Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Coupon Dropdown  (Read 8265 times)

0 Members and 1 Guest are viewing this topic.

nellenaz

    Topic Starter


    Rookie

    Coupon Dropdown
    « on: December 21, 2012, 01:31:18 AM »
    I can not find out how to remove this malware, Malwarebytes is not seeing it and my computer is have a lot of pop ups and being extremely slow.

    Here are my logs

    # AdwCleaner v2.101 - Logfile created 12/21/2012 at 09:33:07
    # Updated 16/12/2012 by Xplode
    # Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
    # User : nelle - NELLE-HP
    # Boot Mode : Normal
    # Running from : C:\Users\nelle\Desktop\adwcleaner.exe
    # Option [Search]


    ***** [Services] *****


    ***** [Files / Folders] *****

    File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
    File Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
    File Found : C:\Users\nelle\AppData\Roaming\Mozilla\Firefox\Profiles\6qzuzpsz.default\searchplugins\Conduit.xml
    Folder Found : C:\Program Files (x86)\AVG Secure Search
    Folder Found : C:\Program Files (x86)\Common Files\AVG Secure Search
    Folder Found : C:\Program Files (x86)\Conduit
    Folder Found : C:\ProgramData\AVG Secure Search
    Folder Found : C:\Users\nelle\AppData\Local\AVG Secure Search
    Folder Found : C:\Users\nelle\AppData\Local\Conduit
    Folder Found : C:\Users\nelle\AppData\Local\Ilivid Player
    Folder Found : C:\Users\nelle\AppData\LocalLow\AVG Secure Search
    Folder Found : C:\Users\nelle\AppData\LocalLow\Conduit
    Folder Found : C:\Users\nelle\AppData\Roaming\Mozilla\Firefox\Profiles\6qzuzpsz.default\Conduit
    Folder Found : C:\Windows\SysWOW64\TempDir

    ***** [Registry] *****

    Key Found : HKCU\Software\AppDataLow\Software\SmartBar
    Key Found : HKCU\Software\AVG Secure Search
    Key Found : HKCU\Software\IGearSettings
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
    Key Found : HKCU\Software\SweetIM
    Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Found : HKLM\Software\AVG Secure Search
    Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
    Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
    Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
    Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
    Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
    Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
    Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
    Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
    Key Found : HKLM\SOFTWARE\Classes\S
    Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
    Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
    Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
    Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
    Key Found : HKLM\Software\Conduit
    Key Found : HKLM\Software\Iminent
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
    Key Found : HKLM\Software\SweetIM
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
    Key Found : HKLM\SOFTWARE\Software
    Key Found : HKU\S-1-5-21-2557093921-417211080-3803441700-1001\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v9.0.8112.16457

    [OK] Registry is clean.

    -\\ Mozilla Firefox v17.0.1 (en-US)

    Profile name : default
    File : C:\Users\nelle\AppData\Roaming\Mozilla\Firefox\Profiles\6qzuzpsz.default\prefs.js

    Found : user_pref("CT2236428..clientLogIsEnabled", true);
    Found : user_pref("CT2236428..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Found : user_pref("CT2236428..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Found : user_pref("CT2236428.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Found : user_pref("CT2236428.AppTrackingLastCheckTime", "Tue Mar 29 2011 20:37:48 GMT-0400 (Eastern Daylight[...]
    Found : user_pref("CT2236428.CTID", "CT2236428");
    Found : user_pref("CT2236428.Chat.Meebo.ServerLastCheckTim e", "Tue Mar 29 2011 16:47:38 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.Chat.Meebo.ServerLastResponse Time", "Tue Mar 29 2011 16:47:38 GMT-0400 (Eastern[...]
    Found : user_pref("CT2236428.Chat.Meebo.rooms.armywifenetw orkcommunitychatce7cbe81", 0);
    Found : user_pref("CT2236428.Chat.ServerLastCheckTime", "Tue Mar 29 2011 16:37:38 GMT-0400 (Eastern Daylight[...]
    Found : user_pref("CT2236428.CurrentServerDate", "30-3-2011");
    Found : user_pref("CT2236428.DialogsAlignMode", "LTR");
    Found : user_pref("CT2236428.DialogsGetterLastCheckTime", "Wed Mar 23 2011 09:01:06 GMT-0400 (Eastern Daylig[...]
    Found : user_pref("CT2236428.DownloadReferralCookieData", "");
    Found : user_pref("CT2236428.EMailNotifierPollDate", "Tue Mar 29 2011 21:52:38 GMT-0400 (Eastern Daylight Ti[...]
    Found : user_pref("CT2236428.FeedLastCount1288911910132503 33", 297);
    Found : user_pref("CT2236428.FeedLastCount1288912048351251 20", 240);
    Found : user_pref("CT2236428.FeedPollDate12889119101762537 5", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12889120153075093 3", "Tue Mar 29 2011 21:52:38 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12889120195528185 4", "Tue Mar 29 2011 21:52:38 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12889120234621899 9", "Tue Mar 29 2011 21:52:38 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12889120269340649 5", "Tue Mar 29 2011 21:52:38 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12889120440090639 0", "Tue Mar 29 2011 21:17:39 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12889120481075004 9", "Tue Mar 29 2011 21:52:40 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12899702721945067 4", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12899702721945067 5", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12899702721945067 6", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12899702721945067 7", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12899702721945067 8", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12899702721945067 9", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12899702721945068 0", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12899702721945068 1", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedPollDate12899702721945068 2", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2236428.FeedTTL128891191017625375", 40);
    Found : user_pref("CT2236428.FeedTTL128891204400906390", 40);
    Found : user_pref("CT2236428.FeedTTL128997027219450674", 40);
    Found : user_pref("CT2236428.FeedTTL128997027219450675", 40);
    Found : user_pref("CT2236428.FeedTTL128997027219450676", 40);
    Found : user_pref("CT2236428.FeedTTL128997027219450677", 40);
    Found : user_pref("CT2236428.FeedTTL128997027219450678", 40);
    Found : user_pref("CT2236428.FeedTTL128997027219450679", 40);
    Found : user_pref("CT2236428.FeedTTL128997027219450680", 40);
    Found : user_pref("CT2236428.FeedTTL128997027219450681", 40);
    Found : user_pref("CT2236428.FeedTTL128997027219450682", 40);
    Found : user_pref("CT2236428.FirstServerDate", "9-9-2010");
    Found : user_pref("CT2236428.FirstTime", true);
    Found : user_pref("CT2236428.FirstTimeFF3", true);
    Found : user_pref("CT2236428.FirstTimeSettingsDone", true);
    Found : user_pref("CT2236428.FixPageNotFoundErrors", true);
    Found : user_pref("CT2236428.GroupingServerCheckInterval", 1440);
    Found : user_pref("CT2236428.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Found : user_pref("CT2236428.HasUserGlobalKeys", true);
    Found : user_pref("CT2236428.Initialize", true);
    Found : user_pref("CT2236428.InitializeCommonPrefs", true);
    Found : user_pref("CT2236428.InstallationAndCookieDataSent Count", 3);
    Found : user_pref("CT2236428.InstalledDate", "Wed Sep 08 2010 17:57:29 GMT-0400 (Eastern Daylight Time)");
    Found : user_pref("CT2236428.InvalidateCache", false);
    Found : user_pref("CT2236428.IsGrouping", false);
    Found : user_pref("CT2236428.IsMulticommunity", false);
    Found : user_pref("CT2236428.IsOpenThankYouPage", true);
    Found : user_pref("CT2236428.IsOpenUninstallPage", true);
    Found : user_pref("CT2236428.LanguagePackLastCheckTime", "Tue Mar 29 2011 23:34:46 GMT-0400 (Eastern Dayligh[...]
    Found : user_pref("CT2236428.LanguagePackReloadIntervalMM", 1440);
    Found : user_pref("CT2236428.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Found : user_pref("CT2236428.LastLogin_2.7.2.0", "Fri Sep 10 2010 16:00:43 GMT-0400 (Eastern Daylight Time)"[...]
    Found : user_pref("CT2236428.LastLogin_3.3.2.1", "Tue Mar 29 2011 20:37:38 GMT-0400 (Eastern Daylight Time)"[...]
    Found : user_pref("CT2236428.LatestVersion", "3.2.5.2");
    Found : user_pref("CT2236428.Locale", "en");
    Found : user_pref("CT2236428.LoginCache", 4);
    Found : user_pref("CT2236428.MCDetectTooltipHeight", "83");
    Found : user_pref("CT2236428.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Found : user_pref("CT2236428.MCDetectTooltipWidth", "295");
    Found : user_pref("CT2236428.RadioIsPodcast", false);
    Found : user_pref("CT2236428.RadioLastCheckTime", "Tue Mar 29 2011 23:35:11 GMT-0400 (Eastern Daylight Time)[...]
    Found : user_pref("CT2236428.RadioLastUpdateIPServer", "3");
    Found : user_pref("CT2236428.RadioLastUpdateServer", "0");
    Found : user_pref("CT2236428.RadioMediaID", "9909");
    Found : user_pref("CT2236428.RadioMediaType", "Media Player");
    Found : user_pref("CT2236428.RadioMenuSelectedID", "EBRadioMenu_CT22364289909");
    Found : user_pref("CT2236428.RadioStationName", "WQXR-FM%20NYC%20(Classical)");
    Found : user_pref("CT2236428.RadioStationURL", "hxxp://htc-01.media.globix.net/COMP005996MOD1/meta/wqxr_live[...]
    Found : user_pref("CT2236428.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
    Found : user_pref("CT2236428.SearchFromAddressBarIsInit", true);
    Found : user_pref("CT2236428.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT223[...]
    Found : user_pref("CT2236428.SearchInNewTabEnabled", true);
    Found : user_pref("CT2236428.SearchInNewTabIntervalMM", 1440);
    Found : user_pref("CT2236428.SearchInNewTabLastCheckTime", "Tue Mar 29 2011 23:34:46 GMT-0400 (Eastern Dayli[...]
    Found : user_pref("CT2236428.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Found : user_pref("CT2236428.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
    Found : user_pref("CT2236428.SearchInNewTabUserEnabled", false);
    Found : user_pref("CT2236428.ServiceMapLastCheckTime", "Tue Mar 29 2011 23:34:46 GMT-0400 (Eastern Daylight [...]
    Found : user_pref("CT2236428.SettingsCheckIntervalMin", 120);
    Found : user_pref("CT2236428.SettingsLastCheckTime", "Tue Mar 29 2011 21:36:05 GMT-0400 (Eastern Daylight Ti[...]
    Found : user_pref("CT2236428.SettingsLastUpdate", "1297857784");
    Found : user_pref("CT2236428.ThirdPartyComponentsInterval", 504);
    Found : user_pref("CT2236428.ThirdPartyComponentsLastCheck", "Wed Mar 23 2011 09:01:05 GMT-0400 (Eastern Day[...]
    Found : user_pref("CT2236428.ThirdPartyComponentsLastUpdat e", "1246790578");
    Found : user_pref("CT2236428.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2236428");
    Found : user_pref("CT2236428.UserID", "UN80685848076212743");
    Found : user_pref("CT2236428.ValidationData_Toolbar", 2);
    Found : user_pref("CT2236428.WeatherNetwork", "");
    Found : user_pref("CT2236428.WeatherPollDate", "Tue Mar 29 2011 21:38:40 GMT-0400 (Eastern Daylight Time)");
    Found : user_pref("CT2236428.WeatherUnit", "F");
    Found : user_pref("CT2236428.alertChannelId", "634099");
    Found : user_pref("CT2236428.clientLogIsEnabled", true);
    Found : user_pref("CT2236428.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
    Found : user_pref("CT2236428.components.1000034", true);
    Found : user_pref("CT2236428.components.1000082", true);
    Found : user_pref("CT2236428.components.1000234", true);
    Found : user_pref("CT2236428.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
    Found : user_pref("CT2236428.globalFirstTimeInfoLastCheckT ime", "Tue Mar 29 2011 20:37:38 GMT-0400 (Eastern [...]
    Found : user_pref("CT2236428.isAppTrackingManagerOn", true);
    Found : user_pref("CT2236428.myStuffEnabled", true);
    Found : user_pref("CT2236428.myStuffPublihserMinWidth", 400);
    Found : user_pref("CT2236428.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Found : user_pref("CT2236428.myStuffServiceIntervalMM", 1440);
    Found : user_pref("CT2236428.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Found : user_pref("CT2236428.oldAppsList", "128832821193968859,128832821193968860,128891216979031631,1293120[...]
    Found : user_pref("CT2236428.testingCtid", "");
    Found : user_pref("CT2236428.toolbarAppMetaDataLastCheckTi me", "Tue Mar 29 2011 23:34:46 GMT-0400 (Eastern D[...]
    Found : user_pref("CT2236428.toolbarContextMenuLastCheckTi me", "Wed Mar 23 2011 09:01:06 GMT-0400 (Eastern D[...]
    Found : user_pref("CT2236428.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
    Found : user_pref("CT2236428.usagesFlag", 2);
    Found : user_pref("CT2260173..clientLogIsEnabled", false);
    Found : user_pref("CT2260173..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Found : user_pref("CT2260173..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Found : user_pref("CT2260173.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
    Found : user_pref("CT2260173.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Found : user_pref("CT2260173.AppTrackingLastCheckTime", "Wed Jan 18 2012 12:56:11 GMT+0100");
    Found : user_pref("CT2260173.BrowserCompStateIsOpen_582569 3007717191955", true);
    Found : user_pref("CT2260173.CTID", "CT2260173");
    Found : user_pref("CT2260173.CommunitiesChangesLastCheckTi me", "0");
    Found : user_pref("CT2260173.CurrentServerDate", "19-12-2012");
    Found : user_pref("CT2260173.DialogsAlignMode", "LTR");
    Found : user_pref("CT2260173.DialogsGetterLastCheckTime", "Wed Dec 19 2012 20:11:40 GMT+0100");
    Found : user_pref("CT2260173.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...]
    Found : user_pref("CT2260173.EnableClickToSearchBox", false);
    Found : user_pref("CT2260173.EnableSearchHistory", false);
    Found : user_pref("CT2260173.EnableSearchSuggest", false);
    Found : user_pref("CT2260173.EnableUsage", false);
    Found : user_pref("CT2260173.FeedLastCount1289406595995562 87", 0);
    Found : user_pref("CT2260173.FeedLastCount1289623870927251 41", 4);
    Found : user_pref("CT2260173.FeedPollDate12894065919627547 7", "Wed Sep 08 2010 11:37:53 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2260173.FeedPollDate12894065957471253 6", "Wed Sep 08 2010 11:37:53 GMT-0400 (Eastern Da[...]
    Found : user_pref("CT2260173.FeedPollDate12896238709272514 1", "Wed Mar 09 2011 17:21:27 GMT-0500 (Eastern St[...]
    Found : user_pref("CT2260173.FeedTTL128940659574712536", 40);
    Found : user_pref("CT2260173.FirstServerDate", "21-8-2010");
    Found : user_pref("CT2260173.FirstTime", true);
    Found : user_pref("CT2260173.FirstTimeFF3", true);
    Found : user_pref("CT2260173.FirstTimeSettingsDone", true);
    Found : user_pref("CT2260173.FixPageNotFoundErrors", true);
    Found : user_pref("CT2260173.GroupingInvalidateCache", false);
    Found : user_pref("CT2260173.GroupingLastCheckTime", "0");
    Found : user_pref("CT2260173.GroupingLastServerUpdateTime", "0");
    Found : user_pref("CT2260173.GroupingServerCheckInterval", 1440);
    Found : user_pref("CT2260173.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Found : user_pref("CT2260173.HasUserGlobalKeys", true);
    Found : user_pref("CT2260173.HomePageProtectorEnabled", false);
    Found : user_pref("CT2260173.Initialize", true);
    Found : user_pref("CT2260173.InitializeCommonPrefs", true);
    Found : user_pref("CT2260173.InstallationAndCookieDataSent Count", 3);
    Found : user_pref("CT2260173.InstalledDate", "Fri Aug 20 2010 22:21:35 GMT-0400 (Eastern Daylight Time)");
    Found : user_pref("CT2260173.InvalidateCache", false);
    Found : user_pref("CT2260173.IsAlertDBUpdated", true);
    Found : user_pref("CT2260173.IsGrouping", false);
    Found : user_pref("CT2260173.IsMulticommunity", false);
    Found : user_pref("CT2260173.IsOpenThankYouPage", true);
    Found : user_pref("CT2260173.IsOpenUninstallPage", true);
    Found : user_pref("CT2260173.LanguagePackLastCheckTime", "Wed Dec 19 2012 09:53:17 GMT+0100");
    Found : user_pref("CT2260173.LanguagePackReloadIntervalMM", 1440);
    Found : user_pref("CT2260173.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Found : user_pref("CT2260173.LastLogin_2.7.2.0", "Wed Nov 10 2010 11:59:05 GMT-0500 (Eastern Standard Time)"[...]
    Found : user_pref("CT2260173.LastLogin_3.12.0.7", "Wed Apr 25 2012 07:25:14 GMT+0200");
    Found : user_pref("CT2260173.LastLogin_3.12.2.3", "Wed May 30 2012 16:33:46 GMT+0200");
    Found : user_pref("CT2260173.LastLogin_3.13.0.6", "Sun Jul 15 2012 11:43:03 GMT+0200");
    Found : user_pref("CT2260173.LastLogin_3.14.1.0", "Tue Aug 21 2012 09:27:52 GMT+0200");
    Found : user_pref("CT2260173.LastLogin_3.15.1.0", "Wed Nov 07 2012 16:51:02 GMT+0100");
    Found : user_pref("CT2260173.LastLogin_3.16.0.3", "Wed Dec 19 2012 20:35:48 GMT+0100");
    Found : user_pref("CT2260173.LastLogin_3.2.3.3", "Sun Feb 06 2011 13:27:16 GMT-0500 (Eastern Standard Time)"[...]
    Found : user_pref("CT2260173.LastLogin_3.2.5.2", "Mon Mar 21 2011 00:22:02 GMT-0400 (Eastern Daylight Time)"[...]
    Found : user_pref("CT2260173.LastLogin_3.3.2.1", "Thu Mar 31 2011 05:10:49 GMT-0400 (Eastern Daylight Time)"[...]
    Found : user_pref("CT2260173.LastLogin_3.3.3.2", "Fri May 13 2011 03:57:54 GMT-0400 (Eastern Daylight Time)"[...]
    Found : user_pref("CT2260173.LastLogin_3.3.5.1", "Sun Aug 28 2011 21:27:03 GMT-0400 (Eastern Daylight Time)"[...]
    Found : user_pref("CT2260173.LastLogin_3.6.0.10", "Wed Sep 28 2011 01:10:49 GMT+0200");
    Found : user_pref("CT2260173.LastLogin_3.7.0.6", "Mon Nov 07 2011 12:42:09 GMT+0100");
    Found : user_pref("CT2260173.LastLogin_3.8.0.8", "Mon Dec 05 2011 01:05:32 GMT+0100");
    Found : user_pref("CT2260173.LastLogin_3.8.1.0", "Wed Jan 11 2012 15:24:19 GMT+0100");
    Found : user_pref("CT2260173.LastLogin_3.9.0.3", "Thu Feb 09 2012 07:30:54 GMT+0100");
    Found : user_pref("CT2260173.LatestVersion", "3.16.0.3");
    Found : user_pref("CT2260173.Locale", "en");
    Found : user_pref("CT2260173.LoginCache", 4);
    Found : user_pref("CT2260173.MCDetectTooltipHeight", "83");
    Found : user_pref("CT2260173.MCDetectTooltipShow", false);
    Found : user_pref("CT2260173.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Found : user_pref("CT2260173.MCDetectTooltipWidth", "295");
    Found : user_pref("CT2260173.MyStuffComponents582569300771 7191955", false);
    Found : user_pref("CT2260173.MyStuffEnabledAtInstallation", true);
    Found : user_pref("CT2260173.PublisherContainerWidth", 1386);
    Found : user_pref("CT2260173.RadioLastCheckTime", "0");
    Found : user_pref("CT2260173.RadioLastUpdateIPServer", "0");
    Found : user_pref("CT2260173.RadioLastUpdateServer", "0");
    Found : user_pref("CT2260173.RadioShrinked", "expanded");
    Found : user_pref("CT2260173.SHRINK_TOOLBAR", 1);
    Found : user_pref("CT2260173.SearchBackToDefaultEngine", false);
    Found : user_pref("CT2260173.SearchBoxWidth", 255);
    Found : user_pref("CT2260173.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
    Found : user_pref("CT2260173.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
    Found : user_pref("CT2260173.SearchFromAddressBarIsInit", true);
    Found : user_pref("CT2260173.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]
    Found : user_pref("CT2260173.SearchInNewTabEnabled", true);
    Found : user_pref("CT2260173.SearchInNewTabIntervalMM", 1440);
    Found : user_pref("CT2260173.SearchInNewTabLastCheckTime", "Wed Dec 19 2012 09:53:16 GMT+0100");
    Found : user_pref("CT2260173.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Found : user_pref("CT2260173.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
    Found : user_pref("CT2260173.SearchInNewTabUserEnabled", false);
    Found : user_pref("CT2260173.SearchProtectorEnabled", false);
    Found : user_pref("CT2260173.SearchProtectorToolbarDisable d", false);
    Found : user_pref("CT2260173.ServiceMapLastCheckTime", "Wed Dec 19 2012 09:53:17 GMT+0100");
    Found : user_pref("CT2260173.SettingsCheckIntervalMin", 120);
    Found : user_pref("CT2260173.SettingsLastCheckTime", "Wed Dec 19 2012 22:35:44 GMT+0100");
    Found : user_pref("CT2260173.SettingsLastUpdate", "1355910294");
    Found : user_pref("CT2260173.ThirdPartyComponentsInterval", 504);
    Found : user_pref("CT2260173.ThirdPartyComponentsLastCheck", "Mon Sep 10 2012 12:37:17 GMT+0200");
    Found : user_pref("CT2260173.ThirdPartyComponentsLastUpdat e", "1312887586");
    Found : user_pref("CT2260173.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2260173");
    Found : user_pref("CT2260173.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
    Found : user_pref("CT2260173.UserID", "UN98133233618662951");
    Found : user_pref("CT2260173.ValidationData_Search", 2);
    Found : user_pref("CT2260173.ValidationData_Toolbar", 2);
    Found : user_pref("CT2260173.WeatherNetwork", "");
    Found : user_pref("CT2260173.WeatherPollDate", "Sun Aug 28 2011 21:26:52 GMT-0400 (Eastern Daylight Time)");
    Found : user_pref("CT2260173.WeatherUnit", "F");
    Found : user_pref("CT2260173.alertChannelId", "657446");
    Found : user_pref("CT2260173.approveUntrustedApps", false);
    Found : user_pref("CT2260173.clientLogIsEnabled", true);
    Found : user_pref("CT2260173.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
    Found : user_pref("CT2260173.components.1000034", false);
    Found : user_pref("CT2260173.components.1000080", true);
    Found : user_pref("CT2260173.components.1000082", false);
    Found : user_pref("CT2260173.components.1000234", false);
    Found : user_pref("CT2260173.components.1001", true);
    Found : user_pref("CT2260173.components.128940646976625674", false);
    Found : user_pref("CT2260173.components.128940659599556287", false);
    Found : user_pref("CT2260173.components.128940706522681543", false);
    Found : user_pref("CT2260173.components.128962387092725141", true);
    Found : user_pref("CT2260173.components.128962387831475966", false);
    Found : user_pref("CT2260173.components.128993342870288317", false);
    Found : user_pref("CT2260173.components.128993342947475250", false);
    Found : user_pref("CT2260173.components.129137782531242622", false);
    Found : user_pref("CT2260173.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
    Found : user_pref("CT2260173.globalFirstTimeInfoLastCheckT ime", "Mon Sep 10 2012 12:37:19 GMT+0200");
    Found : user_pref("CT2260173.homepageProtectorEnableByLogi n", true);
    Found : user_pref("CT2260173.initDone", true);
    Found : user_pref("CT2260173.isAppTrackingManagerOn", false);
    Found : user_pref("CT2260173.myStuffEnabled", true);
    Found : user_pref("CT2260173.myStuffPublihserMinWidth", 400);
    Found : user_pref("CT2260173.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Found : user_pref("CT2260173.myStuffServiceIntervalMM", 1440);
    Found : user_pref("CT2260173.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Found : user_pref("CT2260173.oldAppsList", "128848965243869714,128848965243869715,111,128958821111237507,128[...]
    Found : user_pref("CT2260173.revertSettingsEnabled", false);
    Found : user_pref("CT2260173.searchProtectorDialogDelayInS ec", 10);
    Found : user_pref("CT2260173.searchProtectorEnableByLogin", true);
    Found : user_pref("CT2260173.testingCtid", "");
    Found : user_pref("CT2260173.toolbarAppMetaDataLastCheckTi me", "Wed Dec 19 2012 09:53:17 GMT+0100");
    Found : user_pref("CT2260173.toolbarContextMenuLastCheckTi me", "Mon Sep 10 2012 12:37:19 GMT+0200");
    Found : user_pref("CT2260173.undefined", "Mon Nov 15 2010 13:34:10 GMT-0500 (Eastern Standard Time)");
    Found : user_pref("CT2260173.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
    Found : user_pref("CT2260173.usagesFlag", 2);
    Found : user_pref("CT2438727..clientLogIsEnabled", false);
    Found : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Found : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Found : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Found : user_pref("CT2438727.AppTrackingLastCheckTime", "Thu May 05 2011 18:11:14 GMT-0400 (Eastern Daylight[...]
    Found : user_pref("CT2438727.CTID", "CT2438727");
    Found : user_pref("CT2438727.CommunitiesChangesLastCheckTi me", "0");
    Found : user_pref("CT2438727.CurrentServerDate", "9-8-2011");
    Found : user_pref("CT2438727.DialogsAlignMode", "LTR");
    Found : user_pref("CT2438727.DialogsGetterLastCheckTime", "Sat May 21 2011 19:03:08 GMT-0400 (Eastern Daylig[...]
    Found : user_pref("CT2438727.DownloadReferralCookieData", "");
    Found : user_pref("CT2438727.FirstServerDate", "17-9-2010");
    Found : user_pref("CT2438727.FirstTime", true);
    Found : user_pref("CT2438727.FirstTimeFF3", true);
    Found : user_pref("CT2438727.FirstTimeSettingsDone", true);
    Found : user_pref("CT2438727.FixPageNotFoundErrors", true);
    Found : user_pref("CT2438727.GroupingInvalidateCache", false);
    Found : user_pref("CT2438727.GroupingLastCheckTime", "0");
    Found : user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
    Found : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
    Found : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Found : user_pref("CT2438727.HasUserGlobalKeys", true);
    Found : user_pref("CT2438727.Initialize", true);
    Found : user_pref("CT2438727.InitializeCommonPrefs", true);
    Found : user_pref("CT2438727.InstallationAndCookieDataSent Count", 3);
    Found : user_pref("CT2438727.InstalledDate", "Fri Sep 17 2010 09:54:30 GMT-0400 (Eastern Daylight Time)");
    Found : user_pref("CT2438727.InvalidateCache", false);
    Found : user_pref("CT2438727.IsGrouping", false);
    Found : user_pref("CT2438727.IsMulticommunity", false);
    Found : user_pref("CT2438727.IsOpenThankYouPage", true);
    Found : user_pref("CT2438727.IsOpenUninstallPage", true);
    Found : user_pref("CT2438727.LanguagePackLastCheckTime", "Sun Aug 28 2011 21:28:46 GMT-0400 (Eastern Dayligh[...]
    Found : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
    Found : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Found : user_pref("CT2438727.LastLogin_2.7.2.0", "Wed Nov 10 2010 11:59:05 GMT-0500 (Eastern Standard Time)"[...]
    Found : user_pref("CT2438727.LastLogin_3.2.3.3", "Sun Feb 06 2011 13:27:42 GMT-0500 (Eastern Standard Time)"[...]
    Found : user_pref("CT2438727.LastLogin_3.2.5.2", "Mon Mar 21 2011 00:22:02 GMT-0400 (Eastern Daylight Time)"[...]
    Found : user_pref("CT2438727.LastLogin_3.3.2.1", "Wed Mar 23 2011 06:31:03 GMT-0400 (Eastern Daylight Time)"[...]
    Found : user_pref("CT2438727.LastLogin_3.3.3.2", "Fri May 13 2011 03:57:53 GMT-0400 (Eastern Daylight Time)"[...]
    Found : user_pref("CT2438727.LastLogin_3.3.5.1", "Sun Aug 28 2011 21:27:03 GMT-0400 (Eastern Daylight Time)"[...]
    Found : user_pref("CT2438727.LatestVersion", "3.3.5.1");
    Found : user_pref("CT2438727.Locale", "en");
    Found : user_pref("CT2438727.LoginCache", 4);
    Found : user_pref("CT2438727.MCDetectTooltipHeight", "83");
    Found : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Found : user_pref("CT2438727.MCDetectTooltipWidth", "295");
    Found : user_pref("CT2438727.RadioLastCheckTime", "0");
    Found : user_pref("CT2438727.RadioLastUpdateIPServer", "0");
    Found : user_pref("CT2438727.RadioLastUpdateServer", "0");
    Found : user_pref("CT2438727.SHRINK_TOOLBAR", 1);
    Found : user_pref("CT2438727.SearchBoxWidth", 103);
    Found : user_pref("CT2438727.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
    Found : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
    Found : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
    Found : user_pref("CT2438727.SearchInNewTabEnabled", true);
    Found : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
    Found : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Sun Aug 28 2011 21:26:52 GMT-0400 (Eastern Dayli[...]
    Found : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Found : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
    Found : user_pref("CT2438727.SearchInNewTabUserEnabled", false);
    Found : user_pref("CT2438727.ServiceMapLastCheckTime", "Sun Aug 28 2011 21:27:01 GMT-0400 (Eastern Daylight [...]
    Found : user_pref("CT2438727.SettingsCheckIntervalMin", 120);
    Found : user_pref("CT2438727.SettingsLastCheckTime", "Sun Aug 28 2011 21:26:51 GMT-0400 (Eastern Daylight Ti[...]
    Found : user_pref("CT2438727.SettingsLastUpdate", "1312887586");
    Found : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
    Found : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Tue Aug 09 2011 13:02:33 GMT-0400 (Eastern Day[...]
    Found : user_pref("CT2438727.ThirdPartyComponentsLastUpdat e", "1246790578");
    Found : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727");
    Found : user_pref("CT2438727.UserID", "UN98780216496419148");
    Found : user_pref("CT2438727.ValidationData_Search", 1);
    Found : user_pref("CT2438727.ValidationData_Toolbar", 2);
    Found : user_pref("CT2438727.alertChannelId", "832836");
    Found : user_pref("CT2438727.backendstorage.currentgame", "66726F6E74696572");
    Found : user_pref("CT2438727.clientLogIsEnabled", false);
    Found : user_pref("CT2438727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
    Found : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
    Found : user_pref("CT2438727.globalFirstTimeInfoLastCheckT ime", "Sun Aug 28 2011 21:27:29 GMT-0400 (Eastern [...]
    Found : user_pref("CT2438727.isAppTrackingManagerOn", true);
    Found : user_pref("CT2438727.myStuffEnabled", true);
    Found : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
    Found : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Found : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
    Found : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Found : user_pref("CT2438727.oldAppsList", "129017707048431316,129017707048587567,129509324767711885,1290239[...]
    Found : user_pref("CT2438727.testingCtid", "");
    Found : user_pref("CT2438727.toolbarAppMetaDataLastCheckTi me", "Sun Aug 28 2011 21:27:26 GMT-0400 (Eastern D[...]
    Found : user_pref("CT2438727.toolbarContextMenuLastCheckTi me", "Mon May 23 2011 09:07:17 GMT-0400 (Eastern D[...]
    Found : user_pref("CT2438727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
    Found : user_pref("CT2438727.usagesFlag", 2);
    Found : user_pref("CommunityToolbar.CantToolbarBeEngineOwn er", "CT2236428,CT2438727");
    Found : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3072253&Search[...]
    Found : user_pref("CommunityToolbar.ConduitSearchList", "uTorrentControl2 Customized Web Search");
    Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2260173/CT2260173[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3072253/CT3072253[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=634099&fid=629961", "\"0\""[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=832836&fid=828639", "\"0\""[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=909619&fid=905414", "\"0\""[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=914671&fid=910466", "\"0\""[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1463702/1459356/IT", "\"0\"[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/634099/629961/US", "\"0\"")[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/657446/653307/IT", "\"0\"")[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/US", "\"0\"")[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/US", "\"0\"")[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/914671/910466/IT", "\"0\"")[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/914671/910466/US", "\"0\"")[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2236428", [...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2260173", [...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", [...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3072253", [...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.2.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2236428",[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2260173",[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727",[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3072253",[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2260173&octid=[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2438727&octid=[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2236428/CT2236428[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2260173/CT2260173[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2438727/CT2438727[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"c9e[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/15948263.xml", "\"2effc6697ed66b4396d[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16584443.xml", "\"65fa485f33311034978[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17197196.xml", "\"e71c531bd32d8c526e4[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19356980.xml", "\"9be3fb96fe9953dbcff[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/22662744.xml", "\"38474df0bc49f6812db[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/23814011.xml", "\"b8ba0977fd9896932d6[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/32454535.xml", "\"260be458fa5682bcc6c[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/36454578.xml", "\"c207857e33c442d762c[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/36681590.xml", "\"ca2f50a04e8583261bb[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/8775672.xml", "\"c9e853e8a4a4f70ef99d[...]
    Found : user_pref("CommunityToolbar.EngineHiddenByUser", false);
    Found : user_pref("CommunityToolbar.EngineOwner", "");
    Found : user_pref("CommunityToolbar.EngineOwnerGuid", "{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}");
    Found : user_pref("CommunityToolbar.EngineOwnerToolbarId", "swag_bucks");
    Found : user_pref("CommunityToolbar.IsEngineShown", true);
    Found : user_pref("CommunityToolbar.IsMyStuffImportedToEng ine", true);
    Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\nelle\\AppData\\Roaming\\Mozilla\\F[...]
    Found : user_pref("CommunityToolbar.LatestToolbarVersionIn stalled", "3.15.1.0");
    Found : user_pref("CommunityToolbar.MiniIPageGadgetPositio n.ChatGadgetWindowNameCT2236428", "861x202");
    Found : user_pref("CommunityToolbar.MiniIPageGadgetPositio n.hxxp://www.myzebramap.com/3Mq5CmaEZsbR/", "798x1[...]
    Found : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2260173");
    Found : user_pref("CommunityToolbar.OriginalEngineOwnerGui d", "{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}");
    Found : user_pref("CommunityToolbar.OriginalEngineOwnerToo lbarId", "swag_bucks");
    Found : user_pref("CommunityToolbar.SearchFromAddressBarSa vedUrl", "chrome://browser-region/locale/region.pr[...]
    Found : user_pref("CommunityToolbar.ToolbarsList", "CT2260173,CT2236428,CT2438727");
    Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2260173,CT2236428,CT2438727");
    Found : user_pref("CommunityToolbar.ToolbarsList4", "");
    Found : user_pref("CommunityToolbar.alert.alertDialogsGett erLastCheckTime", "Thu Jun 02 2011 03:11:14 GMT-04[...]
    Found : user_pref("CommunityToolbar.alert.alertInfoInterva l", 1440);
    Found : user_pref("CommunityToolbar.alert.alertInfoLastChe ckTime", "Sun Jun 26 2011 00:37:45 GMT-0400 (Easte[...]
    Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
    Found : user_pref("CommunityToolbar.alert.locale", "en");
    Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
    Found : user_pref("CommunityToolbar.alert.loginLastCheckTi me", "Sun Aug 28 2011 21:26:51 GMT-0400 (Eastern D[...]
    Found : user_pref("CommunityToolbar.alert.loginLastUpdateT ime", "1313487611");
    Found : user_pref("CommunityToolbar.alert.messageShowTimeS ec", 20);
    Found : user_pref("CommunityToolbar.alert.servicesServerUr l", "hxxp://alert.services.conduit.com");
    Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
    Found : user_pref("CommunityToolbar.alert.userCloseInterva lMin", 300);
    Found : user_pref("CommunityToolbar.alert.userId", "{64c23c19-457a-4bbe-bad1-428d1253e8b7}");
    Found : user_pref("CommunityToolbar.facebook.settingsLastC heckTime", "Sun Aug 28 2011 21:26:51 GMT-0400 (Eas[...]
    Found : user_pref("CommunityToolbar.globalUserId", "6b10e825-95de-4a30-a575-faa1998f4eeb");
    Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedI temTable", true);
    Found : user_pref("CommunityToolbar.isClickActionAddedToFe edItemTable", true);
    Found : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
    Found : user_pref("CommunityToolbar.killedEngine", true);
    Found : user_pref("CommunityToolbar.notifications.alertDia logsGetterLastCheckTime", "Mon Sep 10 2012 08:55:1[...]
    Found : user_pref("CommunityToolbar.notifications.alertEna bled", false);
    Found : user_pref("CommunityToolbar.notifications.alertInf oInterval", 1440);
    Found : user_pref("CommunityToolbar.notifications.alertInf oLastCheckTime", "Tue Jul 17 2012 19:24:12 GMT+020[...]
    Found : user_pref("CommunityToolbar.notifications.clientsS erverUrl", "hxxp://alert.client.conduit.com");
    Found : user_pref("CommunityToolbar.notifications.locale", "en");
    Found : user_pref("CommunityToolbar.notifications.loginInt ervalMin", 1440);
    Found : user_pref("CommunityToolbar.notifications.loginLas tCheckTime", "Sat Sep 15 2012 12:19:39 GMT+0200");
    Found : user_pref("CommunityToolbar.notifications.loginLas tUpdateTime", "1313487611");
    Found : user_pref("CommunityToolbar.notifications.messageS howTimeSec", 20);
    Found : user_pref("CommunityToolbar.notifications.services ServerUrl", "hxxp://alert.services.conduit.com");
    Found : user_pref("CommunityToolbar.notifications.showTray Icon", false);
    Found : user_pref("CommunityToolbar.notifications.userClos eIntervalMin", 300);
    Found : user_pref("CommunityToolbar.notifications.userId", "d559d2d4-2ebf-48f1-80a5-09981eda2b7a");
    Found : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.goodreads.com/|hxxps://www.facebook.com/|[...]
    Found : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties[...]
    Found : user_pref("CommunityToolbar.twitter.user_15948263. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
    Found : user_pref("CommunityToolbar.twitter.user_16584443. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
    Found : user_pref("CommunityToolbar.twitter.user_17197196. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
    Found : user_pref("CommunityToolbar.twitter.user_19356980. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
    Found : user_pref("CommunityToolbar.twitter.user_22662744. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
    Found : user_pref("CommunityToolbar.twitter.user_23814011. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
    Found : user_pref("CommunityToolbar.twitter.user_32454535. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
    Found : user_pref("CommunityToolbar.twitter.user_36454578. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
    Found : user_pref("CommunityToolbar.twitter.user_36681590. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
    Found : user_pref("CommunityToolbar.twitter.user_8775672.L astCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400 [...]
    Found : user_pref("CommunityToolbar.undefined", "");
    Found : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\12.2.5.34");
    Found : user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
    Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&Sea[...]
    Found : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2438727&q=");

    -\\ Google Chrome v23.0.1271.97

    File : C:\Users\nelle\AppData\Local\Google\Chrome\User Data\Default\Preferences

    Found [l.1] : icon_url ={"browser":{"window_placement":{"bottom":850,"left":300,"maximized":true,"right":1350,"top":10,"work_area_bottom":852,"work_area_left":0,"work_area_right":1600,"work_area_top":0}},"countryid_at_install":21843,"default_apps_installed":true,"default_search_provider":{"enabled":true,"encodings":"","","id":"5","instant_url":"","keyword":"swagbucks.com","name":"swagbucks.com","prepopulate_id":"0","search_url":"hxxp://www.swagbucks.com/?t=w&p=1&q={searchTerms}","suggest_url":""},"distribution":{"create_all_shortcuts":true,"do_not_launch_chrome":true,"import_history":false,"import_search_engine":false,"make_chrome_default":false,"show_welcome_page":true,"skip_first_run_ui":true,"system_level":true,"verbose_logging":false},"dns_prefetching":{"host_referral_list":[2,["hxxp://facebook.com/",["hxxp://www.facebook.com/",2.27338020]],["hxxp://l.yimg.com/",["hxxp://ad.yieldmanager.com/",2.27338020,"hxxp://l.yimg.com/",2.27338020]],["hxxp://mail.yahoo.com/",["hxxps://login.yahoo.com/",2.27338020]],["hxxp://us.mg4.mail.yahoo.com/",["hxxp://a323.yahoofs.com/",2.27338020,"hxxp://avatars.zenfs.com/",2.27338020,"hxxp://gops.usw7.mobstor.vip.s2e.yahoo.com/",1.650924815120,"hxxp://it.adserver.yahoo.com/",2.27338020,"hxxp://l.yimg.com/",4.208395931599999,"hxxp://mail.yimg.com/",15.631925472240,"hxxp://ucs.query.yahoo.com/",2.27338020,"hxxp://us.bc.yahoo.com/",2.27338020,"hxxp://us.mg4.mail.yahoo.com/",6.408328463599998,"hxxp://yom.mail.yahoo.net/",2.27338020]],["hxxp://www.facebook.com/",["hxxp://static.ak.fbcdn.net/",6.567542799999998]],["hxxp://www.google.com/",["hxxp://ssl.gstatic.com/",2.27338020,"hxxp://www.google.com/",4.915941799999999,"hxxp://www.google.it/",1.8307511320,"hxxps://clients1.google.com/",2.27338020]],["hxxp://www.google.it/",["hxxp://ssl.gstatic.com/",1.8307511320,"hxxp://translate.google.com/",2.27338020,"hxxp://translate.googleapis.com/",3.594660999999999,"hxxp://www.google.it/",4.902728991999998]],["hxxp://www.swagbucks.com/",["hxxp://ajax.googleapis.com/",2.27338020,"hxxp://edge.quantserve.com/",2.27338020,"hxxp://www.swagbucks.com/",4.915941799999999]],["hxxps://login.yahoo.com/",["hxxps://ak1s.abmr.net/",2.60370040,"hxxps://login.yahoo.com/",2.93402060,"hxxps://login.yahoo.net/",2.60370040,"hxxps://s.yimg.com/",7.888823599999998,"hxxps://us.bc.yahoo.com/",2.27338020]],["hxxps://login.yahoo.net/",["hxxps://ak1s.abmr.net/",2.27338020,"hxxps://s.yimg.com/",2.9274141960,"hxxps://us.bc.yahoo.com/",2.27338020]],["hxxps://www.facebook.com/",["hxxps://fbcdn-photos-a.akamaihd.net/",2.60370040,"hxxps://fbcdn-profile-a.akamaihd.net/",4.915941799999999,"hxxps://s-static.ak.facebook.com/",11.8526660,"hxxps://www.facebook.com/",2.60370040]]],"startup_list":[1,"hxxp://ajax.googleapis.com/","hxxp://edge.quantserve.com/","hxxp://mail.yahoo.com/","hxxp://ssl.gstatic.com/","hxxp://translate.google.com/","hxxp://translate.googleapis.com/","hxxp://www.google.com/","hxxp://www.google.it/","hxxp://www.swagbucks.com/","hxxps://login.yahoo.com/"]},"download":{"directory_upgrade":true,"extensions_to_open":"adh"},"extensions":{"autoupdate":{"last_check":"12959054593563393","next_check":"12959072014688393"},"blacklistupdate":{"lastpingday":"12958988451077393","version":"0.0.0.5"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"settings":{"aciahcmjmecflokailenpkdchphgkefd":{"allowFileAccess":true,"app_launcher_index":2,"granted_permissions":{"api":["unlimitedStorage"],"full":false},"incognito":true,"install_time":"12959054630074966","lastpingday":"12958988451122393","location":1,"manifest":{"app":{"launch":{"web_url":"hxxp://entanglement.gopherwoodstudios.com/"},"urls":["hxxp://entanglement.gopherwoodstudios.com/"]},"current_locale":"en_US","default_locale":"en","description":"Create the longest path possible and challenge your friends in the game of Entanglement.","icons":{"128":"icon-128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD UmhWocpvLByaYty7BXdP5gGHPMabneLdA/eEYQz86oi2K5hJjmpAsQvNLAn6Q2kkzsOS4OXsqpM00J60N2uVLQyw4K9wrR4avsO3R9yCKfDqcGoXQW3y+Cg73bWM99DJtDsrbnJ9mC3OcSiTE97GBhCldQyB0lmTTCQnIamhitwIDAQAB","name":"Entanglement","permissions":["unlimitedStorage"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"2.4.6"},"path":"aciahcmjmecflokailenpkdchphgkefd\\2.4.6_0","state":1},"gmfhcemponaaoollhcoebkpajgdamieo":{"granted_permissions":{"full":false},"incognito":false,"install_time":"12959054213189513","lastpingday":"12958988451122393","location":1,"manifest":{"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC u/wHW3OP/Z8PR6cbEKGDSAnz9iVrKo0UPBtzbDIkwYvi9nm1CcqKrpyG087f6Mz/YK+E18znJpa4VRAMmz5xGhDqoWrcA+41lrZyHdgFWYQVyAtzAVGC6gNyR69Q2ZHBxAtH7hOV97HAUNgEZhgG7rONN8OTs8CzuPrjT9duoowIDAQAB","name":"AT_JackSpadeV2","theme":{"colors":{"bookmark_text":[0,0,0],"fram

    SuperDave

    • Malware Removal Specialist


    • Genius
    • Thanked: 1020
    • Certifications: List
    • Experience: Expert
    • OS: Windows 10
    Re: Coupon Dropdown
    « Reply #1 on: December 21, 2012, 12:42:00 PM »
    Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

    1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
    2. The fixes are specific to your problem and should only be used for this issue on this machine.
    3. If you don't know or understand something, please don't hesitate to ask.
    4. Please DO NOT run any other tools or scans while I am helping you.
    5. It is important that you reply to this thread. Do not start a new topic.
    6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
    7. Absence of symptoms does not mean that everything is clear.

    If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
    *************************************************************************
    Remove the Adware:
    • Please close all open programs and internet browsers.
    • Double click on adwcleaner.exe to run the tool.
    • Click on Delete.
    • Confirm each time with OK
    • Your computer will be rebooted automatically. A text file will open after the restart.
    • Please post the content of that logfile in your reply.
    • You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.
    *********************************************************
    Malwarebytes' Anti-Malware (MBAM)

    If you already have Malwarebytes be sure to check for updates before scanning!


    Download Malwarebytes Anti-Malware and save it to your desktop. Alternate download link

    •Double-click mbam-setup.exe and follow the prompts to install the program.

    •Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.

    If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.

    •If an update is found, it will download and install the latest version.
    •Once the program has loaded, select Perform Quick Scan, then click Scan.

    •When the scan is complete, click OK, then Show Results to view the results.

    •Be sure that everything is checked, and click Remove Selected.

    •When completed, a log will open in Notepad. Save it to a convenient location like the Desktop.

    •The log is also automatically saved and can be viewed later by clicking the Logs tab in MBAM.

    Copy and Paste the contents of the report in your reply.

    •Exit MBAM.
    .
    Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

    *************************************************
    Download Security Check by screen317 from one of the following links and save it to your desktop.

    Link 1
    Link 2

    * Double-click Security Check.bat
    * Follow the on-screen instructions inside of the black box.
    * A Notepad document should open automatically called checkup.txt
    * Post the contents of that document in your next reply.

    Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.
    Windows 8 and Windows 10 dual boot with two SSD's

    nellenaz

      Topic Starter


      Rookie

      Re: Coupon Dropdown
      « Reply #2 on: December 21, 2012, 02:22:34 PM »
      # AdwCleaner v2.101 - Logfile created 12/21/2012 at 21:47:53
      # Updated 16/12/2012 by Xplode
      # Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
      # User : nelle - NELLE-HP
      # Boot Mode : Normal
      # Running from : C:\Users\nelle\Desktop\adwcleaner.exe
      # Option [Delete]


      ***** [Services] *****


      ***** [Files / Folders] *****

      Deleted on reboot : C:\Program Files (x86)\Common Files\AVG Secure Search
      File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
      File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
      File Deleted : C:\Users\nelle\AppData\Roaming\Mozilla\Firefox\Profiles\6qzuzpsz.default\searchplugins\Conduit.xml
      Folder Deleted : C:\Program Files (x86)\AVG Secure Search
      Folder Deleted : C:\Program Files (x86)\Conduit
      Folder Deleted : C:\ProgramData\AVG Secure Search
      Folder Deleted : C:\Users\nelle\AppData\Local\AVG Secure Search
      Folder Deleted : C:\Users\nelle\AppData\Local\Conduit
      Folder Deleted : C:\Users\nelle\AppData\Local\Ilivid Player
      Folder Deleted : C:\Users\nelle\AppData\LocalLow\AVG Secure Search
      Folder Deleted : C:\Users\nelle\AppData\LocalLow\Conduit
      Folder Deleted : C:\Users\nelle\AppData\Roaming\Mozilla\Firefox\Profiles\6qzuzpsz.default\Conduit
      Folder Deleted : C:\Windows\SysWOW64\TempDir

      ***** [Registry] *****

      Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
      Key Deleted : HKCU\Software\AVG Secure Search
      Key Deleted : HKCU\Software\IGearSettings
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
      Key Deleted : HKCU\Software\SweetIM
      Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
      Key Deleted : HKLM\Software\AVG Secure Search
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
      Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
      Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
      Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
      Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
      Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
      Key Deleted : HKLM\SOFTWARE\Classes\S
      Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
      Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
      Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
      Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
      Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
      Key Deleted : HKLM\Software\Conduit
      Key Deleted : HKLM\Software\Iminent
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
      Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
      Key Deleted : HKLM\Software\SweetIM
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
      Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
      Key Deleted : HKLM\SOFTWARE\Software
      Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
      Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

      ***** [Internet Browsers] *****

      -\\ Internet Explorer v9.0.8112.16457

      [OK] Registry is clean.

      -\\ Mozilla Firefox v17.0.1 (en-US)

      Profile name : default
      File : C:\Users\nelle\AppData\Roaming\Mozilla\Firefox\Profiles\6qzuzpsz.default\prefs.js

      C:\Users\nelle\AppData\Roaming\Mozilla\Firefox\Profiles\6qzuzpsz.default\user.js ... Deleted !

      Deleted : user_pref("CT2236428..clientLogIsEnabled", true);
      Deleted : user_pref("CT2236428..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
      Deleted : user_pref("CT2236428..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
      Deleted : user_pref("CT2236428.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
      Deleted : user_pref("CT2236428.AppTrackingLastCheckTime", "Tue Mar 29 2011 20:37:48 GMT-0400 (Eastern Daylight[...]
      Deleted : user_pref("CT2236428.CTID", "CT2236428");
      Deleted : user_pref("CT2236428.Chat.Meebo.ServerLastCheckTim e", "Tue Mar 29 2011 16:47:38 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.Chat.Meebo.ServerLastResponse Time", "Tue Mar 29 2011 16:47:38 GMT-0400 (Eastern[...]
      Deleted : user_pref("CT2236428.Chat.Meebo.rooms.armywifenetw orkcommunitychatce7cbe81", 0);
      Deleted : user_pref("CT2236428.Chat.ServerLastCheckTime", "Tue Mar 29 2011 16:37:38 GMT-0400 (Eastern Daylight[...]
      Deleted : user_pref("CT2236428.CurrentServerDate", "30-3-2011");
      Deleted : user_pref("CT2236428.DialogsAlignMode", "LTR");
      Deleted : user_pref("CT2236428.DialogsGetterLastCheckTime", "Wed Mar 23 2011 09:01:06 GMT-0400 (Eastern Daylig[...]
      Deleted : user_pref("CT2236428.DownloadReferralCookieData", "");
      Deleted : user_pref("CT2236428.EMailNotifierPollDate", "Tue Mar 29 2011 21:52:38 GMT-0400 (Eastern Daylight Ti[...]
      Deleted : user_pref("CT2236428.FeedLastCount1288911910132503 33", 297);
      Deleted : user_pref("CT2236428.FeedLastCount1288912048351251 20", 240);
      Deleted : user_pref("CT2236428.FeedPollDate12889119101762537 5", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12889120153075093 3", "Tue Mar 29 2011 21:52:38 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12889120195528185 4", "Tue Mar 29 2011 21:52:38 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12889120234621899 9", "Tue Mar 29 2011 21:52:38 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12889120269340649 5", "Tue Mar 29 2011 21:52:38 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12889120440090639 0", "Tue Mar 29 2011 21:17:39 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12889120481075004 9", "Tue Mar 29 2011 21:52:40 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12899702721945067 4", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12899702721945067 5", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12899702721945067 6", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12899702721945067 7", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12899702721945067 8", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12899702721945067 9", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12899702721945068 0", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12899702721945068 1", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedPollDate12899702721945068 2", "Wed Mar 23 2011 09:41:07 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2236428.FeedTTL128891191017625375", 40);
      Deleted : user_pref("CT2236428.FeedTTL128891204400906390", 40);
      Deleted : user_pref("CT2236428.FeedTTL128997027219450674", 40);
      Deleted : user_pref("CT2236428.FeedTTL128997027219450675", 40);
      Deleted : user_pref("CT2236428.FeedTTL128997027219450676", 40);
      Deleted : user_pref("CT2236428.FeedTTL128997027219450677", 40);
      Deleted : user_pref("CT2236428.FeedTTL128997027219450678", 40);
      Deleted : user_pref("CT2236428.FeedTTL128997027219450679", 40);
      Deleted : user_pref("CT2236428.FeedTTL128997027219450680", 40);
      Deleted : user_pref("CT2236428.FeedTTL128997027219450681", 40);
      Deleted : user_pref("CT2236428.FeedTTL128997027219450682", 40);
      Deleted : user_pref("CT2236428.FirstServerDate", "9-9-2010");
      Deleted : user_pref("CT2236428.FirstTime", true);
      Deleted : user_pref("CT2236428.FirstTimeFF3", true);
      Deleted : user_pref("CT2236428.FirstTimeSettingsDone", true);
      Deleted : user_pref("CT2236428.FixPageNotFoundErrors", true);
      Deleted : user_pref("CT2236428.GroupingServerCheckInterval", 1440);
      Deleted : user_pref("CT2236428.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
      Deleted : user_pref("CT2236428.HasUserGlobalKeys", true);
      Deleted : user_pref("CT2236428.Initialize", true);
      Deleted : user_pref("CT2236428.InitializeCommonPrefs", true);
      Deleted : user_pref("CT2236428.InstallationAndCookieDataSent Count", 3);
      Deleted : user_pref("CT2236428.InstalledDate", "Wed Sep 08 2010 17:57:29 GMT-0400 (Eastern Daylight Time)");
      Deleted : user_pref("CT2236428.InvalidateCache", false);
      Deleted : user_pref("CT2236428.IsGrouping", false);
      Deleted : user_pref("CT2236428.IsMulticommunity", false);
      Deleted : user_pref("CT2236428.IsOpenThankYouPage", true);
      Deleted : user_pref("CT2236428.IsOpenUninstallPage", true);
      Deleted : user_pref("CT2236428.LanguagePackLastCheckTime", "Tue Mar 29 2011 23:34:46 GMT-0400 (Eastern Dayligh[...]
      Deleted : user_pref("CT2236428.LanguagePackReloadIntervalMM", 1440);
      Deleted : user_pref("CT2236428.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
      Deleted : user_pref("CT2236428.LastLogin_2.7.2.0", "Fri Sep 10 2010 16:00:43 GMT-0400 (Eastern Daylight Time)"[...]
      Deleted : user_pref("CT2236428.LastLogin_3.3.2.1", "Tue Mar 29 2011 20:37:38 GMT-0400 (Eastern Daylight Time)"[...]
      Deleted : user_pref("CT2236428.LatestVersion", "3.2.5.2");
      Deleted : user_pref("CT2236428.Locale", "en");
      Deleted : user_pref("CT2236428.LoginCache", 4);
      Deleted : user_pref("CT2236428.MCDetectTooltipHeight", "83");
      Deleted : user_pref("CT2236428.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
      Deleted : user_pref("CT2236428.MCDetectTooltipWidth", "295");
      Deleted : user_pref("CT2236428.RadioIsPodcast", false);
      Deleted : user_pref("CT2236428.RadioLastCheckTime", "Tue Mar 29 2011 23:35:11 GMT-0400 (Eastern Daylight Time)[...]
      Deleted : user_pref("CT2236428.RadioLastUpdateIPServer", "3");
      Deleted : user_pref("CT2236428.RadioLastUpdateServer", "0");
      Deleted : user_pref("CT2236428.RadioMediaID", "9909");
      Deleted : user_pref("CT2236428.RadioMediaType", "Media Player");
      Deleted : user_pref("CT2236428.RadioMenuSelectedID", "EBRadioMenu_CT22364289909");
      Deleted : user_pref("CT2236428.RadioStationName", "WQXR-FM%20NYC%20(Classical)");
      Deleted : user_pref("CT2236428.RadioStationURL", "hxxp://htc-01.media.globix.net/COMP005996MOD1/meta/wqxr_live[...]
      Deleted : user_pref("CT2236428.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
      Deleted : user_pref("CT2236428.SearchFromAddressBarIsInit", true);
      Deleted : user_pref("CT2236428.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT223[...]
      Deleted : user_pref("CT2236428.SearchInNewTabEnabled", true);
      Deleted : user_pref("CT2236428.SearchInNewTabIntervalMM", 1440);
      Deleted : user_pref("CT2236428.SearchInNewTabLastCheckTime", "Tue Mar 29 2011 23:34:46 GMT-0400 (Eastern Dayli[...]
      Deleted : user_pref("CT2236428.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
      Deleted : user_pref("CT2236428.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
      Deleted : user_pref("CT2236428.SearchInNewTabUserEnabled", false);
      Deleted : user_pref("CT2236428.ServiceMapLastCheckTime", "Tue Mar 29 2011 23:34:46 GMT-0400 (Eastern Daylight [...]
      Deleted : user_pref("CT2236428.SettingsCheckIntervalMin", 120);
      Deleted : user_pref("CT2236428.SettingsLastCheckTime", "Tue Mar 29 2011 21:36:05 GMT-0400 (Eastern Daylight Ti[...]
      Deleted : user_pref("CT2236428.SettingsLastUpdate", "1297857784");
      Deleted : user_pref("CT2236428.ThirdPartyComponentsInterval", 504);
      Deleted : user_pref("CT2236428.ThirdPartyComponentsLastCheck", "Wed Mar 23 2011 09:01:05 GMT-0400 (Eastern Day[...]
      Deleted : user_pref("CT2236428.ThirdPartyComponentsLastUpdat e", "1246790578");
      Deleted : user_pref("CT2236428.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2236428");
      Deleted : user_pref("CT2236428.UserID", "UN80685848076212743");
      Deleted : user_pref("CT2236428.ValidationData_Toolbar", 2);
      Deleted : user_pref("CT2236428.WeatherNetwork", "");
      Deleted : user_pref("CT2236428.WeatherPollDate", "Tue Mar 29 2011 21:38:40 GMT-0400 (Eastern Daylight Time)");
      Deleted : user_pref("CT2236428.WeatherUnit", "F");
      Deleted : user_pref("CT2236428.alertChannelId", "634099");
      Deleted : user_pref("CT2236428.clientLogIsEnabled", true);
      Deleted : user_pref("CT2236428.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
      Deleted : user_pref("CT2236428.components.1000034", true);
      Deleted : user_pref("CT2236428.components.1000082", true);
      Deleted : user_pref("CT2236428.components.1000234", true);
      Deleted : user_pref("CT2236428.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
      Deleted : user_pref("CT2236428.globalFirstTimeInfoLastCheckT ime", "Tue Mar 29 2011 20:37:38 GMT-0400 (Eastern [...]
      Deleted : user_pref("CT2236428.isAppTrackingManagerOn", true);
      Deleted : user_pref("CT2236428.myStuffEnabled", true);
      Deleted : user_pref("CT2236428.myStuffPublihserMinWidth", 400);
      Deleted : user_pref("CT2236428.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
      Deleted : user_pref("CT2236428.myStuffServiceIntervalMM", 1440);
      Deleted : user_pref("CT2236428.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
      Deleted : user_pref("CT2236428.oldAppsList", "128832821193968859,128832821193968860,128891216979031631,1293120[...]
      Deleted : user_pref("CT2236428.testingCtid", "");
      Deleted : user_pref("CT2236428.toolbarAppMetaDataLastCheckTi me", "Tue Mar 29 2011 23:34:46 GMT-0400 (Eastern D[...]
      Deleted : user_pref("CT2236428.toolbarContextMenuLastCheckTi me", "Wed Mar 23 2011 09:01:06 GMT-0400 (Eastern D[...]
      Deleted : user_pref("CT2236428.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
      Deleted : user_pref("CT2236428.usagesFlag", 2);
      Deleted : user_pref("CT2260173..clientLogIsEnabled", false);
      Deleted : user_pref("CT2260173..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
      Deleted : user_pref("CT2260173..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
      Deleted : user_pref("CT2260173.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
      Deleted : user_pref("CT2260173.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
      Deleted : user_pref("CT2260173.AppTrackingLastCheckTime", "Wed Jan 18 2012 12:56:11 GMT+0100");
      Deleted : user_pref("CT2260173.BrowserCompStateIsOpen_582569 3007717191955", true);
      Deleted : user_pref("CT2260173.CTID", "CT2260173");
      Deleted : user_pref("CT2260173.CommunitiesChangesLastCheckTi me", "0");
      Deleted : user_pref("CT2260173.CurrentServerDate", "19-12-2012");
      Deleted : user_pref("CT2260173.DialogsAlignMode", "LTR");
      Deleted : user_pref("CT2260173.DialogsGetterLastCheckTime", "Wed Dec 19 2012 20:11:40 GMT+0100");
      Deleted : user_pref("CT2260173.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...]
      Deleted : user_pref("CT2260173.EnableClickToSearchBox", false);
      Deleted : user_pref("CT2260173.EnableSearchHistory", false);
      Deleted : user_pref("CT2260173.EnableSearchSuggest", false);
      Deleted : user_pref("CT2260173.EnableUsage", false);
      Deleted : user_pref("CT2260173.FeedLastCount1289406595995562 87", 0);
      Deleted : user_pref("CT2260173.FeedLastCount1289623870927251 41", 4);
      Deleted : user_pref("CT2260173.FeedPollDate12894065919627547 7", "Wed Sep 08 2010 11:37:53 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2260173.FeedPollDate12894065957471253 6", "Wed Sep 08 2010 11:37:53 GMT-0400 (Eastern Da[...]
      Deleted : user_pref("CT2260173.FeedPollDate12896238709272514 1", "Wed Mar 09 2011 17:21:27 GMT-0500 (Eastern St[...]
      Deleted : user_pref("CT2260173.FeedTTL128940659574712536", 40);
      Deleted : user_pref("CT2260173.FirstServerDate", "21-8-2010");
      Deleted : user_pref("CT2260173.FirstTime", true);
      Deleted : user_pref("CT2260173.FirstTimeFF3", true);
      Deleted : user_pref("CT2260173.FirstTimeSettingsDone", true);
      Deleted : user_pref("CT2260173.FixPageNotFoundErrors", true);
      Deleted : user_pref("CT2260173.GroupingInvalidateCache", false);
      Deleted : user_pref("CT2260173.GroupingLastCheckTime", "0");
      Deleted : user_pref("CT2260173.GroupingLastServerUpdateTime", "0");
      Deleted : user_pref("CT2260173.GroupingServerCheckInterval", 1440);
      Deleted : user_pref("CT2260173.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
      Deleted : user_pref("CT2260173.HasUserGlobalKeys", true);
      Deleted : user_pref("CT2260173.HomePageProtectorEnabled", false);
      Deleted : user_pref("CT2260173.Initialize", true);
      Deleted : user_pref("CT2260173.InitializeCommonPrefs", true);
      Deleted : user_pref("CT2260173.InstallationAndCookieDataSent Count", 3);
      Deleted : user_pref("CT2260173.InstalledDate", "Fri Aug 20 2010 22:21:35 GMT-0400 (Eastern Daylight Time)");
      Deleted : user_pref("CT2260173.InvalidateCache", false);
      Deleted : user_pref("CT2260173.IsAlertDBUpdated", true);
      Deleted : user_pref("CT2260173.IsGrouping", false);
      Deleted : user_pref("CT2260173.IsMulticommunity", false);
      Deleted : user_pref("CT2260173.IsOpenThankYouPage", true);
      Deleted : user_pref("CT2260173.IsOpenUninstallPage", true);
      Deleted : user_pref("CT2260173.LanguagePackLastCheckTime", "Wed Dec 19 2012 09:53:17 GMT+0100");
      Deleted : user_pref("CT2260173.LanguagePackReloadIntervalMM", 1440);
      Deleted : user_pref("CT2260173.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
      Deleted : user_pref("CT2260173.LastLogin_2.7.2.0", "Wed Nov 10 2010 11:59:05 GMT-0500 (Eastern Standard Time)"[...]
      Deleted : user_pref("CT2260173.LastLogin_3.12.0.7", "Wed Apr 25 2012 07:25:14 GMT+0200");
      Deleted : user_pref("CT2260173.LastLogin_3.12.2.3", "Wed May 30 2012 16:33:46 GMT+0200");
      Deleted : user_pref("CT2260173.LastLogin_3.13.0.6", "Sun Jul 15 2012 11:43:03 GMT+0200");
      Deleted : user_pref("CT2260173.LastLogin_3.14.1.0", "Tue Aug 21 2012 09:27:52 GMT+0200");
      Deleted : user_pref("CT2260173.LastLogin_3.15.1.0", "Wed Nov 07 2012 16:51:02 GMT+0100");
      Deleted : user_pref("CT2260173.LastLogin_3.16.0.3", "Wed Dec 19 2012 20:35:48 GMT+0100");
      Deleted : user_pref("CT2260173.LastLogin_3.2.3.3", "Sun Feb 06 2011 13:27:16 GMT-0500 (Eastern Standard Time)"[...]
      Deleted : user_pref("CT2260173.LastLogin_3.2.5.2", "Mon Mar 21 2011 00:22:02 GMT-0400 (Eastern Daylight Time)"[...]
      Deleted : user_pref("CT2260173.LastLogin_3.3.2.1", "Thu Mar 31 2011 05:10:49 GMT-0400 (Eastern Daylight Time)"[...]
      Deleted : user_pref("CT2260173.LastLogin_3.3.3.2", "Fri May 13 2011 03:57:54 GMT-0400 (Eastern Daylight Time)"[...]
      Deleted : user_pref("CT2260173.LastLogin_3.3.5.1", "Sun Aug 28 2011 21:27:03 GMT-0400 (Eastern Daylight Time)"[...]
      Deleted : user_pref("CT2260173.LastLogin_3.6.0.10", "Wed Sep 28 2011 01:10:49 GMT+0200");
      Deleted : user_pref("CT2260173.LastLogin_3.7.0.6", "Mon Nov 07 2011 12:42:09 GMT+0100");
      Deleted : user_pref("CT2260173.LastLogin_3.8.0.8", "Mon Dec 05 2011 01:05:32 GMT+0100");
      Deleted : user_pref("CT2260173.LastLogin_3.8.1.0", "Wed Jan 11 2012 15:24:19 GMT+0100");
      Deleted : user_pref("CT2260173.LastLogin_3.9.0.3", "Thu Feb 09 2012 07:30:54 GMT+0100");
      Deleted : user_pref("CT2260173.LatestVersion", "3.16.0.3");
      Deleted : user_pref("CT2260173.Locale", "en");
      Deleted : user_pref("CT2260173.LoginCache", 4);
      Deleted : user_pref("CT2260173.MCDetectTooltipHeight", "83");
      Deleted : user_pref("CT2260173.MCDetectTooltipShow", false);
      Deleted : user_pref("CT2260173.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
      Deleted : user_pref("CT2260173.MCDetectTooltipWidth", "295");
      Deleted : user_pref("CT2260173.MyStuffComponents582569300771 7191955", false);
      Deleted : user_pref("CT2260173.MyStuffEnabledAtInstallation", true);
      Deleted : user_pref("CT2260173.PublisherContainerWidth", 1386);
      Deleted : user_pref("CT2260173.RadioLastCheckTime", "0");
      Deleted : user_pref("CT2260173.RadioLastUpdateIPServer", "0");
      Deleted : user_pref("CT2260173.RadioLastUpdateServer", "0");
      Deleted : user_pref("CT2260173.RadioShrinked", "expanded");
      Deleted : user_pref("CT2260173.SHRINK_TOOLBAR", 1);
      Deleted : user_pref("CT2260173.SearchBackToDefaultEngine", false);
      Deleted : user_pref("CT2260173.SearchBoxWidth", 255);
      Deleted : user_pref("CT2260173.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
      Deleted : user_pref("CT2260173.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
      Deleted : user_pref("CT2260173.SearchFromAddressBarIsInit", true);
      Deleted : user_pref("CT2260173.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]
      Deleted : user_pref("CT2260173.SearchInNewTabEnabled", true);
      Deleted : user_pref("CT2260173.SearchInNewTabIntervalMM", 1440);
      Deleted : user_pref("CT2260173.SearchInNewTabLastCheckTime", "Wed Dec 19 2012 09:53:16 GMT+0100");
      Deleted : user_pref("CT2260173.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
      Deleted : user_pref("CT2260173.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
      Deleted : user_pref("CT2260173.SearchInNewTabUserEnabled", false);
      Deleted : user_pref("CT2260173.SearchProtectorEnabled", false);
      Deleted : user_pref("CT2260173.SearchProtectorToolbarDisable d", false);
      Deleted : user_pref("CT2260173.ServiceMapLastCheckTime", "Wed Dec 19 2012 09:53:17 GMT+0100");
      Deleted : user_pref("CT2260173.SettingsCheckIntervalMin", 120);
      Deleted : user_pref("CT2260173.SettingsLastCheckTime", "Wed Dec 19 2012 22:35:44 GMT+0100");
      Deleted : user_pref("CT2260173.SettingsLastUpdate", "1355910294");
      Deleted : user_pref("CT2260173.ThirdPartyComponentsInterval", 504);
      Deleted : user_pref("CT2260173.ThirdPartyComponentsLastCheck", "Mon Sep 10 2012 12:37:17 GMT+0200");
      Deleted : user_pref("CT2260173.ThirdPartyComponentsLastUpdat e", "1312887586");
      Deleted : user_pref("CT2260173.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2260173");
      Deleted : user_pref("CT2260173.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
      Deleted : user_pref("CT2260173.UserID", "UN98133233618662951");
      Deleted : user_pref("CT2260173.ValidationData_Search", 2);
      Deleted : user_pref("CT2260173.ValidationData_Toolbar", 2);
      Deleted : user_pref("CT2260173.WeatherNetwork", "");
      Deleted : user_pref("CT2260173.WeatherPollDate", "Sun Aug 28 2011 21:26:52 GMT-0400 (Eastern Daylight Time)");
      Deleted : user_pref("CT2260173.WeatherUnit", "F");
      Deleted : user_pref("CT2260173.alertChannelId", "657446");
      Deleted : user_pref("CT2260173.approveUntrustedApps", false);
      Deleted : user_pref("CT2260173.clientLogIsEnabled", true);
      Deleted : user_pref("CT2260173.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
      Deleted : user_pref("CT2260173.components.1000034", false);
      Deleted : user_pref("CT2260173.components.1000080", true);
      Deleted : user_pref("CT2260173.components.1000082", false);
      Deleted : user_pref("CT2260173.components.1000234", false);
      Deleted : user_pref("CT2260173.components.1001", true);
      Deleted : user_pref("CT2260173.components.128940646976625674", false);
      Deleted : user_pref("CT2260173.components.128940659599556287", false);
      Deleted : user_pref("CT2260173.components.128940706522681543", false);
      Deleted : user_pref("CT2260173.components.128962387092725141", true);
      Deleted : user_pref("CT2260173.components.128962387831475966", false);
      Deleted : user_pref("CT2260173.components.128993342870288317", false);
      Deleted : user_pref("CT2260173.components.128993342947475250", false);
      Deleted : user_pref("CT2260173.components.129137782531242622", false);
      Deleted : user_pref("CT2260173.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
      Deleted : user_pref("CT2260173.globalFirstTimeInfoLastCheckT ime", "Mon Sep 10 2012 12:37:19 GMT+0200");
      Deleted : user_pref("CT2260173.homepageProtectorEnableByLogi n", true);
      Deleted : user_pref("CT2260173.initDone", true);
      Deleted : user_pref("CT2260173.isAppTrackingManagerOn", false);
      Deleted : user_pref("CT2260173.myStuffEnabled", true);
      Deleted : user_pref("CT2260173.myStuffPublihserMinWidth", 400);
      Deleted : user_pref("CT2260173.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
      Deleted : user_pref("CT2260173.myStuffServiceIntervalMM", 1440);
      Deleted : user_pref("CT2260173.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
      Deleted : user_pref("CT2260173.oldAppsList", "128848965243869714,128848965243869715,111,128958821111237507,128[...]
      Deleted : user_pref("CT2260173.revertSettingsEnabled", false);
      Deleted : user_pref("CT2260173.searchProtectorDialogDelayInS ec", 10);
      Deleted : user_pref("CT2260173.searchProtectorEnableByLogin", true);
      Deleted : user_pref("CT2260173.testingCtid", "");
      Deleted : user_pref("CT2260173.toolbarAppMetaDataLastCheckTi me", "Wed Dec 19 2012 09:53:17 GMT+0100");
      Deleted : user_pref("CT2260173.toolbarContextMenuLastCheckTi me", "Mon Sep 10 2012 12:37:19 GMT+0200");
      Deleted : user_pref("CT2260173.undefined", "Mon Nov 15 2010 13:34:10 GMT-0500 (Eastern Standard Time)");
      Deleted : user_pref("CT2260173.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
      Deleted : user_pref("CT2260173.usagesFlag", 2);
      Deleted : user_pref("CT2438727..clientLogIsEnabled", false);
      Deleted : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
      Deleted : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
      Deleted : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
      Deleted : user_pref("CT2438727.AppTrackingLastCheckTime", "Thu May 05 2011 18:11:14 GMT-0400 (Eastern Daylight[...]
      Deleted : user_pref("CT2438727.CTID", "CT2438727");
      Deleted : user_pref("CT2438727.CommunitiesChangesLastCheckTi me", "0");
      Deleted : user_pref("CT2438727.CurrentServerDate", "9-8-2011");
      Deleted : user_pref("CT2438727.DialogsAlignMode", "LTR");
      Deleted : user_pref("CT2438727.DialogsGetterLastCheckTime", "Sat May 21 2011 19:03:08 GMT-0400 (Eastern Daylig[...]
      Deleted : user_pref("CT2438727.DownloadReferralCookieData", "");
      Deleted : user_pref("CT2438727.FirstServerDate", "17-9-2010");
      Deleted : user_pref("CT2438727.FirstTime", true);
      Deleted : user_pref("CT2438727.FirstTimeFF3", true);
      Deleted : user_pref("CT2438727.FirstTimeSettingsDone", true);
      Deleted : user_pref("CT2438727.FixPageNotFoundErrors", true);
      Deleted : user_pref("CT2438727.GroupingInvalidateCache", false);
      Deleted : user_pref("CT2438727.GroupingLastCheckTime", "0");
      Deleted : user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
      Deleted : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
      Deleted : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
      Deleted : user_pref("CT2438727.HasUserGlobalKeys", true);
      Deleted : user_pref("CT2438727.Initialize", true);
      Deleted : user_pref("CT2438727.InitializeCommonPrefs", true);
      Deleted : user_pref("CT2438727.InstallationAndCookieDataSent Count", 3);
      Deleted : user_pref("CT2438727.InstalledDate", "Fri Sep 17 2010 09:54:30 GMT-0400 (Eastern Daylight Time)");
      Deleted : user_pref("CT2438727.InvalidateCache", false);
      Deleted : user_pref("CT2438727.IsGrouping", false);
      Deleted : user_pref("CT2438727.IsMulticommunity", false);
      Deleted : user_pref("CT2438727.IsOpenThankYouPage", true);
      Deleted : user_pref("CT2438727.IsOpenUninstallPage", true);
      Deleted : user_pref("CT2438727.LanguagePackLastCheckTime", "Sun Aug 28 2011 21:28:46 GMT-0400 (Eastern Dayligh[...]
      Deleted : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
      Deleted : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
      Deleted : user_pref("CT2438727.LastLogin_2.7.2.0", "Wed Nov 10 2010 11:59:05 GMT-0500 (Eastern Standard Time)"[...]
      Deleted : user_pref("CT2438727.LastLogin_3.2.3.3", "Sun Feb 06 2011 13:27:42 GMT-0500 (Eastern Standard Time)"[...]
      Deleted : user_pref("CT2438727.LastLogin_3.2.5.2", "Mon Mar 21 2011 00:22:02 GMT-0400 (Eastern Daylight Time)"[...]
      Deleted : user_pref("CT2438727.LastLogin_3.3.2.1", "Wed Mar 23 2011 06:31:03 GMT-0400 (Eastern Daylight Time)"[...]
      Deleted : user_pref("CT2438727.LastLogin_3.3.3.2", "Fri May 13 2011 03:57:53 GMT-0400 (Eastern Daylight Time)"[...]
      Deleted : user_pref("CT2438727.LastLogin_3.3.5.1", "Sun Aug 28 2011 21:27:03 GMT-0400 (Eastern Daylight Time)"[...]
      Deleted : user_pref("CT2438727.LatestVersion", "3.3.5.1");
      Deleted : user_pref("CT2438727.Locale", "en");
      Deleted : user_pref("CT2438727.LoginCache", 4);
      Deleted : user_pref("CT2438727.MCDetectTooltipHeight", "83");
      Deleted : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
      Deleted : user_pref("CT2438727.MCDetectTooltipWidth", "295");
      Deleted : user_pref("CT2438727.RadioLastCheckTime", "0");
      Deleted : user_pref("CT2438727.RadioLastUpdateIPServer", "0");
      Deleted : user_pref("CT2438727.RadioLastUpdateServer", "0");
      Deleted : user_pref("CT2438727.SHRINK_TOOLBAR", 1);
      Deleted : user_pref("CT2438727.SearchBoxWidth", 103);
      Deleted : user_pref("CT2438727.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
      Deleted : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
      Deleted : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
      Deleted : user_pref("CT2438727.SearchInNewTabEnabled", true);
      Deleted : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
      Deleted : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Sun Aug 28 2011 21:26:52 GMT-0400 (Eastern Dayli[...]
      Deleted : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
      Deleted : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
      Deleted : user_pref("CT2438727.SearchInNewTabUserEnabled", false);
      Deleted : user_pref("CT2438727.ServiceMapLastCheckTime", "Sun Aug 28 2011 21:27:01 GMT-0400 (Eastern Daylight [...]
      Deleted : user_pref("CT2438727.SettingsCheckIntervalMin", 120);
      Deleted : user_pref("CT2438727.SettingsLastCheckTime", "Sun Aug 28 2011 21:26:51 GMT-0400 (Eastern Daylight Ti[...]
      Deleted : user_pref("CT2438727.SettingsLastUpdate", "1312887586");
      Deleted : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
      Deleted : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Tue Aug 09 2011 13:02:33 GMT-0400 (Eastern Day[...]
      Deleted : user_pref("CT2438727.ThirdPartyComponentsLastUpdat e", "1246790578");
      Deleted : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727");
      Deleted : user_pref("CT2438727.UserID", "UN98780216496419148");
      Deleted : user_pref("CT2438727.ValidationData_Search", 1);
      Deleted : user_pref("CT2438727.ValidationData_Toolbar", 2);
      Deleted : user_pref("CT2438727.alertChannelId", "832836");
      Deleted : user_pref("CT2438727.backendstorage.currentgame", "66726F6E74696572");
      Deleted : user_pref("CT2438727.clientLogIsEnabled", false);
      Deleted : user_pref("CT2438727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
      Deleted : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
      Deleted : user_pref("CT2438727.globalFirstTimeInfoLastCheckT ime", "Sun Aug 28 2011 21:27:29 GMT-0400 (Eastern [...]
      Deleted : user_pref("CT2438727.isAppTrackingManagerOn", true);
      Deleted : user_pref("CT2438727.myStuffEnabled", true);
      Deleted : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
      Deleted : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
      Deleted : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
      Deleted : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
      Deleted : user_pref("CT2438727.oldAppsList", "129017707048431316,129017707048587567,129509324767711885,1290239[...]
      Deleted : user_pref("CT2438727.testingCtid", "");
      Deleted : user_pref("CT2438727.toolbarAppMetaDataLastCheckTi me", "Sun Aug 28 2011 21:27:26 GMT-0400 (Eastern D[...]
      Deleted : user_pref("CT2438727.toolbarContextMenuLastCheckTi me", "Mon May 23 2011 09:07:17 GMT-0400 (Eastern D[...]
      Deleted : user_pref("CT2438727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
      Deleted : user_pref("CT2438727.usagesFlag", 2);
      Deleted : user_pref("CommunityToolbar.CantToolbarBeEngineOwn er", "CT2236428,CT2438727");
      Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3072253&Search[...]
      Deleted : user_pref("CommunityToolbar.ConduitSearchList", "uTorrentControl2 Customized Web Search");
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2260173/CT2260173[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3072253/CT3072253[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=634099&fid=629961", "\"0\""[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=832836&fid=828639", "\"0\""[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=909619&fid=905414", "\"0\""[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=914671&fid=910466", "\"0\""[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1463702/1459356/IT", "\"0\"[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/634099/629961/US", "\"0\"")[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/657446/653307/IT", "\"0\"")[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/US", "\"0\"")[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/US", "\"0\"")[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/914671/910466/IT", "\"0\"")[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/914671/910466/US", "\"0\"")[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2236428", [...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2260173", [...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", [...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3072253", [...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.2.[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2236428",[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2260173",[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727",[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3072253",[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2260173&octid=[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2438727&octid=[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2236428/CT2236428[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2260173/CT2260173[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2438727/CT2438727[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"c9e[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/15948263.xml", "\"2effc6697ed66b4396d[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16584443.xml", "\"65fa485f33311034978[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17197196.xml", "\"e71c531bd32d8c526e4[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19356980.xml", "\"9be3fb96fe9953dbcff[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/22662744.xml", "\"38474df0bc49f6812db[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/23814011.xml", "\"b8ba0977fd9896932d6[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/32454535.xml", "\"260be458fa5682bcc6c[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/36454578.xml", "\"c207857e33c442d762c[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/36681590.xml", "\"ca2f50a04e8583261bb[...]
      Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/8775672.xml", "\"c9e853e8a4a4f70ef99d[...]
      Deleted : user_pref("CommunityToolbar.EngineHiddenByUser", false);
      Deleted : user_pref("CommunityToolbar.EngineOwner", "");
      Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}");
      Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "swag_bucks");
      Deleted : user_pref("CommunityToolbar.IsEngineShown", true);
      Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEng ine", true);
      Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\nelle\\AppData\\Roaming\\Mozilla\\F[...]
      Deleted : user_pref("CommunityToolbar.LatestToolbarVersionIn stalled", "3.15.1.0");
      Deleted : user_pref("CommunityToolbar.MiniIPageGadgetPositio n.ChatGadgetWindowNameCT2236428", "861x202");
      Deleted : user_pref("CommunityToolbar.MiniIPageGadgetPositio n.hxxp://www.myzebramap.com/3Mq5CmaEZsbR/", "798x1[...]
      Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2260173");
      Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGui d", "{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}");
      Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToo lbarId", "swag_bucks");
      Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSa vedUrl", "chrome://browser-region/locale/region.pr[...]
      Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2260173,CT2236428,CT2438727");
      Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2260173,CT2236428,CT2438727");
      Deleted : user_pref("CommunityToolbar.ToolbarsList4", "");
      Deleted : user_pref("CommunityToolbar.alert.alertDialogsGett erLastCheckTime", "Thu Jun 02 2011 03:11:14 GMT-04[...]
      Deleted : user_pref("CommunityToolbar.alert.alertInfoInterva l", 1440);
      Deleted : user_pref("CommunityToolbar.alert.alertInfoLastChe ckTime", "Sun Jun 26 2011 00:37:45 GMT-0400 (Easte[...]
      Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
      Deleted : user_pref("CommunityToolbar.alert.locale", "en");
      Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
      Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTi me", "Sun Aug 28 2011 21:26:51 GMT-0400 (Eastern D[...]
      Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateT ime", "1313487611");
      Deleted : user_pref("CommunityToolbar.alert.messageShowTimeS ec", 20);
      Deleted : user_pref("CommunityToolbar.alert.servicesServerUr l", "hxxp://alert.services.conduit.com");
      Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
      Deleted : user_pref("CommunityToolbar.alert.userCloseInterva lMin", 300);
      Deleted : user_pref("CommunityToolbar.alert.userId", "{64c23c19-457a-4bbe-bad1-428d1253e8b7}");
      Deleted : user_pref("CommunityToolbar.facebook.settingsLastC heckTime", "Sun Aug 28 2011 21:26:51 GMT-0400 (Eas[...]
      Deleted : user_pref("CommunityToolbar.globalUserId", "6b10e825-95de-4a30-a575-faa1998f4eeb");
      Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedI temTable", true);
      Deleted : user_pref("CommunityToolbar.isClickActionAddedToFe edItemTable", true);
      Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
      Deleted : user_pref("CommunityToolbar.killedEngine", true);
      Deleted : user_pref("CommunityToolbar.notifications.alertDia logsGetterLastCheckTime", "Mon Sep 10 2012 08:55:1[...]
      Deleted : user_pref("CommunityToolbar.notifications.alertEna bled", false);
      Deleted : user_pref("CommunityToolbar.notifications.alertInf oInterval", 1440);
      Deleted : user_pref("CommunityToolbar.notifications.alertInf oLastCheckTime", "Tue Jul 17 2012 19:24:12 GMT+020[...]
      Deleted : user_pref("CommunityToolbar.notifications.clientsS erverUrl", "hxxp://alert.client.conduit.com");
      Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
      Deleted : user_pref("CommunityToolbar.notifications.loginInt ervalMin", 1440);
      Deleted : user_pref("CommunityToolbar.notifications.loginLas tCheckTime", "Sat Sep 15 2012 12:19:39 GMT+0200");
      Deleted : user_pref("CommunityToolbar.notifications.loginLas tUpdateTime", "1313487611");
      Deleted : user_pref("CommunityToolbar.notifications.messageS howTimeSec", 20);
      Deleted : user_pref("CommunityToolbar.notifications.services ServerUrl", "hxxp://alert.services.conduit.com");
      Deleted : user_pref("CommunityToolbar.notifications.showTray Icon", false);
      Deleted : user_pref("CommunityToolbar.notifications.userClos eIntervalMin", 300);
      Deleted : user_pref("CommunityToolbar.notifications.userId", "d559d2d4-2ebf-48f1-80a5-09981eda2b7a");
      Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.goodreads.com/|hxxps://www.facebook.com/|[...]
      Deleted : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties[...]
      Deleted : user_pref("CommunityToolbar.twitter.user_15948263. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
      Deleted : user_pref("CommunityToolbar.twitter.user_16584443. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
      Deleted : user_pref("CommunityToolbar.twitter.user_17197196. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
      Deleted : user_pref("CommunityToolbar.twitter.user_19356980. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
      Deleted : user_pref("CommunityToolbar.twitter.user_22662744. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
      Deleted : user_pref("CommunityToolbar.twitter.user_23814011. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
      Deleted : user_pref("CommunityToolbar.twitter.user_32454535. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
      Deleted : user_pref("CommunityToolbar.twitter.user_36454578. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
      Deleted : user_pref("CommunityToolbar.twitter.user_36681590. LastCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400[...]
      Deleted : user_pref("CommunityToolbar.twitter.user_8775672.L astCheckTime", "Wed Mar 23 2011 09:01:08 GMT-0400 [...]
      Deleted : user_pref("CommunityToolbar.undefined", "");
      Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\12.2.5.34");
      Deleted : user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
      Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&Sea[...]
      Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2438727&q=");

      -\\ Google Chrome v23.0.1271.97

      File : C:\Users\nelle\AppData\Local\Google\Chrome\User Data\Default\Preferences

      Deleted [l.1] : icon_url ={"browser":{"window_placement":{"bottom":850,"left":300,"maximized":true,"right":1350,"top":10,"work[...]

      *************************

      AdwCleaner[R1].txt - [62396 octets] - [21/12/2012 09:33:07]
      AdwCleaner[S1].txt - [50282 octets] - [21/12/2012 21:47:53]

      ########## EOF - C:\AdwCleaner[S1].txt - [50343 octets] ##########

      nellenaz

        Topic Starter


        Rookie

        Re: Coupon Dropdown
        « Reply #3 on: December 21, 2012, 02:36:29 PM »
         







        Malwarebytes Anti-Malware 1.65.1.1000
        www.malwarebytes.org

        Database version: v2012.12.21.07

        Windows 7 Service Pack 1 x64 NTFS
        Internet Explorer 9.0.8112.16421
        nelle :: NELLE-HP [administrator]

        12/21/2012 10:37:40 PM
        mbam-log-2012-12-21 (22-37-40).txt

        Scan type: Quick scan
        Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
        Scan options disabled: P2P
        Objects scanned: 225278
        Time elapsed: 3 minute(s), 54 second(s)

        Memory Processes Detected: 0
        (No malicious items detected)

        Memory Modules Detected: 0
        (No malicious items detected)

        Registry Keys Detected: 0
        (No malicious items detected)

        Registry Values Detected: 0
        (No malicious items detected)

        Registry Data Items Detected: 0
        (No malicious items detected)

        Folders Detected: 0
        (No malicious items detected)

        Files Detected: 0
        (No malicious items detected)

        (end)









        Results of screen317's Security Check version 0.99.56 
         Windows 7 Service Pack 1 x64 (UAC is enabled) 
         Internet Explorer 9 
        ``````````````Antivirus/Firewall Check:``````````````[/u]
         Windows Firewall Enabled! 
        AVG Anti-Virus Free Edition 2013   
         Antivirus up to date!   
        `````````Anti-malware/Other Utilities Check:`````````[/u]
         Out of date HijackThis  installed!
         Malwarebytes Anti-Malware version 1.65.1.1000 
         HijackThis 2.0.2   
         Java(TM) 6 Update 20 
         Java(TM) 6 Update 35 
         Java 7 Update 9 
         Adobe Flash Player 11.5.502.135 
         Adobe Reader 10.1.4 Adobe Reader out of Date! 
         Mozilla Firefox (17.0.1)
         Mozilla Thunderbird (17.0.)
         Google Chrome 21.0.1180.83 
         Google Chrome 21.0.1180.89 
         Google Chrome 22.0.1229.79 
         Google Chrome 22.0.1229.92 
         Google Chrome 22.0.1229.94 
         Google Chrome 23.0.1271.64 
         Google Chrome 23.0.1271.91 
         Google Chrome 23.0.1271.95 
         Google Chrome 23.0.1271.97 
        ````````Process Check: objlist.exe by Laurent````````[/u] 
         AVG avgwdsvc.exe
        `````````````````System Health check`````````````````[/u]
         Total Fragmentation on Drive C: 5%
        ````````````````````End of Log``````````````````````[/u]

        SuperDave

        • Malware Removal Specialist


        • Genius
        • Thanked: 1020
        • Certifications: List
        • Experience: Expert
        • OS: Windows 10
        Re: Coupon Dropdown
        « Reply #4 on: December 22, 2012, 12:42:40 PM »
        Update your Adobe Reader. get.adobe.com/reader.

        Be sure to uncheck the Free McAfee Security Scan so it isn't installed.

        ************************************************
        Download Combofix from any of the links below, and save it to your DESKTOP

        Link 1
        Link 2
        Link 3

        To prevent your anti-virus application interfering with  ComboFix we need to disable it. See here for a tutorial regarding how to do so if you are unsure.
        • Close any open windows and double click ComboFix.exe to run it.

          You will see the following image:


        Click I Agree to start the program.

        ComboFix will then extract the necessary files and you will see this:



        As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to  have this pre-installed on your machine before doing any malware  removal. This will not occur in Windows Vista and 7

        It will allow you to boot up into a special recovery/repair  mode that will allow us to more easily help you should your computer  have a problem after an attempted removal of malware.

        If you did not have it installed, you will see the prompt below. Choose YES.



        Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

        **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

        Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:



        Click on Yes, to continue scanning for malware.

        When finished, it will produce a report for you. Please post the contents of the log (C:\ComboFix.txt).

        Leave your computer alone while ComboFix is running. ComboFix will restart your computer if malware is found; allow it to do so.

        Note: Please Do NOT mouseclick combofix's window while its running because it may cause it to stall.
        Windows 8 and Windows 10 dual boot with two SSD's