1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

sitescout

Discussion in 'Virus & Other Malware Removal' started by Kula, Oct 3, 2013.

Thread Status:
Not open for further replies.
Advertisement
  1. Kula

    Kula Thread Starter

    Joined:
    May 6, 2000
    Messages:
    588
    Although I have AdBlock Plus, and AVG antivirus running, I have somehow got sitescout popping up in a new window when I use firefox. How can I remove it?
     
  2. dvk01

    dvk01 Derek Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    47,861
    We are very willing to help you, but you need to help yourself and us by following the advice in the sticky at the top of the forum. We are very good here but aren't miracle workers and can't guess at what is wrong. We need to see various logs to determine the cause of your problem(s). When you don't read the instructions or post the logs we have to repeat the instructions and slow down you getting help.

    follow advice here and post the logs those programs make
     
  3. Kula

    Kula Thread Starter

    Joined:
    May 6, 2000
    Messages:
    588
    Here are the logs. Sorry about that

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 13:54:36, on 03/10/2013
    Platform: Windows Vista SP2 (WinNT 6.00.1906)
    MSIE: Internet Explorer v9.00 (9.00.8112.16506)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Orb Networks\Orb\bin\OrbTray.exe
    C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
    C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
    C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
    C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
    C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
    C:\Program Files\Acer Arcade Live\Acer PlayMovie\PMVService.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\AVG\AVG2012\avgtray.exe
    C:\Program Files\Unlocker\UnlockerAssistant.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Windows\RtHDVCpl.exe
    C:\Windows\system\HsMgr.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Orb Networks\Orb\bin\Orb.exe
    C:\Program Files\Ashampoo\Ashampoo Core Tuner 2\ACT2.exe
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Radio Downloader\Radio Downloader.exe
    C:\Users\Rob\AppData\Roaming\uTorrent\uTorrent.exe
    C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
    C:\Program Files\Squeezebox\SqueezeTray.exe
    C:\Program Files\ArcSoft\TotalMedia 3.5\TMMonitor.exe
    C:\Program Files\WinZip\WZQKPICK32.EXE
    C:\Program Files\ASUS Xonar DGX Audio\Customapp\ASUSAUDIOCENTER.EXE
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\PROGRA~1\SQUEEZ~1\server\SQUEEZ~3.EXE
    C:\Program Files\DNsoft.be\Shutdown Scheduler\PC Shutdown.exe
    C:\Users\Rob\AppData\Roaming\Search Protection\SearchProtection.EXE
    c:\program files\bbc iplayer desktop\bbc iplayer desktop.exe
    C:\Program Files\AVG Secure Search\vprot.exe
    C:\Program Files\TeamViewer\Version8\TeamViewer.exe
    c:\program files\real\realplayer\update\realsched.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
    C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
    C:\Program Files\4KDownload\4kvideotomp3\4kvideotomp3.exe
    C:\Windows\explorer.exe
    D:\HijackThis.exe
    C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE
    C:\Users\Rob\Desktop\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0809&s=1&o=vp32&d=0712&m=aspire_x3200
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.search.yahoo.com?type=714647&fr=spigot-yhp-ie
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.uk.acer.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.uk.acer.yahoo.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: CrossriderApp0033440 - {11111111-1111-1111-1111-110311341140} - C:\Program Files\Plus-HD-2.6\Plus-HD-2.6-bho.dll
    O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
    O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
    O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
    O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (file missing)
    O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
    O4 - HKLM\..\Run: [EmpoweringTechnology] C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe boot
    O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
    O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
    O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Live\Acer PlayMovie\PMVService.exe"
    O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"
    O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
    O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [MFARestart] "C:\ProgramData\MFAData\pack\avgrunasx.exe" /usereg
    O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [Skytel] Skytel.exe
    O4 - HKLM\..\Run: [Cmaudio8788] RunDll32 cmicnfgp.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [Cmaudio8788GX] C:\Windows\system\HsMgr.exe Envoke
    O4 - HKLM\..\Run: [Ashampoo Core Tuner 2] "C:\Program Files\Ashampoo\Ashampoo Core Tuner 2\ACT2.exe" -TRAY
    O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    O4 - HKCU\..\Run: [Google Update] "C:\Users\Rob\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [Radio Downloader] "C:\Program Files\Radio Downloader\Radio Downloader.exe" /hidemainwindow
    O4 - HKCU\..\Run: [Shutdown_Manager] C:\Program Files\DNsoft.be\Shutdown Scheduler\S_Start_Control.exe
    O4 - HKCU\..\Run: [StickyPassword] "C:\Program Files\Sticky Password\stpass.exe" /autorunned
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [uTorrent] "C:\Users\Rob\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
    O4 - HKCU\..\Run: [SearchProtection] "C:\Users\Rob\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-21-2768998390-112891926-2672574501-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
    O4 - HKUS\S-1-5-21-2768998390-112891926-2672574501-1001\..\Run: [Radio Downloader] "C:\Program Files\Radio Downloader\Radio Downloader.exe" /hidemainwindow (User 'UpdatusUser')
    O4 - HKUS\S-1-5-21-2768998390-112891926-2672574501-1001\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED (User 'UpdatusUser')
    O4 - HKUS\S-1-5-21-2768998390-112891926-2672574501-1001\..\Run: [Shutdown_Manager] C:\Program Files\DNsoft.be\Shutdown Scheduler\S_Start_Control.exe (User 'UpdatusUser')
    O4 - HKUS\S-1-5-21-2768998390-112891926-2672574501-1001\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'UpdatusUser')
    O4 - HKUS\S-1-5-21-2768998390-112891926-2672574501-1001\..\Run: [StickyPassword] "C:\Program Files\Sticky Password\stpass.exe" /autorunned (User 'UpdatusUser')
    O4 - HKUS\S-1-5-21-2768998390-112891926-2672574501-1001\..\Run: [AVG-Secure-Search-Update_JUNE2013_TB] "C:\Program Files\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe" /PROMPT /CMPID=JUNE2013_TB (User 'UpdatusUser')
    O4 - HKUS\S-1-5-21-2768998390-112891926-2672574501-1001\..\RunOnce: [RUN] C:\Windows\Acer_Normal\run_DT.exe (User 'UpdatusUser')
    O4 - Startup: BBC iPlayer Desktop.lnk = C:\Program Files\BBC iPlayer Desktop\BBC iPlayer Desktop.exe
    O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
    O4 - Global Startup: AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
    O4 - Global Startup: Logitech Media Server Tray Tool.lnk = C:\Program Files\Squeezebox\SqueezeTray.exe
    O4 - Global Startup: TMMonitor.lnk = C:\Program Files\ArcSoft\TotalMedia 3.5\TMMonitor.exe
    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK32.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Free YouTube Download - C:\Program Files\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
    O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Add to VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - C:\PROGRA~1\NUCLEA~1\VideoGet\Plugins\VIDEOG~1.DLL
    O9 - Extra 'Tools' menuitem: Add to &VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - C:\PROGRA~1\NUCLEA~1\VideoGet\Plugins\VIDEOG~1.DLL
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (file missing)
    O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (file missing)
    O10 - Unknown file in Winsock LSP: c:\program files\speedbit video accelerator\sblsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files\speedbit video accelerator\sblsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files\speedbit video accelerator\sblsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files\speedbit video accelerator\sblsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files\speedbit video accelerator\sblsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files\speedbit video accelerator\sblsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files\speedbit video accelerator\sblsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files\speedbit video accelerator\sblsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files\speedbit video accelerator\sblsp.dll
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O15 - Trusted IP range: http://192.168.0.1
    O15 - ESC Trusted IP range: http://192.168.0.1
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll
    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\17.0.12\ViProtocol.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
    O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
    O23 - Service: Ashampoo Core Tuner 2 Service (ACT2_Service) - Unknown owner - C:\Program Files\Ashampoo\Ashampoo Core Tuner 2\ACT2Service.exe
    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
    O23 - Service: AVerRemote - AVerMedia - C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
    O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgidsagent.exe
    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe
    O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
    O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
    O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
    O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\bin32\nSvcAppFlt.exe
    O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
    O23 - Service: Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
    O23 - Service: NPVR Recording Service - Menten Holdings Ltd - C:\Program Files\NPVR\NRecord.exe
    O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\bin32\nSvcIp.exe
    O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
    O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
    O23 - Service: Macrium Reflect Image Mounting Service (ReflectService.exe) - Unknown owner - C:\Program Files\Macrium\Reflect\ReflectService.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
    O23 - Service: TunerFreeMCEService - Unknown owner - C:\Program Files\MillieSoft\TunerFreeMCE\TunerFreeMCEService.exe
    O23 - Service: VideoAcceleratorService - SpeedBit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
    O23 - Service: vToolbarUpdater17.0.12 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe

    --
    End of file - 18208 bytes
    .

    DDS (Ver_2012-11-20.01)
    .
    Microsoft® Windows Vista™ Home Premium
    Boot Device: \Device\HarddiskVolume1
    Install Date: 10/07/2012 17:25:06
    System Uptime: 01/10/2013 11:46:08 (50 hours ago)
    .
    Motherboard: Acer | | WMCP78M
    Processor: AMD Phenom(tm) 9100e Quad-Core Processor | Socket AM2 | 1800/200mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 278 GiB total, 33.015 GiB free.
    D: is FIXED (NTFS) - 188 GiB total, 38.398 GiB free.
    H: is FIXED (NTFS) - 932 GiB total, 393.258 GiB free.
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    RP738: 17/09/2013 00:00:01 - Scheduled Checkpoint
    RP739: 18/09/2013 17:06:11 - Windows Update
    RP740: 20/09/2013 00:00:02 - Scheduled Checkpoint
    RP741: 21/09/2013 00:00:02 - Scheduled Checkpoint
    RP742: 22/09/2013 00:00:05 - Scheduled Checkpoint
    RP743: 23/09/2013 00:00:02 - Scheduled Checkpoint
    RP744: 24/09/2013 00:00:02 - Scheduled Checkpoint
    RP745: 25/09/2013 00:00:02 - Scheduled Checkpoint
    RP746: 26/09/2013 00:00:03 - Scheduled Checkpoint
    RP747: 27/09/2013 00:00:02 - Scheduled Checkpoint
    RP748: 28/09/2013 00:00:03 - Scheduled Checkpoint
    RP749: 28/09/2013 16:32:27 - Scheduled Checkpoint
    RP750: 30/09/2013 00:00:03 - Scheduled Checkpoint
    RP751: 30/09/2013 12:17:54 - Installed Java 7 Update 40
    RP752: 01/10/2013 11:40:05 - Restore Operation
    RP753: 02/10/2013 00:00:02 - Scheduled Checkpoint
    RP754: 03/10/2013 00:00:04 - Scheduled Checkpoint
    .
    ==== Installed Programs ======================
    .
    4K Video to MP3 2.1
    Acer Arcade Live Main Page
    Acer DV Magician
    Acer DVDivine
    Acer eDataSecurity Management
    Acer Empowering Technology
    Acer GameZone Console DTV 2.0.1.1
    Acer HomeMedia
    Acer HomeMedia Connect
    Acer HomeMedia Trial Creator
    Acer PlayMovie
    Acer ScreenSaver
    Acer SlideShow DVD
    Acer VideoMagician
    Activation Assistant for the 2007 Microsoft Office suites
    Adobe AIR
    Adobe Flash Player 11 Plugin
    Adobe Flash Player ActiveX
    Adobe Reader 8.1.0
    Advanced Uninstaller PRO - Version 11
    Agatha Christie Death on the Nile
    Alice Greenfingers
    AllMySongs Database
    Amazon Kindle
    ArcSoft TotalMedia 3.5
    Ashampoo Burning Studio 9.20
    Ashampoo Core Tuner 2 v.2.0.1
    Ashampoo Music Studio 2012 v.1.0.0
    Ashampoo Music Studio 2013 v.4.0.7
    Ashampoo Music Studio 4 v.4.0.8
    Ashampoo Video Styler 2013 v.1.0.1
    ASUS Xonar DGX Audio
    ATI Hybrid TV Tuner Driver v6.14.10.393 32bit Vista
    µTorrent
    Audacity 2.0.2
    AV Input Selection
    AVG 2012
    AVG Security Toolbar
    AVIConverter CHN-EN Package
    Azada
    Backspin Billiards
    Backup Thunderbird
    BB FlashBack Pro 3
    BBC iPlayer Desktop
    Big Kahuna Reef
    Bookworm Deluxe
    Bricks of Egypt
    BYclouder Data Recovery Pro
    Cake Mania
    calibre
    Canon iP4800 series Printer Driver
    Canon PowerShot SX260 HS and SX240 HS Camera User Guide
    CCleaner
    Chicken Invaders 3
    Chuzzle
    Connect Label Design software
    DHTML Editing Component
    Diner Dash Flo on the Go
    Directory Lister v0.8.1
    DVD Shrink 3.2
    Easy Drive Data Recovery
    eSobi v2
    Flip Words 2
    FlipBook Maker 3.6.3
    FormatFactory 3.0.1
    Free Audio Converter version 5.0.27.725
    Free YouTube Download version 3.2.9.725
    Free YouTube to MP3 Converter version 3.12.13.925
    Freemake Video Converter version 4.0.3
    GoldWave v5.08
    Goodisc Movie DVD Copy 4.1.6
    Google Chrome
    Google Desktop
    Google Toolbar for Internet Explorer
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    idoo Video Editor Pro 1.4.0
    iLivid
    Inpaint 4.7
    IrfanView (remove only)
    Java 7 Update 10
    Java 7 Update 21
    Java Auto Updater
    Jewel Quest Solitaire
    KC Softwares AVIToolbox
    Kick N Rush
    LAME v3.99.3 (for Windows)
    LightScribe 1.4.142.1
    Logitech Media Server 7.7.3
    Macrium Reflect Standard Edition
    Mahjong Escape Ancient China
    Mahjongg Artifacts
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 4 Client Profile
    Microsoft .NET Framework 4 Extended
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office File Validation Add-In
    Microsoft Office Home and Student 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
    Microsoft Works
    Mozilla Firefox 24.0 (x86 en-US)
    Mozilla Maintenance Service
    Mozilla Thunderbird 17.0.8 (x86 en-GB)
    MP3 Tag Express V6
    MP3 Toolkit 1.0.4
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    My Audio Cutter V1.1
    Mystery Case Files - Huntsville
    Mystery Solitaire - Secret Island
    NirSoft Wireless Network Watcher
    NTI Backup Now 5
    NTI Backup Now Standard
    NTI Media Maker 8
    Nuclear Coffee - VideoGet
    NVIDIA 3D Vision Driver 311.06
    NVIDIA Control Panel 311.06
    NVIDIA Drivers
    NVIDIA ForceWare Network Access Manager
    NVIDIA Graphics Driver 311.06
    NVIDIA Install Application
    NVIDIA Stereoscopic 3D Driver
    NVIDIA Update 1.11.3
    NVIDIA Update Components
    OpenAL
    Opera Stable 16.0.1196.73
    Orb
    PixiePack Codec Pack
    Plus-HD-2.6
    Premium Booster
    Premium Booster's Scheduler
    Premium Booster (Vista)
    Radio Downloader
    Radiotracker
    RealDownloader
    RealNetworks - Microsoft Visual C++ 2008 Runtime
    RealNetworks - Microsoft Visual C++ 2010 Runtime
    RealPlayer
    Realtek High Definition Audio Driver
    RealUpgrade 1.1
    Recuva
    Registry Washer
    RemoteControl for Winamp
    Revo Uninstaller 1.94
    ScanWiz
    Search Protection
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2832407)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
    Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
    Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
    Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
    Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687309) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760588) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760823) 32-Bit Edition
    Security Update for Microsoft Office Excel 2007 (KB2760583) 32-Bit Edition
    Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
    Security Update for Microsoft Office Word 2007 (KB2767773) 32-Bit Edition
    Serif DrawPlus Starter Edition
    Serif PagePlus Starter Edition
    Shutdown Scheduler
    Simple Port Forwarding
    Simple Port Tester
    Sky Go Desktop
    SpeedBit Video Accelerator
    TeamViewer 8
    TunerFree MCE
    Turbo Pizza
    TwistedBrush Pro Studio
    Unlocker 1.9.1
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 3.5 SP1 (KB2836940)
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
    Update for Microsoft .NET Framework 4 Client Profile (KB2836939)
    Update for Microsoft .NET Framework 4 Extended (KB2468871)
    Update for Microsoft .NET Framework 4 Extended (KB2533523)
    Update for Microsoft .NET Framework 4 Extended (KB2600217)
    Update for Microsoft .NET Framework 4 Extended (KB2836939)
    Update for Microsoft Office 2007 Help for Common Features (KB963673)
    Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
    Update for Microsoft Office Excel 2007 Help (KB963678)
    Update for Microsoft Office OneNote 2007 Help (KB963670)
    Update for Microsoft Office Powerpoint 2007 Help (KB963669)
    Update for Microsoft Office Script Editor Help (KB963671)
    Update for Microsoft Office Word 2007 Help (KB963665)
    VLC media player 2.0.2
    Winamp
    Winamp Detector Plug-in
    WinRAR 4.00 (32-bit)
    WinZip 16.5
    Zuma Deluxe
    .
    ==== Event Viewer Messages From Past Week ========
    .
    01/10/2013 11:54:16, Error: Service Control Manager [7022] - The NVIDIA Update Service Daemon service hung on starting.
    01/10/2013 11:48:19, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: cdrom
    01/10/2013 11:48:19, Error: Service Control Manager [7000] - The Security Driver service failed to start due to the following error: The system cannot find the file specified.
    .
    ==== End Of File ===========================
    DDS (Ver_2012-11-20.01) - NTFS_x86
    Internet Explorer: 9.0.8112.16506 BrowserJavaVersion: 10.21.2
    Run by Rob at 13:45:58 on 2013-10-03
    Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.44.1033.18.2814.952 [GMT 1:00]
    .
    AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
    SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
    SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    ============== Running Processes ================
    .
    C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
    C:\Program Files\AVG\AVG2012\avgcsrvx.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\nvvsvc.exe
    C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    C:\Windows\system32\SLsvc.exe
    C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
    C:\Windows\system32\nvvsvc.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Orb Networks\Orb\bin\OrbTray.exe
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
    C:\Program Files\Ashampoo\Ashampoo Core Tuner 2\ACT2Service.exe
    C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
    C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
    C:\Program Files\AVG\AVG2012\avgwdsvc.exe
    C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
    C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
    C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
    C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
    C:\Program Files\AVG\AVG2012\avgnsx.exe
    C:\Program Files\AVG\AVG2012\avgemcx.exe
    C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\NPVR\NRecord.exe
    C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
    C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
    C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
    C:\Program Files\Macrium\Reflect\ReflectService.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    C:\Program Files\MillieSoft\TunerFreeMCE\TunerFreeMCEService.exe
    C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\bin32\nSvcAppFlt.exe
    C:\Program Files\bin32\nSvcIp.exe
    C:\Program Files\AVG\AVG2012\avgidsagent.exe
    C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
    C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
    C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
    C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
    C:\Program Files\Acer Arcade Live\Acer PlayMovie\PMVService.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\AVG\AVG2012\avgtray.exe
    C:\Program Files\Unlocker\UnlockerAssistant.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Windows\RtHDVCpl.exe
    C:\Windows\system\HsMgr.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Program Files\Orb Networks\Orb\bin\Orb.exe
    C:\Program Files\Ashampoo\Ashampoo Core Tuner 2\ACT2.exe
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Radio Downloader\Radio Downloader.exe
    C:\Users\Rob\AppData\Roaming\uTorrent\uTorrent.exe
    C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
    C:\Program Files\Squeezebox\SqueezeTray.exe
    C:\Program Files\ArcSoft\TotalMedia 3.5\TMMonitor.exe
    C:\Program Files\WinZip\WZQKPICK32.EXE
    C:\Program Files\ASUS Xonar DGX Audio\Customapp\ASUSAUDIOCENTER.EXE
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Windows\ehome\ehsched.exe
    C:\Windows\ehome\ehRecvr.exe
    C:\PROGRA~1\SQUEEZ~1\server\SQUEEZ~3.EXE
    C:\Program Files\DNsoft.be\Shutdown Scheduler\PC Shutdown.exe
    C:\Users\Rob\AppData\Roaming\Search Protection\SearchProtection.EXE
    C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
    c:\program files\bbc iplayer desktop\bbc iplayer desktop.exe
    C:\Program Files\NPVR\NDigitalHost.exe
    C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe
    C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\loggingserver.exe
    C:\Program Files\AVG Secure Search\vprot.exe
    C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
    C:\Program Files\TeamViewer\Version8\TeamViewer.exe
    C:\Program Files\TeamViewer\Version8\tv_w32.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    c:\program files\real\realplayer\update\realsched.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
    C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
    C:\Program Files\4KDownload\4kvideotomp3\4kvideotomp3.exe
    c:\program files\teamviewer\version8\TeamViewer_Desktop.exe
    C:\Windows\explorer.exe
    D:\HijackThis.exe
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    c:\program files\real\realplayer\RealPlay.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k rpcss
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Windows\System32\svchost.exe -k WerSvcGroup
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://uk.search.yahoo.com?type=714647&fr=spigot-yhp-ie
    uDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0809&s=1&o=vp32&d=0712&m=aspire_x3200
    mStart Page = hxxp://en.uk.acer.yahoo.com
    mDefault_Page_URL = hxxp://en.uk.acer.yahoo.com
    BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - <orphaned>
    BHO: Adobe PDF Reader Link Helper: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
    BHO: Plus-HD-2.6: {11111111-1111-1111-1111-110311341140} - c:\program files\plus-hd-2.6\Plus-HD-2.6-bho.dll
    BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\programdata\realnetworks\realdownloader\browserplugins\ie\rndlbrowserrecordplugin.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
    BHO: ShowBarObj Class: {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - c:\program files\acer\empowering technology\edatasecurity\x86\ActiveToolBand.dll
    BHO: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - c:\program files\avg secure search\17.0.1.12\AVG Secure Search_toolbar.dll
    BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.2.4204.1700\swg.dll
    BHO: Google Dictionary Compression sdch: {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - c:\program files\google\google toolbar\component\fastsearch_B7C5AC242193BB3E.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
    BHO: DVDVideoSoft WebPageAdjuster Class: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -
    TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    TB: Acer eDataSecurity Management: {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - c:\program files\acer\empowering technology\edatasecurity\x86\eDStoolbar.dll
    TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    TB: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - c:\program files\avg secure search\17.0.1.12\AVG Secure Search_toolbar.dll
    uRun: [Google Update] "c:\users\rob\appdata\local\google\update\GoogleUpdate.exe" /c
    uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
    uRun: [Radio Downloader] "c:\program files\radio downloader\Radio Downloader.exe" /hidemainwindow
    uRun: [Shutdown_Manager] c:\program files\dnsoft.be\shutdown scheduler\S_Start_Control.exe
    uRun: [StickyPassword] "c:\program files\sticky password\stpass.exe" /autorunned
    uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
    uRun: [uTorrent] "c:\users\rob\appdata\roaming\utorrent\uTorrent.exe" /MINIMIZED
    uRun: [SearchProtection] "c:\users\rob\appdata\roaming\search protection\SearchProtection.EXE" /autostart
    mRun: [Windows Defender] c:\program files\windows defender\MSASCui.exe -hide
    mRun: [Acer Empowering Technology Monitor] c:\program files\acer\empowering technology\SysMonitor.exe
    mRun: [EmpoweringTechnology] c:\program files\acer\empowering technology\Framework.Launcher.exe boot
    mRun: [eDataSecurity Loader] c:\program files\acer\empowering technology\edatasecurity\x86\eDSloader.exe
    mRun: [PCMMediaSharing] c:\program files\acer arcade live\acer homemedia connect\kernel\dms\PCMMediaSharing.exe
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
    mRun: [BkupTray] "c:\program files\newtech infosystems\nti backup now 5\BkupTray.exe"
    mRun: [PlayMovie] "c:\program files\acer arcade live\acer playmovie\PMVService.exe"
    mRun: [WarReg_PopUp] c:\program files\acer\wr_popup\WarReg_PopUp.exe
    mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
    mRun: [AVG_TRAY] "c:\program files\avg\avg2012\avgtray.exe"
    mRun: [vProt] "c:\program files\avg secure search\vprot.exe"
    mRun: [UnlockerAssistant] "c:\program files\unlocker\UnlockerAssistant.exe"
    mRun: [WinampAgent] "c:\program files\winamp\winampa.exe"
    mRun: [MFARestart] "c:\programdata\mfadata\pack\avgrunasx.exe" /usereg
    mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot
    mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
    mRun: [RtHDVCpl] RtHDVCpl.exe
    mRun: [Skytel] Skytel.exe
    mRun: [Cmaudio8788] RunDll32 cmicnfgp.cpl,CMICtrlWnd
    mRun: [Cmaudio8788GX] c:\windows\system\HsMgr.exe Envoke
    mRun: [Ashampoo Core Tuner 2] "c:\program files\ashampoo\ashampoo core tuner 2\ACT2.exe" -TRAY
    mRun: [ArcSoft Connection Service] c:\program files\common files\arcsoft\connection service\bin\ACDaemon.exe
    StartupFolder: c:\users\rob\appdata\roaming\micros~1\windows\startm~1\programs\startup\bbcipl~1.lnk - c:\program files\bbc iplayer desktop\BBC iPlayer Desktop.exe
    StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\averhi~1.lnk - c:\program files\common files\avermedia\averquick\AVerHIDReceiver.exe
    StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\averqu~1.lnk - c:\program files\common files\avermedia\averquick\AVerQuick.exe
    StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\logite~1.lnk - c:\program files\squeezebox\SqueezeTray.exe
    StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\tmmoni~1.lnk - c:\program files\arcsoft\totalmedia 3.5\TMMonitor.exe
    StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK32.EXE
    uPolicies-Explorer: NoResolveTrack = dword:1
    mPolicies-Explorer: NoResolveTrack = dword:1
    mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
    mPolicies-System: EnableUIADesktopToggle = dword:0
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
    IE: Free YouTube Download - c:\program files\common files\dvdvideosoft\plugins\freeytvdownloader.htm
    IE: Free YouTube to MP3 Converter - c:\program files\common files\dvdvideosoft\plugins\freeytmp3downloader.htm
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
    IE: {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - {17A84966-F1E9-4645-AA9E-5E771EE1C859} - c:\program files\nuclear coffee\videoget\plugins\VideoGet_IE.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
    IE: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -
    LSP: c:\program files\speedbit video accelerator\SBLSP.dll
    TCP: NameServer = 192.168.0.1
    TCP: Interfaces\{E123B51C-2722-4FB2-B810-CD306817D190} : DHCPNameServer = 192.168.0.1
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg2012\avgpp.dll
    Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\17.0.12\ViProtocol.dll
    AppInit_DLLs= c:\progra~1\google\google~1\GOEC62~1.DLL
    LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
    mASetup: {621FCD24-4498-4324-A81E-07D331376EDF} - c:\program files\pixiepack codec pack\InstallerHelper.exe
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\users\rob\appdata\roaming\mozilla\firefox\profiles\jdiw4idl.default\
    FF - prefs.js: browser.search.selectedEngine - Yahoo
    FF - prefs.js: browser.startup.homepage - hxxps://duckduckgo.com/
    FF - prefs.js: keyword.URL - hxxp://uk.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=714647&p=
    FF - plugin: c:\program files\common files\avg secure search\sitesafetyinstaller\17.0.12\npsitesafety.dll
    FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
    FF - plugin: c:\program files\microsoft silverlight\5.1.20513.0\npctrlui.dll
    FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dv.dll
    FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll
    FF - plugin: c:\program files\real\realplayer\netscape6\nprpplugin.dll
    FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll
    FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
    FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlchromebrowserrecordext.dll
    FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlhtml5videoshim.dll
    FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlpepperflashvideoshim.dll
    FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\npdlplugin.dll
    FF - plugin: c:\users\rob\appdata\local\google\update\1.3.21.153\npGoogleUpdate3.dll
    FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_8_800_168.dll
    FF - ExtSQL: 2013-08-07 17:40; [email protected]; c:\program files\freemake\freemake video converter\browserplugin\Firefox
    FF - ExtSQL: 2013-08-09 10:24; [email protected]; c:\users\rob\appdata\roaming\mozilla\firefox\profiles\jdiw4idl.default\extensions\[email protected]
    FF - ExtSQL: 2013-08-09 10:25; [email protected]; c:\users\rob\appdata\roaming\mozilla\firefox\profiles\jdiw4idl.default\extensions\[email protected]
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2012-4-19 24896]
    R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2012-1-31 31952]
    R0 pssnap;Paramount Software Snapshot Filter;c:\windows\system32\drivers\pssnap.sys [2012-8-6 16064]
    R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2012-11-8 250080]
    R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-12-23 41040]
    R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2013-4-11 302368]
    R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2012-11-9 37664]
    R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\acer arcade live\acer playmovie\000.fcl [2012-7-10 41456]
    R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files\acer arcade live\acer homemedia connect\kernel\dms\CLMSServer.exe [2008-4-30 269448]
    R2 ACT2_Service;Ashampoo Core Tuner 2 Service;c:\program files\ashampoo\ashampoo core tuner 2\ACT2Service.exe [2013-7-16 1421216]
    R2 ACT2PM;Ashampoo CoreTuner 2 ProcessMonitor Driver;c:\program files\ashampoo\ashampoo core tuner 2\ACT2ProcessMonitor32.sys [2013-7-16 14648]
    R2 AVerRemote;AVerRemote;c:\program files\common files\avermedia\service\AVerRemote.exe [2013-3-21 348160]
    R2 AVerScheduleService;AVerScheduleService;c:\program files\common files\avermedia\service\AVerScheduleService.exe [2013-3-21 403456]
    R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\avgidsagent.exe [2012-11-2 5174392]
    R2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2012-2-14 193288]
    R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\newtech infosystems\nti backup now 5\client\Agentsvc.exe [2008-3-3 16384]
    R2 ETService;Empowering Technology Service;c:\program files\acer\empowering technology\service\ETService.exe [2008-4-30 24576]
    R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504]
    R2 Freemake Improver;Freemake Improver;c:\programdata\freemake\freemakeutilsservice\FreemakeUtilsService.exe [2013-8-7 101888]
    R2 NPVR Recording Service;NPVR Recording Service;c:\program files\npvr\NRecord.exe [2013-3-25 48640]
    R2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\newtech infosystems\nti backup now 5\BackupSvc.exe [2008-4-25 45056]
    R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\newtech infosystems\nti backup now 5\SchedulerSvc.exe [2008-4-25 131072]
    R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\realnetworks\realdownloader\rndlresolversvc.exe [2013-3-6 39056]
    R2 ReflectService.exe;Macrium Reflect Image Mounting Service;c:\program files\macrium\reflect\ReflectService.exe [2012-8-6 224960]
    R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2013-1-18 383264]
    R2 TeamViewer8;TeamViewer 8;c:\program files\teamviewer\version8\TeamViewer_Service.exe [2013-6-27 5087584]
    R2 TunerFreeMCEService;TunerFreeMCEService;c:\program files\milliesoft\tunerfreemce\TunerFreeMCEService.exe [2010-6-11 9216]
    R2 VideoAcceleratorService;VideoAcceleratorService;c:\progra~1\speedb~1\videoacceleratorservice.exe -start -scm --> c:\progra~1\speedb~1\VideoAcceleratorService.exe -start -scm [?]
    R2 vToolbarUpdater17.0.12;vToolbarUpdater17.0.12;c:\program files\common files\avg secure search\vtoolbarupdater\17.0.12\ToolbarUpdater.exe [2013-10-2 1734680]
    R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2012-12-10 142176]
    R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\avgidsfilterx.sys [2011-12-23 24144]
    R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2011-12-23 17232]
    R3 cmudaxp;ASUS Xonar DGX Audio Interface;c:\windows\system32\drivers\cmudaxp.sys [2013-7-1 1754624]
    R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2013-4-18 754856]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S3 AVerAF35;AVerMedia A835 USB DVB-T;c:\windows\system32\drivers\AVerAF35.sys [2009-10-19 474880]
    S3 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150;c:\program files\google\google desktop search\GoogleDesktop.exe [2012-7-10 24064]
    .
    =============== File Associations ===============
    .
    ShellExec: Opera.exe: open="c:\program files\opera\Launcher.exe" "%1"
    .
    =============== Created Last 30 ================
    .
    2013-10-03 11:37:56 -------- d-----w- c:\users\rob\appdata\local\4kdownload.com
    2013-10-03 11:25:10 -------- d-----w- c:\program files\4KDownload
    2013-09-30 11:43:56 -------- d-----w- c:\programdata\Oracle
    2013-09-30 11:20:34 -------- d-----w- c:\program files\common files\Java(31)
    2013-09-30 08:58:38 -------- d-----w- c:\users\rob\appdata\roaming\Search Protection
    2013-09-17 07:06:11 -------- d-----w- c:\program files\Backup Thunderbird
    2013-09-12 05:31:44 615936 ----a-w- c:\windows\system32\themeui.dll
    2013-09-12 05:31:43 2049536 ----a-w- c:\windows\system32\win32k.sys
    2013-09-11 12:56:51 -------- d-----w- c:\users\rob\appdata\roaming\Serif
    2013-09-11 10:06:44 -------- d-----w- c:\program files\common files\MSSoap
    2013-09-11 10:05:51 -------- d-----w- c:\program files\Serif
    2013-09-11 08:04:00 -------- d-----w- c:\programdata\Speedbit
    2013-09-10 14:39:56 -------- d-----w- c:\users\rob\appdata\local\George_Taylor
    .
    ==================== Find3M ====================
    .
    2013-10-02 11:47:51 37664 ----a-w- c:\windows\system32\drivers\avgtpx86.sys
    2013-09-11 06:02:19 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2013-09-11 06:02:19 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    2013-09-11 06:02:10 9430408 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
    2013-08-02 04:09:35 1548288 ----a-w- c:\windows\system32\WMVDECOD.DLL
    2013-07-31 10:00:20 1800704 ----a-w- c:\windows\system32\jscript9.dll
    2013-07-31 09:52:44 1129472 ----a-w- c:\windows\system32\wininet.dll
    2013-07-31 09:52:34 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
    2013-07-31 09:48:43 142848 ----a-w- c:\windows\system32\ieUnatt.exe
    2013-07-31 09:48:09 420864 ----a-w- c:\windows\system32\vbscript.dll
    2013-07-31 09:45:42 2382848 ----a-w- c:\windows\system32\mshtml.tlb
    2013-07-17 19:41:34 2048 ----a-w- c:\windows\system32\tzres.dll
    2013-07-10 09:47:00 783360 ----a-w- c:\windows\system32\rpcrt4.dll
    2013-07-09 12:10:36 1205168 ----a-w- c:\windows\system32\ntdll.dll
    2013-07-08 04:55:51 3603904 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2013-07-08 04:55:51 3551680 ----a-w- c:\windows\system32\ntoskrnl.exe
    2013-07-08 04:20:04 172544 ----a-w- c:\windows\system32\wintrust.dll
    2013-07-08 04:16:55 98304 ----a-w- c:\windows\system32\cryptnet.dll
    2013-07-08 04:16:55 133120 ----a-w- c:\windows\system32\cryptsvc.dll
    2013-07-08 04:16:54 992768 ----a-w- c:\windows\system32\crypt32.dll
    .
    ============= FINISH: 13:46:57.63 ===============


    GMER did not ask to do a re-scan.

    GMER 2.1.19163 - http://www.gmer.net
    Rootkit quick scan 2013-10-03 14:10:23
    Windows 6.0.6002 Service Pack 2 \Device\Harddisk0\DR0 -> \Device\0000005f WDC_WD50 rev.19.0 465.76GB
    Running: x9l97g87.exe; Driver: C:\Users\Rob\AppData\Local\Temp\kgldipow.sys


    ---- Devices - GMER 2.1 ----

    AttachedDevice \Driver\tdx \Device\Ip Mpfp.sys
    AttachedDevice \Driver\tdx \Device\Ip avgtdix.sys
    AttachedDevice \Driver\tdx \Device\Tcp Mpfp.sys
    AttachedDevice \Driver\tdx \Device\Tcp avgtdix.sys
    AttachedDevice \Driver\tdx \Device\Udp Mpfp.sys
    AttachedDevice \Driver\tdx \Device\Udp avgtdix.sys
    AttachedDevice \Driver\tdx \Device\RawIp Mpfp.sys
    AttachedDevice \Driver\tdx \Device\RawIp avgtdix.sys

    ---- EOF - GMER 2.1 ----
     
  4. dvk01

    dvk01 Derek Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    47,861
    there are a few dodgy items there to be fixed

    Click on this link to download : ADWCleaner Click on the Download Now button and save it to your desktop.

    NOTE: If using Internet Explorer and you get an alert that stops the program downloading click on Tools > Smartscreen Filter > Turn off Smartscreen Filter then click on OK in the box that opens. Then click on the link again.

    Close your browser and double click on this icon on your desktop:

    [​IMG]

    You will then see the screen below, click on the Scan button (as indicated), accept any prompts that appear and allow it to run, it may take several minutes to complete, when it is done click on the Clean button, accept any prompts that appear and allow the system to reboot. You will then be presented with the report, Copy & Paste it into your next post.


    [​IMG]
     
  5. Kula

    Kula Thread Starter

    Joined:
    May 6, 2000
    Messages:
    588
    We I downloaded & ran AdwCleaner, I got a warning from AVG that it was a threat. I ignored it and ran it anyway. Here are the results.

    # AdwCleaner v3.006 - Report created 04/10/2013 at 07:54:24
    # Updated 01/10/2013 by Xplode
    # Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
    # Username : Rob - HOME-PC
    # Running from : C:\Users\Rob\Desktop\AdwCleaner.exe
    # Option : Clean

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Deleted : C:\ProgramData\Ask
    Folder Deleted : C:\ProgramData\AVG Secure Search
    Folder Deleted : C:\ProgramData\Babylon
    Folder Deleted : C:\ProgramData\BrowserDefender
    Folder Deleted : C:\ProgramData\Partner
    Folder Deleted : C:\ProgramData\Systweak
    Folder Deleted : C:\ProgramData\Tarma Installer
    Folder Deleted : C:\Program Files\Advanced System Protector
    Folder Deleted : C:\Program Files\AVG Secure Search
    Folder Deleted : C:\Program Files\Ilivid
    Folder Deleted : C:\Program Files\MyPC Backup
    Folder Deleted : C:\Program Files\Plus-HD-2.6
    Folder Deleted : C:\Program Files\RegClean Pro
    Folder Deleted : C:\Program Files\Web Cake
    Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
    Folder Deleted : C:\Users\Rob\AppData\Local\AVG Secure Search
    Folder Deleted : C:\Users\Rob\AppData\Local\Ilivid Player
    Folder Deleted : C:\Users\Rob\AppData\Local\Ilivid
    Folder Deleted : C:\Users\Rob\AppData\Local\PackageAware
    Folder Deleted : C:\Users\Rob\AppData\LocalLow\AVG Secure Search
    Folder Deleted : C:\Users\Rob\AppData\Roaming\BabSolution
    Folder Deleted : C:\Users\Rob\AppData\Roaming\Babylon
    Folder Deleted : C:\Users\Rob\AppData\Roaming\dvdvideosoftiehelpers
    Folder Deleted : C:\Users\Rob\AppData\Roaming\Search Protection
    Folder Deleted : C:\Users\Rob\AppData\Roaming\Systweak
    Folder Deleted : C:\Users\Rob\AppData\Roaming\Web Cake
    Folder Deleted : C:\Users\Rob\AppData\Roaming\Mozilla\Firefox\Profiles\jdiw4idl.default\jetpack
    Folder Deleted : C:\Users\Rob\AppData\Roaming\Mozilla\Firefox\Profiles\jdiw4idl.default\Extensions\[email protected]35a3402c.com
    Folder Deleted : C:\Users\Rob\AppData\Roaming\Mozilla\Firefox\Profiles\jdiw4idl.default\Extensions\[email protected]
    Folder Deleted : C:\Users\Rob\AppData\Roaming\Mozilla\Firefox\Profiles\jdiw4idl.default\Extensions\[email protected]
    Folder Deleted : C:\Users\Rob\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl
    Folder Deleted : C:\Users\Rob\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
    File Deleted : C:\Users\Rob\AppData\Roaming\Mozilla\Firefox\Profiles\jdiw4idl.default\Extensions\[email protected]
    File Deleted : C:\Users\Rob\AppData\Roaming\Mozilla\Firefox\Profiles\jdiw4idl.default\Extensions\[email protected]
    File Deleted : C:\END
    File Deleted : C:\Users\Rob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk
    File Deleted : C:\Users\Rob\AppData\Roaming\Mozilla\Firefox\Profiles\jdiw4idl.default\bprotector_extensions.sqlite
    File Deleted : C:\Users\Rob\AppData\Roaming\Mozilla\Firefox\Profiles\jdiw4idl.default\searchplugins\Babylon.xml
    File Deleted : C:\Users\Rob\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
    File Deleted : C:\Users\Rob\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
    File Deleted : C:\Users\Rob\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
    File Deleted : C:\Windows\Tasks\Plus-HD-2.6-chromeinstaller.job
    File Deleted : C:\Windows\System32\Tasks\Plus-HD-2.6-chromeinstaller
    File Deleted : C:\Windows\Tasks\Plus-HD-2.6-codedownloader.job
    File Deleted : C:\Windows\System32\Tasks\Plus-HD-2.6-codedownloader
    File Deleted : C:\Windows\Tasks\Plus-HD-2.6-enabler.job
    File Deleted : C:\Windows\System32\Tasks\Plus-HD-2.6-enabler
    File Deleted : C:\Windows\Tasks\Plus-HD-2.6-firefoxinstaller.job
    File Deleted : C:\Windows\System32\Tasks\Plus-HD-2.6-firefoxinstaller
    File Deleted : C:\Windows\Tasks\Plus-HD-2.6-updater.job
    File Deleted : C:\Windows\System32\Tasks\Plus-HD-2.6-updater

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-chromeinstaller
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34C73801-E9BF-4A8E-B5C3-C65CEC7EC1D4}
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{34C73801-E9BF-4A8E-B5C3-C65CEC7EC1D4}
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-codedownloader
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D665EEEA-BBFE-4CDA-848E-8C1C41714834}
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D665EEEA-BBFE-4CDA-848E-8C1C41714834}
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-enabler
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{790C913C-C9B8-4ADA-966B-9747E76128F4}
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{790C913C-C9B8-4ADA-966B-9747E76128F4}
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-firefoxinstaller
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D309304-C780-4814-AA3C-B2E9815ABAFA}
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5D309304-C780-4814-AA3C-B2E9815ABAFA}
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-2.6-updater
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{27176C4C-1D58-41B1-9233-C8B8A3E9E887}
    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{27176C4C-1D58-41B1-9233-C8B8A3E9E887}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
    Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
    Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
    Key Deleted : HKLM\SOFTWARE\Classes\S
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
    Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
    Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0033440.BHO
    Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0033440.BHO.1
    Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0033440.Sandbox
    Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0033440.Sandbox.1
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311341140}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322342240}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355345540}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366346640}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344344440}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311341140}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311341140}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
    Key Deleted : HKCU\Software\APN PIP
    Key Deleted : HKCU\Software\AVG Secure Search
    Key Deleted : HKCU\Software\IGearSettings
    Key Deleted : HKCU\Software\ilivid
    Key Deleted : HKCU\Software\installedbrowserextensions
    Key Deleted : HKCU\Software\Softonic
    Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
    Key Deleted : HKCU\Software\AppDataLow\Software\Plus-HD-2.6
    Key Deleted : HKLM\Software\AVG Secure Search
    Key Deleted : HKLM\Software\AVG Security Toolbar
    Key Deleted : HKLM\Software\Conduit
    Key Deleted : HKLM\Software\PIP
    Key Deleted : HKLM\Software\Plus-HD-2.6
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-2.6
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ilivid
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Plus-HD-2.6

    ***** [ Browsers ] *****

    -\\ Internet Explorer v9.0.8112.16506


    -\\ Mozilla Firefox v24.0 (en-US)

    [ File : C:\Users\Rob\AppData\Roaming\Mozilla\Firefox\Profiles\jdiw4idl.default\prefs.js ]

    Line Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\FireFoxExt\\17.0.1.12");
    Line Deleted : user_pref("avg.userPreferences.URLBarFocus.whiteList", "bing\\.com|google\\.\\w+|yahoo\\.\\w+|gmail\\.\\w+|hotmail\\.\\w+|live\\.\\w+|isearch\\.avg\\.com|mysearch\\.avg\\.com");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.InstallationThankYouPage", false);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.InstallationTime", 1369821389);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.active", true);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.addressbar", "NA");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.addressbarenhanced", "");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.asyncdb_dbWasSet", true);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.asyncinternaldb_dbWasSet", true);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.backgroundjs", "\n\n/*****************************************************************************[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.backgroundver", 25);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.can_run_bg_code", true);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.certdomaininstaller", "");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.changeprevious", false);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.Affiliate_settings.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.Affiliate_settings.value", "%22%7B%5C%22initUrl%5C%22%3A%5C%22hxxp%3A//api.jollywallet.com/[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.InstallationTime.value", "1369821389");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_aoi.value", "%221374675242%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_parent_zoneid.value", "%22295667%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie._GPL_zoneid.value", "%22309070%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.jw_token.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.jw_token.value", "%2228026bf9-10ae-fbf4-36b0-eb6fc3ee50fe%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.key_list_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.key_list_id.value", "%2220120802-000%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.previous_page.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.previous_page.value", "%22hxxp%3A//www.giveawayoftheday.com/easy-drive-data-recovery-30/%22[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.user_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.cookie.user_id.value", "%2213eefb7a07a5bd59e14a9207e5361020%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.description", "Turn YouTube videos to High Definition by default");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.domain", "");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.enablesearch", false);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.homepage", "");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.iframe", false);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%228ECFB26DBB134FA7BC91957435D50[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_appVer.value", "101");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Tim[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_lastVersion.value", "31");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_meta.value", "%7B%22tmp/lightbox.css%22%3A%7B%22id%22%3A308029%2C%22ver%22%3A[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_nextCheck.expiration", "Fri Oct 04 2013 13:49:32 GMT+0100 (GMT Standard Time)[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_nextCheck.value", "true");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_queue.value", "%7B%7D");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Dayligh[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308029.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308029.value", "%22.backdrop%5Cr%5Cn%5Ct%5Ct%7B%5Cr%5Cn%5Ct%5Ct%5Ctp[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308030.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308030.value", "%22%3Cdiv%20id%3D%5C%22%3C%25%3DdialogId%25%3E_dialo[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308031.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308031.value", "%22/*%21%20jQuery%20UI%20-%20v1.10.3%20-%202013-05-0[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308032.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308032.value", "%22%5Cr%5Cn//%5Ctfunction%20close_box%28%29%5Cr%5Cn/[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308033.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308033.value", "%22%3F%20Optional%20-%20add%20localization%20support[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308034.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308034.value", "%22%5Ct%5Ct//UA-43911980-1%5Cr%5Cn%5Ct%5Ct//appAPI.a[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308036.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308036.value", "%22%7B%5Cr%5Cn%5C%22mobile%5C%22%3A%5B%5C%22com.ea.g[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308037.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308037.value", "%22%7B%5Cr%5Cn%5C%22youtube.com%5C%22%3A%5B%5C%22com[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308038.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308038.value", "%22%5B%5Cr%5Cn%5Ct%5Ct%7B%5Cr%5Cn%5Ct%5Ct%5Ct%5C%22i[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308041.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308041.value", "%22%3Cdiv%20class%3D%5C%22w2m_slider_hash2313523ff4w[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308042.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308042.value", "%22%3Cdiv%20class%3D%5C%22w2m_slider_hash2313523ff4w[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308044.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308044.value", "%22a%20img%2C%20%3Alink%20img%2C%20%3Avisited%20img%[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308046.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308046.value", "%22jQuery.easing.jswing%3DjQuery.easing.swing%3B%5Cr[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308048.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308048.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308049.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308049.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308050.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308050.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308051.expiration", "Wed Jan 01 2014 20:50:19 GMT+0000 (GMT Daylight[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.Resources_resource_308051.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb._country_code_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb._country_code_.value", "%22GB%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/253712f62fa354f36c490a3f42ba9bfc_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/253712f62fa354f36c490a3f42ba9bfc_GB.value", "%22var%20cat_253712f62fa354f36c490a3[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/286965653b415f505622ea74d2bd3bbe_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/286965653b415f505622ea74d2bd3bbe_GB.value", "%22var%20cat_286965653b415f505622ea7[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/2a71b3b28494cf1854d333288ccc18ba_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/2a71b3b28494cf1854d333288ccc18ba_GB.value", "%22var%20cat_2a71b3b28494cf1854d3332[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/2d468ab97ca7b06a3c21e9e97b353a62_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/2d468ab97ca7b06a3c21e9e97b353a62_GB.value", "%22var%20cat_2d468ab97ca7b06a3c21e9e[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/3518e1eac042730aa1274618984462b3_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/3518e1eac042730aa1274618984462b3_GB.value", "%22var%20cat_3518e1eac042730aa127461[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/477bd5402a5bfa0f8ee61cd01f27470c_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/477bd5402a5bfa0f8ee61cd01f27470c_GB.value", "%22var%20cat_477bd5402a5bfa0f8ee61cd[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/530e52021dc20843b1aa62957edeb9f8.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 [...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/530e52021dc20843b1aa62957edeb9f8_expire.expiration", "Fri Feb 01 2030 00:00:00 GM[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/530e52021dc20843b1aa62957edeb9f8_expire.value", "%221377672526659%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/530e52021dc20843b1aa62957edeb9f8_version.expiration", "Fri Feb 01 2030 00:00:00 G[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/530e52021dc20843b1aa62957edeb9f8_version.value", "%22678cb7ff9a8ad6bf3c0167fad7d5[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/558f161b7870710cb95f382d3df08fcb_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/558f161b7870710cb95f382d3df08fcb_GB.value", "%22var%20cat_558f161b7870710cb95f382[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/56df29dfef36d0a64d0b754d8b7aa1df_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/56df29dfef36d0a64d0b754d8b7aa1df_GB.value", "%22var%20cat_56df29dfef36d0a64d0b754[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 [...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9.value", "%22function%20tcmMarkWindow%28a%29%7Bva[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9_expire.expiration", "Fri Feb 01 2030 00:00:00 GM[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9_expire.value", "%221377672526544%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9_version.expiration", "Fri Feb 01 2030 00:00:00 G[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9_version.value", "%22a64db70efdf0ace7131e2fcedb58[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/64fb2f1cc9977e0b100dbab874b3b89c_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/64fb2f1cc9977e0b100dbab874b3b89c_GB.value", "%22var%20cat_64fb2f1cc9977e0b100dbab[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/658987e48ed8b4a20fa71afdd0c84454_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/658987e48ed8b4a20fa71afdd0c84454_GB.value", "%22var%20cat_658987e48ed8b4a20fa71af[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/99369696a6ac1aab285d5f642e245dcd_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/99369696a6ac1aab285d5f642e245dcd_GB.value", "%22var%20cat_99369696a6ac1aab285d5f6[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/a9c393248d41a8e496755627a61840d2_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/a9c393248d41a8e496755627a61840d2_GB.value", "%22var%20cat_a9c393248d41a8e49675562[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/aa36bceec49c832079e270icmc219ats.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 [...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/aa36bceec49c832079e270icmc219ats.value", "%22tcmPredefineRulesDict%3D%5B%5B%27e3c[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/bdd26d3b7ab2292048466bbb3ec4a74d_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/bdd26d3b7ab2292048466bbb3ec4a74d_GB.value", "%22var%20cat_bdd26d3b7ab2292048466bb[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/d5baae4ef839769f8eb7e9f9d82d8a40_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/d5baae4ef839769f8eb7e9f9d82d8a40_GB.value", "%22var%20cat_d5baae4ef839769f8eb7e9f[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/d965aead622233a60676ef2349956f38_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/d965aead622233a60676ef2349956f38_GB.value", "%22var%20cat_d965aead622233a60676ef2[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/d9fe5d2850f1ed167451b193e8bd0e0c_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/d9fe5d2850f1ed167451b193e8bd0e0c_GB.value", "%22var%20cat_d9fe5d2850f1ed167451b19[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/de41f87a83fe01375d64228c84fea322_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/de41f87a83fe01375d64228c84fea322_GB.value", "%22var%20cat_de41f87a83fe01375d64228[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/e3cd5b2c64ca319aadec7c28c6c6feba_GB.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.cache/e3cd5b2c64ca319aadec7c28c6c6feba_GB.value", "%22var%20cat_e3cd5b2c64ca319aadec7c2[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%228ECFB26D[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.monetization_plugin_last_executable_request.expiration", "Fri Oct 04 2013 19:50:34 GMT+[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.monetization_plugin_last_executable_request.value", "%22hxxp%3A//download.bleepingcompu[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.aliveNotificationMarker.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Dayli[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.aliveNotificationMarker.value", "%221%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.aliveNotificationMarker_Expiration.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.aliveNotificationMarker_Expiration.value", "%221377730800000%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.clickProtectMarker.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight T[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.clickProtectMarker.value", "%221%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.clickProtectMarker_Expiration.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.clickProtectMarker_Expiration.value", "%221376204322317%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.clickProtectTransitionMarker.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT [...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.clickProtectTransitionMarker.value", "%221%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.clickProtectTransitionMarker_Expiration.expiration", "Fri Feb 01 2030 00:00:00 GMT[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.clickProtectTransitionMarker_Expiration.value", "%221376204527523%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.globalDoubleImpressionProtection.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 ([...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.globalDoubleImpressionProtection.value", "%221%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.globalDoubleImpressionProtection_Expiration.expiration", "Fri Feb 01 2030 00:00:00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.globalDoubleImpressionProtection_Expiration.value", "%221377028140395%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.impressions.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.impressions.value", "%22%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.impressions_Expiration.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylig[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.impressions_Expiration.value", "%22%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.initialDayDelayMarker.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Dayligh[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.initialDayDelayMarker.value", "%221%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.initialDayDelayMarker_Expiration.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 ([...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.initialDayDelayMarker_Expiration.value", "%221377673128618%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.openFirstTimeBrowserToday.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Day[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.openFirstTimeBrowserToday.value", "%221%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.openFirstTimeBrowserToday_Expiration.expiration", "Fri Feb 01 2030 00:00:00 GMT+00[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.openFirstTimeBrowserToday_Expiration.value", "%221377730800000%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.preDefRuleImpressions.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Dayligh[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.preDefRuleImpressions.value", "%22%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.preDefRuleImpressions_Expiration.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 ([...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.preDefRuleImpressions_Expiration.value", "%22%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.quirksCount.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.quirksCount.value", "%220%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.quirksCount_Expiration.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylig[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.quirksCount_Expiration.value", "%22%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.version.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.version.value", "%220.3%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.version_Expiration.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight T[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.internaldb.tcm2.version_Expiration.value", "%221377730800000%22");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.js", "\n\n /************************************************************************************\[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.lastDailyReport", "1380855018422");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.lastUpdate", "1380869372743");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.manifesturl", "");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.name", "Plus-HD-2.6");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.newtab", "");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.opensearch", "");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_1.name", "base");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_1.ver", 7);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_101.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_101.name", "cortica_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_101.ver", 3);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_102.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_102.name", "dealply_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_102.ver", 4);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_103.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_103.name", "intext_5_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_103.ver", 4);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_104.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_104.name", "jollywallet_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_104.ver", 4);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_105.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_105.name", "corticas_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_105.ver", 2);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_107.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_107.name", "coupish_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_107.ver", 3);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_108.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_108.name", "icm_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_108.ver", 6);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_116.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_116.name", "ads_only_5_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_116.ver", 4);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_117.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_117.name", "coupons_intext_ads_5_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_117.ver", 4);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_119.name", "similar_web_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_119.ver", 2);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_120.name", "luck_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_120.ver", 2);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_123.name", "intext_adv_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_123.ver", 3);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_124.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_124.name", "superfish_no_search_no_coupons_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_124.ver", 2);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_125.code", "// for stats use - banners\n\nif (typeof appAPI.internal.monetization =[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_125.name", "arcadi2_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_125.ver", 4);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_126.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_126.name", "revizer_ws_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_126.ver", 7);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_127.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_127.name", "revizer_p_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_127.ver", 7);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_128.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_128.name", "superfish_pricora_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_128.ver", 2);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_129.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_129.name", "widdit_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_129.ver", 1);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if(window.getSele[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_13.name", "CrossriderAppUtils");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_13.ver", 3);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_135.code", "// for stats use - banners\n\nif (typeof appAPI.internal.monetization =[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_135.name", "arcadi3_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_135.ver", 2);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_138.name", "getdeal_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_138.ver", 2);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={};}var CR__bIsIEWindow=false;[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_14.name", "CrossriderUtils");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_14.ver", 9);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_141.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_141.name", "corticas_ru_m.js");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_141.ver", 1);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_142.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_142.name", "intext_fa_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_142.ver", 1);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_155.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n appAP[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_155.name", "ibario_pops_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_155.ver", 1);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_16.name", "FFAppAPIWrapper");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_16.ver", 10);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_17.name", "jQuery");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_17.ver", 4);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_21.name", "debug");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_21.ver", 4);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_22.name", "resources");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_22.ver", 5);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_28.name", "initializer");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_28.ver", 3);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_4.code", "var jQuery = $jquery_171 = $jquery = null;\n\nif (document && typeof docu[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_4.name", "jquery_1_7_1");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_4.ver", 4);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_47.name", "resources_background");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_47.ver", 3);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_64.code", "(function(){var j=\"__CR_EMPTY_CHANNEL__\";var d=function(e){return(type[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_64.name", "appApiMessage");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_64.ver", 3);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_72.code", "if(appAPI.__should_activate_validation__===true){(function(){var k={};va[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_72.name", "appApiValidation");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_72.ver", 3);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_78.code", "if(typeof jQuery!==\"undefined\"&&(jQuery)&&typeof navigator!==\"undefin[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_78.name", "CrossriderInfo");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_78.ver", 4);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform==\[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_87.name", "ginyas_wrapper");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_87.ver", 4);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_91.code", "(function(h){var p=(function(){var R=0;var Z=\"\";function Q(ac){return [...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_91.name", "monetizationLoader.js");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_91.ver", 14);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_92.name", "superfish_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_92.ver", 3);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_93.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_93.name", "superfish_no_coupons_m");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_93.ver", 5);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_98.code", "(function(){var b=\"cr_\"+appAPI.appID+\"internalMessage\";var a=functio[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_98.name", "omniCommands");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins.plugin_98.ver", 2);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins_lists.plugins_0", "4,14,78,16,64,47,72,98,91");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins_lists.plugins_1", "17,14,78,13,16,64,4,1,21,22,72,98,155,142,141,138,135,129,128,127,126,1[...]
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.plugins_lists.plugins_5", "4,14,78,13,16,64,47,72");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/33440/plugins/092/ff/plugins.json");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.pluginsversion", 77);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.publisher", "Plus HD");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.searchstatus", 0);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.setnewtab", false);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.thankyou", "");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.updateinterval", 360);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.33440.ver", 101);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.apps", "33440");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.bic", "13eefb7a07a5bd59e14a9207e5361020");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.cid", 33440);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.firstrun", false);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.hadappinstalled", true);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.installationdate", 1369821389);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.lastcheck", 22961210);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.lastcheckitem", 22961219);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.modetype", "production");
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.reportInstall", true);
    Line Deleted : user_pref("extensions.a7f404cccb0a94fafb3c089ceea949aeaa6724a0593804ebebe02e67e35a3402ccom33440.statsDailyCounter", 122);
    Line Deleted : user_pref("extensions.crossrider.bic", "13eefb7a07a5bd59e14a9207e5361020");
    Line Deleted : user_pref("extentions.y2layers.installId", "4B018466-2A94-4C28-9FB0-8AA976AE1EBA");
    Line Deleted : user_pref("extentions.y2layers.installId_backup", "4B018466-2A94-4C28-9FB0-8AA976AE1EBA");

    -\\ Google Chrome v

    [ File : C:\Users\Rob\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Deleted : homepage

    *************************

    AdwCleaner[R0].txt - [75922 octets] - [04/10/2013 07:52:16]
    AdwCleaner[S0].txt - [77035 octets] - [04/10/2013 07:54:24]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [77096 octets] ##########

    I didn't untick anything. I just let it do its thing.
     
  6. dvk01

    dvk01 Derek Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    47,861
    OK run adwcleaner again please in clean mode to make sure it did get everything. I have sometimes found that it needs 2 or 3 runs with the pests you have to fully remove all of them

    post the new log and tell us if any problems still exist
     
  7. Kula

    Kula Thread Starter

    Joined:
    May 6, 2000
    Messages:
    588
    Here's the second log. No pop ups as yet.

    # AdwCleaner v3.006 - Report created 04/10/2013 at 08:23:44
    # Updated 01/10/2013 by Xplode
    # Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
    # Username : Rob - HOME-PC
    # Running from : C:\Users\Rob\Desktop\AdwCleaner.exe
    # Option : Clean

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Deleted : C:\Users\Rob\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfeggemggokijeahnacacopejaabljl
    Folder Deleted : C:\Users\Rob\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****


    ***** [ Browsers ] *****

    -\\ Internet Explorer v9.0.8112.16506


    -\\ Mozilla Firefox v24.0 (en-US)

    [ File : C:\Users\Rob\AppData\Roaming\Mozilla\Firefox\Profiles\jdiw4idl.default\prefs.js ]


    -\\ Google Chrome v

    [ File : C:\Users\Rob\AppData\Local\Google\Chrome\User Data\Default\preferences ]


    *************************

    AdwCleaner[R0].txt - [75922 octets] - [04/10/2013 07:52:16]
    AdwCleaner[R1].txt - [1244 octets] - [04/10/2013 08:22:14]
    AdwCleaner[S0].txt - [77177 octets] - [04/10/2013 07:54:24]
    AdwCleaner[S1].txt - [1169 octets] - [04/10/2013 08:23:44]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1229 octets] ##########
     
  8. dvk01

    dvk01 Derek Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    47,861
    It looks clear now, but if you still get any problems when using chrome then

    he only likely cure is going to be uninstall chrome, make sure you take the option to remove all user data.
    first make sure that you are not set up to sync chrome with your google account, if you are, set it to stop sync first ( otherwise the backups on your google account will reinstall the malware).
    Then reboot & reinstall chrome

    and if it continues in Firefox then reset FF to default, which removes any unwanted addons & hidden extnsions which can cause the problems
     
  9. Kula

    Kula Thread Starter

    Joined:
    May 6, 2000
    Messages:
    588
    Thanks for all your help Derek. Everything seems fine now. Would suggest running AdwCleaner every so often to see if there is anything?
     
  10. dvk01

    dvk01 Derek Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    47,861
    it is a good idea to run it weekly as well as any time that you download any "new" programs to se what is being stealthily installed along with them

    go here http://www.thespykiller.co.uk/index.php?page=3 for info on how to tighten your security settings and how to help prevent future attacks.

    and scan here http://secunia.com/vulnerability_scanning/personal for out of date & vulnerable common applications on your computer and update whatever it suggests. Download & use the PSI version ( not the OSI, in your browser java version) as I no longer recommend having Java installed on the computer at all, unless it is absolutely necessary, because of the too high risk of malware infiltration

    Then pay an urgent visit to windows update & make sure you are fully updated, that will help to plug the security holes that let these pests on in the first place. If windows update doesn't work, please come back & tell us
     
  11. Kula

    Kula Thread Starter

    Joined:
    May 6, 2000
    Messages:
    588
    Thanks again for all your help and advice.
     
  12. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1109818