330) 32-Bit Edition
    SFR
    SHASTA
    ShopAtHome.com Toolbar
    skin0001
    SKINXSDK
    Slingbox - Watch Your TV Anywhere
    SlingPlayer
    SmartSound Common Data
    SmartSound Quicktracks 5
    SmartWebPrinting
    Sony Image Data Suite
    Sony RAW Driver
    staticcr
    SweetIM for Messenger 2.9
    SweetIM Toolbar for Internet Explorer 3.6
    Synaptics Pointing Device Driver
    Unity Web Player
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
    Update for Microsoft .NET Framework 4 Client Profile (KB2836939)
    Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)
    Update for Microsoft Office 2007 Help for Common Features (KB963673)
    Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
    Update for Microsoft Office Access 2007 Help (KB963663)
    Update for Microsoft Office Excel 2007 Help (KB963678)
    Update for Microsoft Office Infopath 2007 Help (KB963662)
    Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
    Update for Microsoft Office Outlook 2007 Help (KB963677)
    Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition
    Update for Microsoft Office Powerpoint 2007 Help (KB963669)
    Update for Microsoft Office Publisher 2007 Help (KB963667)
    Update for Microsoft Office Script Editor Help (KB963671)
    Update for Microsoft Office Word 2007 Help (KB963665)
    Update Installer for WildTangent Games App
    Visual C++ 8.0 Runtime Setup Package (x64)
    Visual Studio 2008 x64 Redistributables
    VPRINTOL
    VTech Download Agent Library
    WildTangent Games App (HP Games)
    Windows Driver Package - FotoNation (CoachUsb) Image  (03/10/2009 4.82.0.0)
    Windows Driver Package - FotoNation (CoachVid) Image  (03/10/2009 4.82.0.0)
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Family Safety
    Windows Live ID Sign-in Assistant
    Windows Live Installer
    Windows Live Language Selector
    Windows Live Mail
    Windows Live Mesh
    Windows Live Mesh ActiveX Control for Remote Connections
    Windows Live Messenger
    Windows Live Messenger Companion Core
    Windows Live MIME IFilter
    Windows Live Movie Maker
    Windows Live Photo Common
    Windows Live Photo Gallery
    Windows Live PIMT Platform
    Windows Live Remote Client
    Windows Live Remote Client Resources
    Windows Live Remote Service
    Windows Live Remote Service Resources
    Windows Live SOXE
    Windows Live SOXE Definitions
    Windows Live Sync
    Windows Live UX Platform
    Windows Live UX Platform Language Pack
    Windows Live Writer
    Windows Live Writer Resources
    Windows Media Player Firefox Plugin
    WIRELESS
    Yahoo! Messenger
    Yahoo! Search Protection
    Yahoo! Software Update
    Yahoo! Toolbar
    .
    ==== End Of File ===========================

  2. Need help removing Malware

    in Malware Removal

    Posted

    DDS (Ver_2012-11-20.01) - NTFS_AMD64
    Internet Explorer: 10.0.9200.16720  BrowserJavaVersion: 1.6.0_26
    Run by Dejah at 20:36:05 on 2013-10-13
    Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.2812.1184 [GMT -6:00]
    .
    AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
    SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
    SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    ============== Running Processes ===============
    .
    C:\PROGRA~2\AVG\AVG2012\avgrsa.exe
    C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\system32\atiesrxx.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\atieclxx.exe
    C:\Windows\system32\WLANExt.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe
    C:\Program Files\LSI SoftModem\agr64svc.exe
    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\Dwm.exe
    C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
    C:\Users\Dejah\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
    C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
    C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
    C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\IDT\WDM\sttray64.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe
    C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
    C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files (x86)\Adobe\Elements 10 Organizer\ElementsOrganizerSyncAgent.exe
    C:\Windows\System32\StikyNot.exe
    C:\Program Files (x86)\HP\QuickPlay\QPService.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
    C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
    C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    C:\Users\Dejah\AppData\Roaming\HP SimpleSave Application\StartHelper.exe
    C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
    C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
    C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
    C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe
    C:\Program Files (x86)\PC Health Kit\PCHKSmartScan.exe
    C:\Program Files (x86)\iTunes\iTunesHelper.exe
    C:\Program Files (x86)\PC Health Kit\PCHKReminder.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Windows\System32\svchost.exe -k LocalServicePeerNet
    C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    C:\Windows\System32\WUDFHost.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
    C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
    C:\Windows\system32\svchost.exe -k SDRSVC
    C:\Windows\explorer.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\System32\cscript.exe
    .
    ============== Pseudo HJT Report ===============
    .


    dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
    mWinlogon: Userinit = userinit.exe,
    BHO: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO: Windows Live Messenger Companion Helper: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
    BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    BHO: Adobe PDF Conversion Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
    BHO: SmartSelect Class: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    BHO: SingleInstance Class: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
    BHO: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
    EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
    uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
    uRun: [AdobeBridge] <no file>
    mRun: [QPService] "C:\Program Files (x86)\HP\QuickPlay\QPService.exe"
    mRun: [uCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
    mRun: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
    mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
    mRun: [updatePRCShortCut] "C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Hewlett-Packard\Recovery" UpdateWithCreateOnce "Software\CyberLink\PowerRecover"
    mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
    mRun: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    mRun: [HPUsageTracking] C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe "C:\Program Files (x86)\HP\HP UT\"
    mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    mRun: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
    mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
    mRun: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
    mRun: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
    mRun: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
    mRun: [Conime] C:\Windows\System32\conime.exe
    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRun: [AgentMonitor] C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe
    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
    mRun: [EKStatusMonitor] C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    mRunOnce: [Malwarebytes Anti-Malware (cleanup)] rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript
    dRunOnce: [KodakHomeCenter] "C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe"
    StartupFolder: C:\Users\Dejah\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\HPSIMP~1.LNK - C:\Users\Dejah\AppData\Roaming\HP SimpleSave Application\StartHelper.exe
    uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
    uPolicies-System: WallpaperStyle = 2
    mPolicies-Explorer: NoActiveDesktop = dword:1
    mPolicies-Explorer: NoActiveDesktopChanges = dword:1
    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
    mPolicies-System: ConsentPromptBehaviorUser = dword:3
    mPolicies-System: EnableUIADesktopToggle = dword:0
    mPolicies-System: WallpaperStyle = 2
    IE: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    IE: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
    IE: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    IE: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
    IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
    IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll












    TCP: NameServer = 192.168.2.1
    TCP: Interfaces\{0FEE2970-B2B0-47DB-8498-DD22FFD89C03} : DHCPNameServer = 69.145.248.4 69.146.17.2 69.144.49.29
    TCP: Interfaces\{B84D00CA-F5B4-4B14-87CC-AFA2D7CEE966} : DHCPNameServer = 192.168.2.1
    TCP: Interfaces\{B84D00CA-F5B4-4B14-87CC-AFA2D7CEE966}\665647A75627 : DHCPNameServer = 192.168.2.1
    TCP: Interfaces\{B84D00CA-F5B4-4B14-87CC-AFA2D7CEE966}\8656C66627963686D2665647A75627 : DHCPNameServer = 192.168.2.1
    TCP: Interfaces\{B84D00CA-F5B4-4B14-87CC-AFA2D7CEE966}\C696E6B6379737 : DHCPNameServer = 69.145.248.4 69.146.17.2 69.144.49.29
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    AppInit_DLLs= c:\progra~2\optimi~1\optpro~1.dll
    SSODL: WebCheck - <orphaned>
    mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"
    mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
    x64-BHO: AVG Do Not Track: {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll
    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
    x64-BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
    x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
    x64-Run: [sysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
    x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
    x64-Run: [EKIJ5000StatusMonitor] C:\Windows\System32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe
    x64-IE: {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll

    x64-Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll
    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
    x64-SSODL: WebCheck - <orphaned>
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\
    FF - component: C:\Program Files (x86)\AVG\AVG10\Firefox4\components\avgssff4.dll
    FF - plugin: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll
    FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
    FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
    FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll
    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll
    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrlui.dll
    FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
    FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
    FF - plugin: C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll
    FF - plugin: C:\Users\Dejah\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll
    FF - plugin: C:\Users\Dejah\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
    FF - plugin: C:\Users\Dejah\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
    FF - plugin: C:\Users\Dejah\AppData\Roaming\Facebook\npfbplugin_1_0_1.dll
    FF - plugin: C:\Users\Dejah\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll
    FF - plugin: C:\Users\Dejah\AppData\Roaming\Move Networks\plugins\npqmp071701000002.dll
    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll
    FF - ExtSQL: !HIDDEN! 2010-01-28 16:26; [email protected]; C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 AVGIDSHA;AVGIDSHA;C:\Windows\System32\drivers\avgidsha.sys [2012-4-19 28480]
    R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys [2012-1-31 36944]
    R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-10-23 55856]
    R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys [2012-11-8 307040]
    R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys [2011-12-23 47696]
    R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys [2013-4-11 384800]
    R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2012-8-30 46368]
    R2 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10;C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [2011-9-1 169624]
    R2 AESTFilters;Andrea ST Filters Service;C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [2009-10-11 89600]
    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2009-7-2 203264]
    R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [2012-11-2 5174392]
    R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-2-14 193288]
    R2 BackupService;BackupService;C:\Users\Dejah\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe [2010-10-23 83512]
    R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2012-9-27 86528]
    R2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe [2013-3-15 395640]
    R2 Kodak AiO Status Monitor Service;Kodak AiO Status Monitor Service;C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe [2013-1-15 780152]
    R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-10-13 418376]
    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-10-13 701512]
    R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2011-3-15 428384]
    R3 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\avgidsdrivera.sys [2012-12-10 127328]
    R3 AVGIDSFilter;AVGIDSFilter;C:\Windows\System32\drivers\avgidsfiltera.sys [2011-12-23 29776]
    R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-10-13 25928]
    R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-6-23 216576]
    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-10-11 215040]
    R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2009-10-11 36408]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
    S2 vToolbarUpdater17.0.12;vToolbarUpdater17.0.12;C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe --> C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe [?]
    S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2010-10-22 48488]
    S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-9-23 1493352]
    S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
    S3 HTCAND64;HTC Device Driver;C:\Windows\System32\drivers\ANDROIDUSB.sys [2009-11-1 33736]
    S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368]
    S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864]
    S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]
    S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864]
    S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-7-6 59392]
    S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-5-5 1255736]
    S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120]
    S4 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-1-15 227232]
    S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
    .
    =============== Created Last 30 ================
    .
    2013-10-14 00:39:38    --------    d-----w-    C:\Users\Dejah\AppData\Roaming\Malwarebytes
    2013-10-14 00:39:29    --------    d-----w-    C:\ProgramData\Malwarebytes
    2013-10-14 00:39:28    25928    ----a-w-    C:\Windows\System32\drivers\mbam.sys
    2013-10-14 00:39:28    --------    d-----w-    C:\Program Files (x86)\Malwarebytes' Anti-Malware
    2013-10-14 00:18:33    --------    d-----w-    C:\Windows\ERUNT
    2013-10-13 23:13:52    --------    d-----w-    C:\AdwCleaner
    2013-10-13 19:52:40    --------    d-----w-    C:\Program Files (x86)\VS Revo Group
    2013-10-13 19:51:26    --------    d-----w-    C:\Program Files (x86)\PC Health Kit
    2013-10-13 17:37:16    --------    d-----w-    C:\Users\Dejah\AppData\Local\avgchrome
    2013-10-13 17:24:13    --------    d-----w-    C:\Windows\System32\ljkb
    2013-10-10 11:44:11    633856    ----a-w-    C:\Windows\System32\comctl32.dll
    2013-10-10 11:43:59    81920    ----a-w-    C:\Windows\SysWow64\davclnt.dll
    2013-10-04 23:22:44    --------    d-----w-    C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
    2013-10-04 23:22:44    --------    d-----w-    C:\Program Files\iTunes
    2013-10-04 23:22:44    --------    d-----w-    C:\Program Files\iPod
    2013-10-04 23:22:44    --------    d-----w-    C:\Program Files (x86)\iTunes
    .
    ==================== Find3M  ====================
    .
    2013-10-13 18:11:59    46368    ----a-w-    C:\Windows\System32\drivers\avgtpx64.sys
    2013-10-09 18:12:58    71048    ----a-w-    C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2013-10-09 18:12:58    692616    ----a-w-    C:\Windows\SysWow64\FlashPlayerApp.exe
    2013-09-22 23:28:06    1767936    ----a-w-    C:\Windows\SysWow64\wininet.dll
    2013-09-22 23:27:49    2876928    ----a-w-    C:\Windows\SysWow64\jscript9.dll
    2013-09-22 23:27:48    61440    ----a-w-    C:\Windows\SysWow64\iesetup.dll
    2013-09-22 23:27:48    109056    ----a-w-    C:\Windows\SysWow64\iesysprep.dll
    2013-09-22 22:55:10    2241024    ----a-w-    C:\Windows\System32\wininet.dll
    2013-09-22 22:54:51    3959296    ----a-w-    C:\Windows\System32\jscript9.dll
    2013-09-22 22:54:50    67072    ----a-w-    C:\Windows\System32\iesetup.dll
    2013-09-22 22:54:50    136704    ----a-w-    C:\Windows\System32\iesysprep.dll
    2013-09-21 03:38:39    2706432    ----a-w-    C:\Windows\System32\mshtml.tlb
    2013-09-21 03:30:24    2706432    ----a-w-    C:\Windows\SysWow64\mshtml.tlb
    2013-09-21 02:48:36    89600    ----a-w-    C:\Windows\System32\RegisterIEPKEYs.exe
    2013-09-21 02:39:47    71680    ----a-w-    C:\Windows\SysWow64\RegisterIEPKEYs.exe
    2013-09-14 01:10:19    497152    ----a-w-    C:\Windows\System32\drivers\afd.sys
    2013-09-09 07:57:00    829264    ----a-w-    C:\Windows\System32\msvcr100.dll
    2013-09-09 07:57:00    608080    ----a-w-    C:\Windows\System32\msvcp100.dll
    2013-09-08 02:30:37    1903552    ----a-w-    C:\Windows\System32\drivers\tcpip.sys
    2013-09-08 02:27:14    327168    ----a-w-    C:\Windows\System32\mswsock.dll
    2013-09-08 02:03:58    231424    ----a-w-    C:\Windows\SysWow64\mswsock.dll
    2013-08-29 02:17:48    5549504    ----a-w-    C:\Windows\System32\ntoskrnl.exe
    2013-08-29 02:16:35    1732032    ----a-w-    C:\Windows\System32\ntdll.dll
    2013-08-29 02:16:28    243712    ----a-w-    C:\Windows\System32\wow64.dll
    2013-08-29 02:16:14    859648    ----a-w-    C:\Windows\System32\tdh.dll
    2013-08-29 02:13:28    878080    ----a-w-    C:\Windows\System32\advapi32.dll
    2013-08-29 01:51:45    3969472    ----a-w-    C:\Windows\SysWow64\ntkrnlpa.exe
    2013-08-29 01:51:45    3914176    ----a-w-    C:\Windows\SysWow64\ntoskrnl.exe
    2013-08-29 01:50:31    5120    ----a-w-    C:\Windows\SysWow64\wow32.dll
    2013-08-29 01:50:30    1292192    ----a-w-    C:\Windows\SysWow64\ntdll.dll
    2013-08-29 01:50:16    619520    ----a-w-    C:\Windows\SysWow64\tdh.dll
    2013-08-29 01:48:17    640512    ----a-w-    C:\Windows\SysWow64\advapi32.dll
    2013-08-29 01:48:15    44032    ----a-w-    C:\Windows\apppatch\acwow64.dll
    2013-08-29 00:49:53    25600    ----a-w-    C:\Windows\SysWow64\setup16.exe
    2013-08-29 00:49:52    7680    ----a-w-    C:\Windows\SysWow64\instnm.exe
    2013-08-29 00:49:52    14336    ----a-w-    C:\Windows\SysWow64\ntvdm64.dll
    2013-08-29 00:49:49    2048    ----a-w-    C:\Windows\SysWow64\user.exe
    2013-08-28 01:21:06    3155968    ----a-w-    C:\Windows\System32\win32k.sys
    2013-08-28 01:12:33    461312    ----a-w-    C:\Windows\System32\scavengeui.dll
    2013-08-05 02:25:45    155584    ----a-w-    C:\Windows\System32\drivers\ataport.sys
    2013-08-02 02:14:57    215040    ----a-w-    C:\Windows\System32\winsrv.dll
    2013-08-02 02:13:34    424448    ----a-w-    C:\Windows\System32\KernelBase.dll
    2013-08-02 01:50:42    274944    ----a-w-    C:\Windows\SysWow64\KernelBase.dll
    2013-08-02 01:09:17    338432    ----a-w-    C:\Windows\System32\conhost.exe
    2013-08-02 00:59:09    112640    ----a-w-    C:\Windows\System32\smss.exe
    2013-08-02 00:43:05    6144    ---ha-w-    C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
    2013-08-02 00:43:05    4608    ---ha-w-    C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
    2013-08-02 00:43:05    3584    ---ha-w-    C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
    2013-08-02 00:43:05    3072    ---ha-w-    C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
    2013-08-01 12:09:36    983488    ----a-w-    C:\Windows\System32\drivers\dxgkrnl.sys
    2013-07-25 09:25:54    1888768    ----a-w-    C:\Windows\System32\WMVDECOD.DLL
    2013-07-25 08:57:27    1620992    ----a-w-    C:\Windows\SysWow64\WMVDECOD.DLL
    2013-07-20 10:33:12    102608    ----a-w-    C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
    2013-07-20 10:33:08    124112    ----a-w-    C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
    2013-07-19 01:58:42    2048    ----a-w-    C:\Windows\System32\tzres.dll
    2013-07-19 01:41:01    2048    ----a-w-    C:\Windows\SysWow64\tzres.dll
    .
    ============= FINISH: 20:37:14.10 ===============
     

  3. Need help removing Malware

    in Malware Removal

    Posted

    Malwarebytes Anti-Malware (Trial) 1.75.0.1300
    www.malwarebytes.org

    Database version: v2013.10.13.06

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 10.0.9200.16721
    Dejah :: DEJAH-PC [administrator]

    Protection: Enabled

    10/13/2013 6:41:00 PM
    mbam-log-2013-10-13 (18-41-00).txt

    Scan type: Quick scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 218000
    Time elapsed: 13 minute(s), 40 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 2
    HKCU\Software\PC Health Kit (Rogue.PCHealthKit) -> Quarantined and deleted successfully.
    HKLM\SOFTWARE\Google\Chrome\Extensions\nbdbmopeebalgaeghmjoegpkngglikgn (PUP.Optional.FreeHDSport.A) -> Quarantined and deleted successfully.

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 10
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit (Rogue.PCHealthKit) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511 (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\plugins (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\xpi (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\xpi\defaults (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\xpi\defaults\preferences (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071 (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\xpi (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\xpi\defaults (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\xpi\defaults\preferences (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    Files Detected: 87
    C:\$Recycle.Bin\S-1-5-21-3221914198-481495801-3267788807-1001\$RV7CFSH.exe (PUP.Optional.OptimizePro.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\A23w9Mqz.exe.part (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\csnmvhXL.exe.part (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\Installer.exe (PUP.Optional.SmartBar.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\mgsqlite3.7z (PUP.Optional.SweetIM) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\mgsqlite3.dll (PUP.Optional.SweetIM) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\newsetup.exe (PUP.Optional.GreatArcadeHits.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nsc21C.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nsd1165.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nse6050.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nsfC2E4.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nshA9CC.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nsm63E7.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nso4B85.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nso544E.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nso9DD9.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nsoE9F5.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nsrA0F9.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nsrCEEB.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\nswE5A3.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\Shortcut_BundleSweetIMSetup.exe (PUP.Optional.SweetIM) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\Shortcut_IMsetup.exe (PUP.Optional.SweetIM) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\SPStub.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\SweetIMInstallValidator.exe (PUP.Optional.Conduit) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\W8CStcef.exe.part (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\WSSetup.exe (PUP.Optional.InstallBrain.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\YsAt8s1u.exe.part (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\716184.Uninstall\__Uninstall_.exe (PUP.Optional.InstallCore) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\B1428E56-BAB0-7891-9D27-F1682C038350\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\chLogic.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\ctbe.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\ffLogic.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\ieLogic.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\sl.exe (PUP.Optional.Conduit) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\spch.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\spff.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\statisticsStub.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\chLogic.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\ctbe.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\ffLogic.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\ieLogic.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\sl.exe (PUP.Optional.Conduit) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\spch.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\spff.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\statisticsStub.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\is1412836710\444433314_stp.EXE (PUP.Optional.OptimizerPro.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Downloads\FirstRowSportAppsSetup(18_3f)2_ff(1).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Downloads\FirstRowSportAppsSetup(18_3f)2_ff(2).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Downloads\FirstRowSportAppsSetup(18_3f)2_ff.exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Downloads\FLVPlayerSetup.exe (PUP.Optional.InstallCore) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Local Settings\Temporary Internet Files\Content.IE5\1VQYCAAY\SPSetup[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Local Settings\Temporary Internet Files\Content.IE5\1VQYCAAY\SweetPacks_wpf[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Local Settings\Temporary Internet Files\Content.IE5\BY7AHGYO\statisticsstub[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Local Settings\Temporary Internet Files\Content.IE5\DDW9EQLD\bundlesweetimsetup[1].exe (PUP.Optional.SweetIM) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Local Settings\Temporary Internet Files\Content.IE5\DDW9EQLD\checktbexist[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Local Settings\Temporary Internet Files\Content.IE5\SPZL9A0P\checktbexist[1].exe (PUP.Optional.Conduit) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Local Settings\Temporary Internet Files\Content.IE5\SPZL9A0P\mgsqlite3[1].7z (PUP.Optional.SweetIM) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Local Settings\Temporary Internet Files\Content.IE5\SPZL9A0P\SweetPacks[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Windows\Installer\2a12569.msi (PUP.Optional.SweetIM) -> Quarantined and deleted successfully.
    C:\Windows\Installer\3f862a.msi (PUP.Optional.SweetIM) -> Quarantined and deleted successfully.
    C:\Setup.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\Users\Dejah\Desktop\PC Health Kit.lnk (Rogue.PCHealthKit) -> Quarantined and deleted successfully.
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit\PC Health Kit.lnk (Rogue.PCHealthKit) -> Quarantined and deleted successfully.
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit\Check updates.lnk (Rogue.PCHealthKit) -> Quarantined and deleted successfully.
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit\Help.lnk (Rogue.PCHealthKit) -> Quarantined and deleted successfully.
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit\PC Health Kit on the Web.lnk (Rogue.PCHealthKit) -> Quarantined and deleted successfully.
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit\Uninstall PC Health Kit.lnk (Rogue.PCHealthKit) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\chromeid.txt (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\conduit.xml (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\CT3310511.txt (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\CT3310511.xpi (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\initdata.json (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\manifest.json (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\setup.ini.txt (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\stub.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\version.txt (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\plugins\TBVerifier.dll (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\xpi\install.rdf (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3310511\xpi\defaults\preferences\defaults.js (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\chromeid.txt (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\conduit.xml (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\CT3316071.xpi (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\setup.ini.txt (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\stub.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\version.txt (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\xpi\install.rdf (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
    C:\Users\Dejah\AppData\Local\Temp\ct3316071\xpi\defaults\preferences\defaults.js (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

    (end)
     

  4. Need help removing Malware

    in Malware Removal

    Posted

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Thisisu
    Version: 6.0.4 (10.06.2013:1)
    OS: Windows 7 Home Premium x64
    Ran by Dejah on Sun 10/13/2013 at 18:18:37.66
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    ~~~ Services



    ~~~ Registry Values

    Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\pc health kit
    Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\selectrebates
    Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL



    ~~~ Registry Keys

    Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
    Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3221914198-481495801-3267788807-1001\Software\SweetIM
    Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
    Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\msntask_RASAPI32
    Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\msntask_RASMANCS
    Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\msntask_RASAPI32
    Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\msntask_RASMANCS
    Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6468C1EA-BFC0-402C-AA6F-0689AED8A39A}
    Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABD3B5E1-B268-407B-A150-2641DAB8D898}



    ~~~ Files



    ~~~ Folders

    Successfully deleted: [Folder] "C:\Users\Dejah\AppData\Roaming\pc health kit"
    Successfully deleted: [Folder] "C:\Users\Dejah\appdata\local\cre"
    Successfully deleted: [Folder] "C:\Program Files (x86)\firstrowsportapp.com"
    Successfully deleted: [Folder] "C:\Program Files (x86)\freehdsport.tv"
    Failed to delete: [Folder] "C:\Program Files (x86)\pc health kit"
    Successfully deleted: [Folder] "C:\Program Files (x86)\Common Files\homepage protection"
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{06722501-21DD-4E94-9F62-7DF2E4C4963C}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{06F6275F-712D-4E80-9865-4B0E61CC90D8}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{0931EFD2-10FA-4DAA-8C72-D138D9FFE1AF}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{0C1915F1-AF70-4030-B45B-33A79D79DD3D}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{1301B6BE-0129-492B-9235-C9AB2178B20A}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{136C885E-2065-4049-BE17-A90404DD17D2}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{1A80154C-0A0E-4AEC-B6C1-79C55E361A15}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{1FEA2193-6E12-4428-80B6-8BDDDD0F14B3}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{228B9B38-C313-4DBA-9C18-525A261EF105}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{33FA2F53-7BA6-4C5D-88AC-71F89876CDED}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{35D51852-70D4-41DD-B99B-23F395B54B6F}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{375DBC53-38DD-4DD1-B284-BCC4DE698C5D}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{3DE92426-C559-415C-AC5E-1D119BDDAB04}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{473EAD1D-5C0E-4DCF-BDF3-B1954489804C}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{4D532CF6-941D-4EE4-BE3B-8BE36848F546}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{5203E50D-5621-41F3-B4B8-9430DC85A3AD}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{53FFA6D2-C083-4240-8B13-A1CEC23172BE}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{5805F4E6-A359-48A1-B9D9-93354040B7B0}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{583501BE-8D7B-407C-AFE3-BD517413FA7B}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{671C7243-C6D0-4EB2-87A5-7A66F85CF343}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{6944C0B3-02E4-4EB1-B4B3-A1947D442861}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{706FD2F3-3EA9-4F95-8D4C-3D28E5C62B0D}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{76EDE711-D26A-4406-BD07-0D400CF2A107}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{79DC9B68-C085-4156-AD98-78748322B439}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{7FEB8BEE-8A37-4540-B069-DA16FEBFA83F}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{858D0DDD-AD0D-4869-8A5A-AE97BE6532DC}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{86C5553D-024D-44AA-8C2C-516316EA2F72}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{8CB0FA1A-4D39-4A14-AC8B-04BEEBFAC25D}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{94F8C598-24C8-4318-92BB-EAC522B3EC45}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{95B46064-ED8B-4202-ABA1-CACBBF5E6B05}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{A20D4824-D3D2-45DC-8560-A1BFDBA4D335}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{A5773953-0B50-4206-8BA2-CB7F4A969448}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{A768CB58-46A4-44EB-A80D-A03BD4191D5B}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{ABE461DE-AA23-4534-904E-740F0D85F86F}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{ADEABBD0-1E41-40AA-9A52-F756E69D7CD7}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{AF4A4E0E-5E5F-48F4-8BDB-8429A3CFC170}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{B5F4C25C-A38C-45FB-98E6-D10EAC3B25C4}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{B75272D3-DF3D-427D-8017-595C13268AD9}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{B9C1ECBD-D42F-4DD2-A5D3-01225A4270F9}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{BB67DA81-6427-4524-9D53-197B442A4F5D}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{C0EE1C6A-CDCB-47F2-8E72-7781AFA582B2}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{C10AEA31-C5FF-4B22-90C3-074B08A70377}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{C1D18D08-7356-4CA0-A8CC-D1BB95604B2F}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{C659CF8E-FFAD-4FD5-8718-E6F528856C77}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{C9B134E5-9BF8-43CE-8F9B-44ED186C661E}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{CE585A37-5FE6-486B-BE09-89414198799F}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{D2D3818E-7995-4836-8ACD-6B15EEE786A5}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{D3D2EDFA-ECA5-4CDD-8A5C-5BD4354975B8}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{D4588C7B-A53E-47C3-84DE-64A17CCCE721}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{D8068586-7E37-4515-AE2A-9FA521100EB1}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{D8851C5E-B2B3-4033-8074-B90DE0AA883E}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{DA47B4AC-2D7C-4C69-B6E4-10980E89F14E}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{DE019232-6433-4D53-8A99-120DA4C8B7CA}
    Successfully deleted: [Empty Folder] C:\Users\Dejah\appdata\local\{E1873F2F-7989-410C-AA5B-28E6A58B926E}



    ~~~ FireFox

    Successfully deleted: [Folder] C:\Users\Dejah\AppData\Roaming\mozilla\firefox\profiles\wn65gwho.default\extensions\staged
    Successfully deleted the following from C:\Users\Dejah\AppData\Roaming\mozilla\firefox\profiles\wn65gwho.default\prefs.js

    user_pref("extensions.defaulttab.installdate", 1381689372);
    user_pref("extensions.defaulttab.lastNetSeerDownload", 1381689374);
    user_pref("extensions.defaulttab.useNewTabWhiteList", false);
    user_pref("extensions.sahtb.url.merchants.data", "<?xml version=\"1.0\" ?><MerchantSettings><v n=\"396\" /><GlobalSuppresses><s u=\".cab\" g=\"13\" i=\"1342\" /><s u=\".eot\"

    Emptied folder: C:\Users\Dejah\AppData\Roaming\mozilla\firefox\profiles\wn65gwho.default\minidumps [183 files]



    ~~~ Chrome

    Successfully deleted: [Folder] C:\Users\Dejah\appdata\local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl



    ~~~ Event Viewer Logs were cleared





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on Sun 10/13/2013 at 18:34:48.03
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     

  5. Need help removing Malware

    in Malware Removal

    Posted

    # AdwCleaner v3.007 - Report created 13/10/2013 at 17:23:29
    # Updated 09/10/2013 by Xplode
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username : Dejah - DEJAH-PC
    # Running from : C:\Users\Dejah\Downloads\adwcleaner.exe
    # Option : Clean

    ***** [ Services ] *****

    Service Deleted : CltMngSvc
    [#] Service Deleted : IBUpdaterService
    [#] Service Deleted : Yontoo Desktop Updater

    ***** [ Files / Folders ] *****

    Folder Deleted : C:\ProgramData\AVG Secure Search
    Folder Deleted : C:\ProgramData\Babylon
    Folder Deleted : C:\ProgramData\Conduit
    Folder Deleted : C:\ProgramData\SweetIM
    Folder Deleted : C:\ProgramData\Tarma Installer
    Folder Deleted : C:\Program Files (x86)\AVG Secure Search
    Folder Deleted : C:\Program Files (x86)\Conduit
    Folder Deleted : C:\Program Files (x86)\optimizer pro
    Folder Deleted : C:\Program Files (x86)\Searchprotect
    Folder Deleted : C:\Program Files (x86)\SelectRebates
    Folder Deleted : C:\Program Files (x86)\SweetIM
    Folder Deleted : C:\Program Files (x86)\Zynga
    Folder Deleted : C:\Program Files (x86)\SweetPacks
    Folder Deleted : C:\Program Files (x86)\SweetPacks_A11
    Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
    Folder Deleted : C:\Windows\SysWOW64\ARFC
    Folder Deleted : C:\Windows\SysWOW64\jmdp
    Folder Deleted : C:\Windows\SysWOW64\WNLT
    Folder Deleted : C:\Users\Dejah\AppData\Local\apn
    Folder Deleted : C:\Users\Dejah\AppData\Local\AVG Secure Search
    Folder Deleted : C:\Users\Dejah\AppData\Local\Conduit
    Folder Deleted : C:\Users\Dejah\AppData\LocalLow\AVG Secure Search
    Folder Deleted : C:\Users\Dejah\AppData\LocalLow\Conduit
    Folder Deleted : C:\Users\Dejah\AppData\LocalLow\Delta
    Folder Deleted : C:\Users\Dejah\AppData\LocalLow\SweetIM
    Folder Deleted : C:\Users\Dejah\AppData\LocalLow\Zynga
    Folder Deleted : C:\Users\Dejah\AppData\LocalLow\SweetPacks
    Folder Deleted : C:\Users\Dejah\AppData\LocalLow\SweetPacks_A11
    Folder Deleted : C:\Users\Dejah\AppData\Roaming\Babylon
    Folder Deleted : C:\Users\Dejah\AppData\Roaming\DefaultTab
    Folder Deleted : C:\Users\Dejah\AppData\Roaming\DSite
    Folder Deleted : C:\Users\Dejah\AppData\Roaming\iWin
    Folder Deleted : C:\Users\Dejah\AppData\Roaming\optimizer pro
    Folder Deleted : C:\Users\Dejah\AppData\Roaming\Searchprotect
    Folder Deleted : C:\Users\Dejah\Documents\optimizer pro
    Folder Deleted : C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\jetpack
    Folder Deleted : C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\Extensions\[email protected]
    Folder Deleted : C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\Extensions\Avg@toolbar
    Folder Deleted : C:\Users\Dejah\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
    Folder Deleted : C:\Users\Dejah\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
    Folder Deleted : C:\Users\Dejah\AppData\Local\Google\Chrome\User Data\Default\Extensions\opfedmikikmahmpaimpfelmikhaigobp
    [!] Folder Deleted : C:\Users\Dejah\AppData\Local\Google\Chrome\User Data\Default\Extensions\opfedmikikmahmpaimpfelmikhaigobp
    File Deleted : C:\END
    File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
    File Deleted : C:\Windows\System32\dmwu.exe
    File Deleted : C:\Windows\System32\ImhxxpComm.dll
    File Deleted : C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\bProtector_extensions.rdf
    File Deleted : C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\defaulttab.config
    File Deleted : C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\invalidprefs.js
    File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
    File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Babylon.xml
    File Deleted : C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\searchplugins\delta.xml
    File Deleted : C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\searchplugins\searchgol.xml
    File Deleted : C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\searchplugins\search-here.xml
    File Deleted : C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\user.js
    File Deleted : C:\Users\Dejah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
    File Deleted : C:\Windows\System32\Tasks\DSite

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
    Key Deleted : HKCU\Software\Google\Chrome\Extensions\opfedmikikmahmpaimpfelmikhaigobp
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\opfedmikikmahmpaimpfelmikhaigobp
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [searchProtect]
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
    Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
    Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
    Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
    Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
    Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
    Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
    Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
    Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
    Key Deleted : HKLM\SOFTWARE\Classes\S
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
    Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
    Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
    Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
    Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\HPSF_Tasks_RASAPI32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\HPSF_Tasks_RASMANCS
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [searchProtectAll]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [sweetIM]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
    Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
    Key Deleted : HKCU\Software\90d7d0e03bb912
    Key Deleted : HKLM\SOFTWARE\90d7d0e03bb912
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2438727
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3310511
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3316071
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_opfedmikikmahmpaimpfelmikhaigobp]
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_banjjklfojcdbofbhbgiedekefohoaff]
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{98279C38-DE4B-4BCF-93C9-8EC26069D6F4}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E8DAAA30-6CAA-4B58-9603-8E54238219E2}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E8A1050-CF67-4575-92DF-DCC60E7D952D}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E6C03E0-D368-4690-8168-9848D4C0F587}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D94B53EB-4F19-43C9-80CB-0645C447694C}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B13EC3E-999A-4B70-B9CB-2617B8323822}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9BA373B3-227F-4D72-8591-3CD81DA123A8}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E8DAAA30-6CAA-4B58-9603-8E54238219E2}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E8A1050-CF67-4575-92DF-DCC60E7D952D}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7B13EC3E-999A-4B70-B9CB-2617B8323822}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98279C38-DE4B-4BCF-93C9-8EC26069D6F4}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E8DAAA30-6CAA-4B58-9603-8E54238219E2}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35D-6118-11DC-9C72-001320C79847}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7B13EC3E-999A-4B70-B9CB-2617B8323822}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98279C38-DE4B-4BCF-93C9-8EC26069D6F4}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E8DAAA30-6CAA-4B58-9603-8E54238219E2}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7E8A1050-CF67-4575-92DF-DCC60E7D952D}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7B13EC3E-999A-4B70-B9CB-2617B8323822}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5E6C03E0-D368-4690-8168-9848D4C0F587}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D94B53EB-4F19-43C9-80CB-0645C447694C}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9BA373B3-227F-4D72-8591-3CD81DA123A8}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BF143CEE-9D39-4788-A089-CBE99FA86E54}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{398FEE9F-EAF9-4879-98D7-0677E0D47D15}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{493A230F-C5C7-4303-9593-29D9855D929B}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5651A468-756F-4D66-B8C3-7FF8E29D00AF}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98279C38-DE4B-4BCF-93C9-8EC26069D6F4}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{7E8A1050-CF67-4575-92DF-DCC60E7D952D}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{7B13EC3E-999A-4B70-B9CB-2617B8323822}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{98279C38-DE4B-4BCF-93C9-8EC26069D6F4}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7B13EC3E-999A-4B70-B9CB-2617B8323822}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EEE6C35D-6118-11DC-9C72-001320C79847}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{7E8A1050-CF67-4575-92DF-DCC60E7D952D}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{7B13EC3E-999A-4B70-B9CB-2617B8323822}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{7E8A1050-CF67-4575-92DF-DCC60E7D952D}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{7B13EC3E-999A-4B70-B9CB-2617B8323822}]
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKCU\Software\1ClickDownload
    Key Deleted : HKCU\Software\AVG Secure Search
    Key Deleted : HKCU\Software\BabSolution
    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\DataMngr
    [#] Key Deleted : HKCU\Software\DataMngr_Toolbar
    Key Deleted : HKCU\Software\Default Tab
    Key Deleted : HKCU\Software\dsiteproducts
    Key Deleted : HKCU\Software\ilivid
    Key Deleted : HKCU\Software\IM
    Key Deleted : HKCU\Software\ImInstaller
    Key Deleted : HKCU\Software\InstallCore
    Key Deleted : HKCU\Software\searchgol LTD
    Key Deleted : HKCU\Software\SearchProtect
    Key Deleted : HKCU\Software\smartbar
    Key Deleted : HKCU\Software\wnlt
    Key Deleted : HKCU\Software\YahooPartnerToolbar
    Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
    Key Deleted : HKCU\Software\AppDataLow\Toolbar
    Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
    Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
    Key Deleted : HKCU\Software\AppDataLow\Software\smartbar
    Key Deleted : HKCU\Software\AppDataLow\Software\SweetPacks
    Key Deleted : HKCU\Software\AppDataLow\Software\SweetPacks_A11
    Key Deleted : HKCU\Software\AppDataLow\Software\Zynga
    Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
    Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
    Key Deleted : HKLM\Software\AVG Secure Search
    Key Deleted : HKLM\Software\AVG Security Toolbar
    Key Deleted : HKLM\Software\Babylon
    Key Deleted : HKLM\Software\BabylonToolbar
    Key Deleted : HKLM\Software\Conduit
    Key Deleted : HKLM\Software\DataMngr
    Key Deleted : HKLM\Software\Freeze.com
    Key Deleted : HKLM\Software\SearchProtect
    Key Deleted : HKLM\Software\SweetPacks
    Key Deleted : HKLM\Software\SweetPacks_A11
    Key Deleted : HKLM\Software\Zynga
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wnlt
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Zynga Toolbar
    Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer
    Key Deleted : [x64] HKLM\SOFTWARE\wnlt
    Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL

    ***** [ Browsers ] *****

    -\\ Internet Explorer v10.0.9200.16720

    Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [start Page]

    -\\ Mozilla Firefox v24.0 (en-US)

    [ File : C:\Users\Dejah\AppData\Roaming\Mozilla\Firefox\Profiles\wn65gwho.default\prefs.js ]

    Line Deleted : user_pref("CT3310511.FF19Solved", "true");
    Line Deleted : user_pref("CT3310511.UserID", "UN39393586881330638");
    Line Deleted : user_pref("CT3310511.browser.search.defaultthis.engineName", "true");
    Line Deleted : user_pref("CT3310511.fullUserID", "UN39393586881330638.IN.20131013135210");
    Line Deleted : user_pref("CT3310511.installDate", "13/10/2013 13:52:22");
    Line Deleted : user_pref("CT3310511.installSessionId", "{B9EE29DA-AF5B-4F74-85E0-2E19EBB758A8}");
    Line Deleted : user_pref("CT3310511.installSp", "TRUE");
    Line Deleted : user_pref("CT3310511.installerVersion", "1.7.1.7");
    Line Deleted : user_pref("CT3310511.keyword", "true");


    Line Deleted : user_pref("CT3310511.originalSearchEngine", "");
    Line Deleted : user_pref("CT3310511.originalSearchEngineName", "");
    Line Deleted : user_pref("CT3310511.searchRevert", "false");
    Line Deleted : user_pref("CT3310511.searchUserMode", "2");
    Line Deleted : user_pref("CT3310511.smartbar.homepage", "true");
    Line Deleted : user_pref("CT3310511.versionFromInstaller", "10.20.3.20");
    Line Deleted : user_pref("CT3310511.xpeMode", "0");
    Line Deleted : user_pref("CT3316071.ConnectTB_activeApp.enc", "aW5zdGFncmFt");
    Line Deleted : user_pref("CT3316071.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3316071.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3316071.FF19Solved", "true");
    Line Deleted : user_pref("CT3316071.FirstTime", "true");
    Line Deleted : user_pref("CT3316071.FirstTimeFF3", "true");
    Line Deleted : user_pref("CT3316071.LAST_CLIENT_STATS_SUBMIT_2.enc", "MTM4MTcwMTY1Mg==");
    Line Deleted : user_pref("CT3316071.PG_ENABLE", "dHJ1ZQ==");
    Line Deleted : user_pref("CT3316071.SF_JUST_INSTALLED.enc", "RkFMU0U=");
    Line Deleted : user_pref("CT3316071.SF_STATUS.enc", "RU5BQkxFRA==");
    Line Deleted : user_pref("CT3316071.SF_USER_ID.enc", "Y2lkXzEzMTAyMDEzMTYwNTAzODg0MzA2");

    Line Deleted : user_pref("CT3316071.UserID", "UN21364190081381716");
    Line Deleted : user_pref("CT3316071.acp_personal.appstate.enc", "ZW5hYmxl");
    Line Deleted : user_pref("CT3316071.addressBarTakeOverEnabledInHidden", "true");
    Line Deleted : user_pref("CT3316071.browser.search.defaultthis.engineName", "true");
    Line Deleted : user_pref("CT3316071.cbfirsttime.enc", "U3VuIE9jdCAxMyAyMDEzIDE2OjAwOjUzIEdNVC0wNjAwIChNb3VudGFpbiBTdGFuZGFyZCBUaW1lKQ==");
    Line Deleted : user_pref("CT3316071.countryCode", "US");
    Line Deleted : user_pref("CT3316071.defaultSearch", "true");
    Line Deleted : user_pref("CT3316071.embeddedsData", "[{\"appId\":\"130250223890654913\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
    Line Deleted : user_pref("CT3316071.enableAlerts", "true");
    Line Deleted : user_pref("CT3316071.enableSearchFromAddressBar", "true");
    Line Deleted : user_pref("CT3316071.firstTimeDialogOpened", "true");
    Line Deleted : user_pref("CT3316071.fixPageNotFoundError", "true");
    Line Deleted : user_pref("CT3316071.fixPageNotFoundErrorByUser", "true");
    Line Deleted : user_pref("CT3316071.fixPageNotFoundErrorInHidden", "true");
    Line Deleted : user_pref("CT3316071.fullUserID", "UN21364190081381716.IN.20131013112442");
    Line Deleted : user_pref("CT3316071.installDate", "13/10/2013 11:25:02");
    Line Deleted : user_pref("CT3316071.installId", "cid103");
    Line Deleted : user_pref("CT3316071.installSessionId", "{7DBD227C-CC21-40E4-986D-7C9DE48E50A6}");
    Line Deleted : user_pref("CT3316071.installSp", "TRUE");
    Line Deleted : user_pref("CT3316071.installType", "conduitnsisintegration");
    Line Deleted : user_pref("CT3316071.installUsage", "2013-10-13T20:29:15.8612764+03:00");
    Line Deleted : user_pref("CT3316071.installUsageEarly", "2013-10-13T20:29:12.4237764+03:00");
    Line Deleted : user_pref("CT3316071.installerVersion", "1.7.1.7");
    Line Deleted : user_pref("CT3316071.isCheckedStartAsHidden", true);
    Line Deleted : user_pref("CT3316071.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3316071.isFirstTimeToolbarLoading", "false");
    Line Deleted : user_pref("CT3316071.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
    Line Deleted : user_pref("CT3316071.keyword", "true");

    Line Deleted : user_pref("CT3316071.lastVersion", "10.20.3.520");
    Line Deleted : user_pref("CT3316071.mam_gk_appStateReportTime.enc", "MTM4MTcwMTAwODg5MQ==");
    Line Deleted : user_pref("CT3316071.mam_gk_appState_ACplus.enc", "b24=");
    Line Deleted : user_pref("CT3316071.mam_gk_appState_CouponBuddy.enc", "b24=");
    Line Deleted : user_pref("CT3316071.mam_gk_appState_Discover.enc", "b24=");
    Line Deleted : user_pref("CT3316071.mam_gk_appState_Discover_Apps.enc", "b24=");
    Line Deleted : user_pref("CT3316071.mam_gk_appState_Easytobook.enc", "b24=");
    Line Deleted : user_pref("CT3316071.mam_gk_appState_Easytobook_targeted.enc", "b24=");
    Line Deleted : user_pref("CT3316071.mam_gk_appState_Easytobookcars.enc", "b24=");
    Line Deleted : user_pref("CT3316071.mam_gk_appState_Find-a-Pro.enc", "b24=");
    Line Deleted : user_pref("CT3316071.mam_gk_appState_PriceGong.enc", "b24=");
    Line Deleted : user_pref("CT3316071.mam_gk_appState_WindowShopper.enc", "b24=");
    Line Deleted : user_pref("CT3316071.mam_gk_appState_app13.enc", "b24=");
    Line Deleted : user_pref("CT3316071.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsInNjcmlwdFVybCI6bnVsbCwib3B0aW9uc0Rp[...]
    Line Deleted : user_pref("CT3316071.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
    Line Deleted : user_pref("CT3316071.mam_gk_calledSetupService.enc", "MQ==");
    Line Deleted : user_pref("CT3316071.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlBpY2xpY2tWMi1XZWJTZWFyY2giLCJjcml0ZXJpYXMiOlt7ImNyaXRlcmlhSWQiOiIxZWJkNjhhYS0yMmUxLTQ1N2EtYTkzNC02ZDJkMDRkMGRjMWMiLCJ[...]
    Line Deleted : user_pref("CT3316071.mam_gk_currentVersion.enc", "MS4xMC40LjA=");
    Line Deleted : user_pref("CT3316071.mam_gk_existingUsersRecoveryDone.enc", "MQ==");
    Line Deleted : user_pref("CT3316071.mam_gk_first_time.enc", "MQ==");
    Line Deleted : user_pref("CT3316071.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
    Line Deleted : user_pref("CT3316071.mam_gk_lastLoginTime.enc", "MTM4MTcwMTAwNTI0Mg==");
    Line Deleted : user_pref("CT3316071.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOnsiVGV4dCI6IlZhbHVlIEFwcHMgZW5yaWNoZXMgeW91ciB3ZWIg[...]
    Line Deleted : user_pref("CT3316071.mam_gk_mamEnabled.enc", "dHJ1ZQ==");
    Line Deleted : user_pref("CT3316071.mam_gk_new_welcome_experience.enc", "MQ==");
    Line Deleted : user_pref("CT3316071.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
    Line Deleted : user_pref("CT3316071.mam_gk_settings1.10.4.0.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiMzVfMCIsImlzVGVzdCI6dHJ1ZSwiVXNlckNvdW50cnlDb2RlIjoiVVMiLCJpc1dlbGNvbWVFeHBl[...]
    Line Deleted : user_pref("CT3316071.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
    Line Deleted : user_pref("CT3316071.mam_gk_userId.enc", "NzU3MTQzZmYtNDVkMi00MjczLTk3MmEtMWI2MGY2OGYxMTU1");
    Line Deleted : user_pref("CT3316071.mam_gk_user_approval_interacted.enc", "MQ==");
    Line Deleted : user_pref("CT3316071.mam_gk_welcomeDialogMode.enc", "MQ==");
    Line Deleted : user_pref("CT3316071.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fsweetpacksa11.ourtoolbar.com%2FUninstallInstructions%2F\",\"EB_MAIN_FRAME_TITLE\":\"%0A%09How%20to%20Uninstall%0A\",[...]
    Line Deleted : user_pref("CT3316071.openThankYouPage", "false");
    Line Deleted : user_pref("CT3316071.openUninstallPage", "true");
    Line Deleted : user_pref("CT3316071.originalHomepage", "about:home");
    Line Deleted : user_pref("CT3316071.originalSearchAddressUrl", "");
    Line Deleted : user_pref("CT3316071.originalSearchEngine", "");
    Line Deleted : user_pref("CT3316071.originalSearchEngineName", "");
    Line Deleted : user_pref("CT3316071.price-gong.isManagedApp", "true");
    Line Deleted : user_pref("CT3316071.revertSettingsEnabled", "false");
    Line Deleted : user_pref("CT3316071.search.searchAppId", "130250223890654913");
    Line Deleted : user_pref("CT3316071.search.searchCount", "0");
    Line Deleted : user_pref("CT3316071.searchFromAddressBarEnabledByUser", "true");
    Line Deleted : user_pref("CT3316071.searchInNewTabEnabledByUser", "true");
    Line Deleted : user_pref("CT3316071.searchInNewTabEnabledInHidden", "true");
    Line Deleted : user_pref("CT3316071.searchRevert", "false");
    Line Deleted : user_pref("CT3316071.searchSuggestEnabledByUser", "true");
    Line Deleted : user_pref("CT3316071.searchUserMode", "2");
    Line Deleted : user_pref("CT3316071.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3316071.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3316071.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
    Line Deleted : user_pref("CT3316071.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3316071\"}");

    Line Deleted : user_pref("CT3316071.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"SweetPacks A11 \"}");
    Line Deleted : user_pref("CT3316071.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3316071.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_Configuration_lastUpdate", "1381685376126");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1381685380081");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_appsMetadata_lastUpdate", "1381685380101");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1381685379862");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1381685376782");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1381685380561");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_login_10.20.3.20_lastUpdate", "1381685380589");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_login_10.20.3.520_lastUpdate", "1381689376062");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1381685379963");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_searchAPI_lastUpdate", "1381685376765");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_serviceMap_lastUpdate", "1381685375181");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_toolbarContextMenu_lastUpdate", "1381685380425");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_toolbarSettings_lastUpdate", "1381700993258");
    Line Deleted : user_pref("CT3316071.serviceLayer_services_translation_lastUpdate", "1381685380524");
    Line Deleted : user_pref("CT3316071.settingsINI", true);
    Line Deleted : user_pref("CT3316071.shouldFirstTimeDialog", "false");
    Line Deleted : user_pref("CT3316071.showToolbarPermission", "false");
    Line Deleted : user_pref("CT3316071.smartbar.CTID", "CT3316071");
    Line Deleted : user_pref("CT3316071.smartbar.Uninstall", "0");
    Line Deleted : user_pref("CT3316071.smartbar.homepage", "true");
    Line Deleted : user_pref("CT3316071.smartbar.toolbarName", "SweetPacks A11 ");
    Line Deleted : user_pref("CT3316071.startPage", "true");
    Line Deleted : user_pref("CT3316071.toolbarBornServerTime", "13-10-2013");
    Line Deleted : user_pref("CT3316071.toolbarCurrentServerTime", "13-10-2013");
    Line Deleted : user_pref("CT3316071.toolbarLoginClientTime", "Sun Oct 13 2013 11:29:40 GMT-0600 (Mountain Standard Time)");
    Line Deleted : user_pref("CT3316071.versionFromInstaller", "10.20.3.20");
    Line Deleted : user_pref("CT3316071.xpeMode", "0");
    Line Deleted : user_pref("CT3316071_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1381701630505,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

    Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "SweetPacks A11 Customized Web Search");


    Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3316071");
    Line Deleted : user_pref("browser.search.defaultenginename", "SweetPacks Customized Web Search");
    Line Deleted : user_pref("browser.search.defaultthis.engineName", "SweetPacks Customized Web Search");

    Line Deleted : user_pref("browser.search.selectedEngine", "SweetPacks Customized Web Search");

    Line Deleted : user_pref("extensions.delta.admin", false);
    Line Deleted : user_pref("extensions.delta.aflt", "babsst");
    Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
    Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
    Line Deleted : user_pref("extensions.delta.dfltLng", "en");
    Line Deleted : user_pref("extensions.delta.excTlbr", false);
    Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
    Line Deleted : user_pref("extensions.delta.id", "b699d7ec0000000000000ceee6aa1c99");
    Line Deleted : user_pref("extensions.delta.instlDay", "15811");
    Line Deleted : user_pref("extensions.delta.instlRef", "sst");
    Line Deleted : user_pref("extensions.delta.newTab", false);
    Line Deleted : user_pref("extensions.delta.prdct", "delta");
    Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
    Line Deleted : user_pref("extensions.delta.rvrt", "false");
    Line Deleted : user_pref("extensions.delta.smplGrp", "none");
    Line Deleted : user_pref("extensions.delta.tlbrId", "base");
    Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
    Line Deleted : user_pref("extensions.delta.vrsn", "1.8.16.16");
    Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.16.1618:12:21");
    Line Deleted : user_pref("extensions.delta.vrsni", "1.8.16.16");
    Line Deleted : user_pref("extensions.helperbar.DockingPositionDown", false);
    Line Deleted : user_pref("extensions.helperbar.SmartbarDisabled", false);
    Line Deleted : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
    Line Deleted : user_pref("extensions.helperbar.Visibility", false);
    Line Deleted : user_pref("extensions.helperbar.countryiso", "us");
    Line Deleted : user_pref("extensions.helperbar.downloadprovider", "quickobrw");
    Line Deleted : user_pref("extensions.helperbar.installationid", "bfc6c26d-eaac-c9e7-a697-c8c0045cd21a");
    Line Deleted : user_pref("extensions.helperbar.installdate", "13/10/2013");
    Line Deleted : user_pref("extensions.helperbar.publisher", "quickobrw");
    Line Deleted : user_pref("extensions.sahtb.searchEngineNameSAH", "Web Search");

    Line Deleted : user_pref("extensions.searchgol.admin", false);
    Line Deleted : user_pref("extensions.searchgol.aflt", "babsst");
    Line Deleted : user_pref("extensions.searchgol.appId", "{4277F7CF-0000-46CF-BA49-D624465C4BAB}");
    Line Deleted : user_pref("extensions.searchgol.autoRvrt", "false");
    Line Deleted : user_pref("extensions.searchgol.bbDpng", "13");
    Line Deleted : user_pref("extensions.searchgol.cntry", "US");
    Line Deleted : user_pref("extensions.searchgol.dfltLng", "en");
    Line Deleted : user_pref("extensions.searchgol.excTlbr", false);
    Line Deleted : user_pref("extensions.searchgol.ffxUnstlRst", false);
    Line Deleted : user_pref("extensions.searchgol.hdrMd5", "4B92B447727CF84FC610D4691203ADC3");
    Line Deleted : user_pref("extensions.searchgol.id", "b699d7ec0000000000000ceee6aa1c99");
    Line Deleted : user_pref("extensions.searchgol.instlDay", "15991");
    Line Deleted : user_pref("extensions.searchgol.instlRef", "sst");
    Line Deleted : user_pref("extensions.searchgol.lastVrsnTs", "1.8.16.1911:35:56");
    Line Deleted : user_pref("extensions.searchgol.newTab", false);
    Line Deleted : user_pref("extensions.searchgol.prdct", "searchgol");
    Line Deleted : user_pref("extensions.searchgol.prtnrId", "searchgol");
    Line Deleted : user_pref("extensions.searchgol.rvrt", "false");
    Line Deleted : user_pref("extensions.searchgol.sg", "azb");
    Line Deleted : user_pref("extensions.searchgol.smplGrp", "none");
    Line Deleted : user_pref("extensions.searchgol.tlbrId", "base");
    Line Deleted : user_pref("extensions.searchgol.tlbrSrchUrl", "");
    Line Deleted : user_pref("extensions.searchgol.vrsn", "1.8.16.19");
    Line Deleted : user_pref("extensions.searchgol.vrsnTs", "1.8.16.1911:35:56");
    Line Deleted : user_pref("extensions.searchgol.vrsni", "1.8.16.19");

    Line Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3316071");


    Line Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3310511");
    Line Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3310511");
    Line Deleted : user_pref("smartbar.machineId", "IFGWXFTPJEIWOGGMKZVSKLO+SWTS/C8XJZ5XFE1HSAJWK4QXVMCTTE43+MSTG5X/ZMJTDCIBISCL8YKXODWIFA");


    -\\ Google Chrome v30.0.1599.69

    [ File : C:\Users\Dejah\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Deleted : homepage
    Deleted : urls_to_restore_on_startup
    Deleted : icon_url
    Deleted : search_url
    Deleted : keyword

    *************************

    AdwCleaner[R0].txt - [47335 octets] - [13/10/2013 17:13:55]
    AdwCleaner[s0].txt - [46421 octets] - [13/10/2013 17:23:29]

    ########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [46482 octets] ##########