PC-HELP.CZ

Prosím o kontrolu logu sekaj se mi videa na Yotube a pomlý start windows.
Díky

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:18:29, on 5.4.2014
Platform: Windows 7 SP3 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Users\standa\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/?tn=82013038_100_hao_pg
O2 - BHO: WandoujiaBHO - {000DA090-57AA-424B-A8F0-621B7C08B8F4} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\standa\AppData\Roaming\Complitly\Complitly.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.2.0.38\AVG Secure Search_toolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: C8D16EC9-37DD-11ED-223E-4E39100228F6 Class - {C8D16EC9-37DD-11ED-223E-4E39100228F6} - (no file)
O2 - BHO: (no name) - {C9C42510-9B41-42c1-9DCD-7282A2D07C61}C - (no file)
O2 - BHO: IEExtension.Extension - {d40c654d-7c51-4eb3-95b2-1e23905c2a2d} - mscoree.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.2.0.38\AVG Secure Search_toolbar.dll
O4 - HKLM\..\Run: [NSU_agent] "C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup
O4 - HKLM\..\Run: [Printsrv] c:\Windows\System32\Printing_Admin_Scripts\en-US\pubpr.vbs
O4 - HKLM\..\Run: [mncsbbpaqSrv] C:\Windows\inf\mncsbbpaq.vbe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\standa\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\standa\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\standa\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{9C12250E-AAB3-4871-B8F1-268F4A73B13C}: NameServer = 212.96.161.6,212.96.160.7
O17 - HKLM\System\CCS\Services\Tcpip\..\{A549F560-B2DC-4477-8201-DC7D3934645A}: NameServer = 212.96.161.6,212.96.160.7
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.0.5\ViProtocol.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\Windows\ATKKBService.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NETGEARGenieDaemon - NETGEAR - C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PirritUpdater - Unknown owner - C:\Program Files (x86)\Pirrit\AutoUpdater.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protect Monitor (ProtectMonitor) - Unknown owner - C:\Program Files (x86)\PCData\StartHelp.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater18.0.5 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.5\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WinRST - Unknown owner - C:\Program Files (x86)\WinRST\WinRST.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13969 bytes

Zde je log z AdwCleaner

# AdwCleaner v3.023 - Report created 05/04/2014 at 16:59:50
# Updated 01/04/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 3 (64 bits)
# Username : standa - STANDA-PC
# Running from : C:\Users\standa\Downloads\adwcleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : PirritUpdater

***** [ Files / Folders ] *****

File Found : C:\END
File Found : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\ffxtlbr@Facemoods.com.xpi
File Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\firefox@surftastic.net.xpi
File Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\suggestor@suggestor.pirrit.com.xpi
File Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\Askcom.xml
File Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\buenosearch.xml
File Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\Conduit.xml
File Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\conduit-search.xml
File Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\funmoods.xml
File Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\my-web-search.xml
File Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\WebSearch.xml
File Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\user.js
File Found : C:\Windows\System32\roboot64.exe
File Found : C:\Windows\System32\Tasks\paretologic registration3
File Found : C:\Windows\System32\Tasks\paretologic update version3
File Found : C:\Windows\Tasks\paretologic registration3.job
File Found : C:\Windows\Tasks\paretologic update version3.job
Folder Found : C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp
Folder Found : C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda
Folder Found : C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{1a269fe4-5995-4e74-8206-20db87d38e57}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{1a269fe4-5995-4e74-8206-20db87d38e57}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{1a269fe4-5995-4e74-8206-20db87d38e57}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{1a269fe4-5995-4e74-8206-20db87d38e57}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{96f454ea-9d38-474f-b504-56193e00c1a5}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{96f454ea-9d38-474f-b504-56193e00c1a5}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{96f454ea-9d38-474f-b504-56193e00c1a5}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{96f454ea-9d38-474f-b504-56193e00c1a5}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\50fbe05e6566d@50fbe05e656a5.com
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\50fbe05e6566d@50fbe05e656a5.com
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\50fbe05e6566d@50fbe05e656a5.com
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\50fbe05e6566d@50fbe05e656a5.com
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\yiqaiue@v-ia.net
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\yiqaiue@v-ia.net
Folder Found : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Extensions\yiqaiue@v-ia.net
Folder Found C:\Program Files (x86)\AVG Secure Search
Folder Found C:\Program Files (x86)\baidu
Folder Found C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Found C:\Program Files (x86)\Common Files\ParetoLogic
Folder Found C:\Program Files (x86)\Complitly
Folder Found C:\Program Files (x86)\Conduit
Folder Found C:\Program Files (x86)\driver-soft
Folder Found C:\Program Files (x86)\GadgetBox
Folder Found C:\Program Files (x86)\GreenTree Applications
Folder Found C:\Program Files (x86)\Pirrit
Folder Found C:\Program Files (x86)\WinZip Registry Optimizer
Folder Found C:\Program Files\Windows Sidebar\Shared Gadgets\gadgetbox.gadget
Folder Found C:\ProgramData\AlawarWrapper
Folder Found C:\ProgramData\Ask
Folder Found C:\ProgramData\AVG Secure Search
Folder Found C:\ProgramData\Babylon
Folder Found C:\ProgramData\clsoft ltd
Folder Found C:\ProgramData\Conduit
Folder Found C:\ProgramData\continuetosave
Folder Found C:\ProgramData\continuetosave
Folder Found C:\ProgramData\iWin
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\continuetosave
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\continuetosave
Folder Found C:\ProgramData\ParetoLogic
Folder Found C:\ProgramData\SearchNewTab
Folder Found C:\ProgramData\WinterSoft
Folder Found C:\Users\standa\AppData\Local\AlawarWrapper
Folder Found C:\Users\standa\AppData\Local\AVG Secure Search
Folder Found C:\Users\standa\AppData\Local\Babylon
Folder Found C:\Users\standa\AppData\Local\Conduit
Folder Found C:\Users\standa\AppData\Local\iWin
Folder Found C:\Users\standa\AppData\Local\NativeMessaging
Folder Found C:\Users\standa\AppData\Local\Pirrit Suggestor
Folder Found C:\Users\standa\AppData\LocalLow\AVG Secure Search
Folder Found C:\Users\standa\AppData\LocalLow\AVG Security Toolbar
Folder Found C:\Users\standa\AppData\LocalLow\Conduit
Folder Found C:\Users\standa\AppData\LocalLow\Minibar
Folder Found C:\Users\standa\AppData\Roaming\Complitly
Folder Found C:\Users\standa\AppData\Roaming\DriverCure
Folder Found C:\Users\standa\AppData\Roaming\iWin
Folder Found C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\ConduitCommon
Folder Found C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\CT3072253
Folder Found C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\CT3289075
Folder Found C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\CT3314481
Folder Found C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\Smartbar
Folder Found C:\Users\standa\AppData\Roaming\ParetoLogic
Folder Found C:\Users\standa\AppData\Roaming\Pirrit
Folder Found C:\Users\standa\AppData\Roaming\Systweak
Folder Found C:\Windows\SysWOW64\AI_RecycleBin
Folder Found C:\Windows\SysWOW64\SearchProtect

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\Software\AVG Security Toolbar
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\AVG Secure Search
Key Found : HKCU\Software\bc417da8242d899d911d46b52a2aa2c2
Key Found : HKCU\Software\Complitly
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Google\Chrome\Extensions\cflheckfmhopnialghigdlggahiomebp
Key Found : HKCU\Software\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Found : HKCU\Software\installedbrowserextensions
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2974C985-8151-4DE5-B23C-B875F0A8522F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKCU\Software\OCS
Key Found : HKCU\Software\ParetoLogic
Key Found : HKCU\Software\smarttweak
Key Found : [x64] HKCU\Software\AVG Secure Search
Key Found : [x64] HKCU\Software\Complitly
Key Found : [x64] HKCU\Software\Conduit
Key Found : [x64] HKCU\Software\installedbrowserextensions
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Key Found : [x64] HKCU\Software\OCS
Key Found : [x64] HKCU\Software\ParetoLogic
Key Found : [x64] HKCU\Software\smarttweak
Key Found : HKLM\Software\AVG Secure Search
Key Found : HKLM\Software\AVG Security Toolbar
Key Found : HKLM\Software\Babylon
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Found : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Found : HKLM\SOFTWARE\Classes\AppID\Complitly.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Found : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Key Found : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\Dexpot\OpenCandy
Key Found : HKLM\Software\Driver-Soft
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\cflheckfmhopnialghigdlggahiomebp
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Found : HKLM\Software\installedbrowserextensions
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ContinueToSave_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ContinueToSave_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : HKLM\Software\ParetoLogic
Key Found : HKLM\Software\Pirrit
Key Found : HKLM\Software\SimplyGen
Key Found : HKLM\Software\SProtector
Key Found : HKLM\Software\Trymedia Systems
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Found : [x64] HKLM\SOFTWARE\installedbrowserextensions
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : [x64] HKLM\SOFTWARE\Pirrit
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

2 část

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521

Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://start.facemoods.com/?a=wbsttst2&s={searchTerms}&f=4

-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js ]

Line Found : user_pref("CT3072253..clientLogIsEnabled", false);
Line Found : user_pref("CT3072253..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Found : user_pref("CT3072253..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Found : user_pref("CT3072253./9b+7e+x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e,x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e-x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e/x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e06cg5el8:.from_oldbar.enc", "bm1qampybm51cg==");
Line Found : user_pref("CT3072253./9b+7e06cg5el;8i:k.from_oldbar.enc", "JH4tLyJqdHNwcHB4dHR7eCQvS0lHT0I1fV1cPQ==");
Line Found : user_pref("CT3072253./9b+7e0x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e1x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e2x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e3x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e4x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e5x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e6x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e7x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e8x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e9x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e:x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e;x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e<x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e=x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e>x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e?x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7e@x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7eax305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7ebe3g=;d9n9=d.from_oldbar.enc", "NywtMml1di46PHs6OUNKSUhBQ0smUUZJKWVQRlZJZXFzTTN9VlRROFBc");
Line Found : user_pref("CT3072253./9b+7ebx305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7ecx305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7edx305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b+7etx305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253./9b-0?3g>d.from_oldbar.enc", "az1qQGtzcm56b0ZHSCBHSk58JU96T08qISVVKColXFksWl5h");
Line Found : user_pref("CT3072253./9b-0?3g@6:5;.from_oldbar.enc", "AA==");
Line Found : user_pref("CT3072253./9b-0?3gfa7ef.from_oldbar.enc", "Ky4sPQ==");
Line Found : user_pref("CT3072253./9b-3=3eccja=f>.from_oldbar.enc", "JH4zPSxFL0E1J28pKiEsOT1EMHgyTEFCR34rLEhXS0hWXVw1U1JcY2JhWlxkP2pfYkJtbW1zYGpjS3hna2Q/bUM9Mz9ecHN9IUxZVWZ5KXx5KC8uV2RgcTYlXTU2dzwpY29udXQgNzRrUkE9[...]
Line Found : user_pref("CT3072253./9b/>01=9a6k6<im;krie@pdawm.from_oldbar.enc", "bmpocHN0dXZ3");
Line Found : user_pref("CT3072253./9b3=>@44i48?.from_oldbar.enc", "NywtMml1djNCNjNBSEcgPj1HTk1MRUdPKlVKTS1YWFheS1VONmNSVk8=");
Line Found : user_pref("CT3072253./9b5ba==9cjag.from_oldbar.enc", "bmc+PGxvQnR6RUN4enRIe01NTE9P");
Line Found : user_pref("CT3072253./9b6b11g4c56b>f;p;anr@p.from_oldbar.enc", "bm1pbnN0dW51d3Rxeg==");
Line Found : user_pref("CT3072253./9b9643g3/9e.from_oldbar.enc", "ag==");
Line Found : user_pref("CT3072253./9b;45>:bi9i7ie.from_oldbar.enc", "Ky4sPQ==");
Line Found : user_pref("CT3072253./9b<:222h64<.from_oldbar.enc", "OT81Lz4=");
Line Found : user_pref("CT3072253./9b<:222h64<l8daj.from_oldbar.enc", "bXBwb3Z0bHl2dyp5cnJ6fnV+ew==");
Line Found : user_pref("CT3072253./9b=+03eh8h8j?:.from_oldbar.enc", "REM=");
Line Found : user_pref("CT3072253./9b?+e2a52d8.from_oldbar.enc", "NywtMml1di46PHs6OUNKSUhBQ0smUUZJKWVQRlZkcHJ5UVVeXlI=");
Line Found : user_pref("CT3072253./9b?b0d:8aj62<h.from_oldbar.enc", "bQ==");
Line Found : user_pref("CT3072253./9ba@0<0bi6a7gn:6@l?.from_oldbar.enc", "bA==");
Line Found : user_pref("CT3072253.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Found : user_pref("CT3072253.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Found : user_pref("CT3072253.AppTrackingLastCheckTime", "Tue May 29 2012 10:31:20 GMT+0200");
Line Found : user_pref("CT3072253.BrowserCompStateIsOpen_129573915102477663", true);
Line Found : user_pref("CT3072253.BrowserCompStateIsOpen_129749445881800338", true);
Line Found : user_pref("CT3072253.BrowserCompStateIsOpen_129805375651312503", true);
Line Found : user_pref("CT3072253.BrowserCompStateIsOpen_130067979083742856", true);
Line Found : user_pref("CT3072253.BrowserCompStateIsOpen_1359634299000", true);
Line Found : user_pref("CT3072253.CT3072253.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3072253&octid=CT3072253&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_I[...]
Line Found : user_pref("CT3072253.CTID", "CT3072253");
Line Found : user_pref("CT3072253.ConfigurationLastCheckTime", "Fri Nov 08 2013 22:06:10 GMT+0100");
Line Found : user_pref("CT3072253.CurrentServerDate", "9-11-2013");
Line Found : user_pref("CT3072253.DSInstall", false);
Line Found : user_pref("CT3072253.DialogsAlignMode", "LTR");
Line Found : user_pref("CT3072253.DialogsGetterLastCheckTime", "Wed Nov 06 2013 12:05:32 GMT+0100");
Line Found : user_pref("CT3072253.DownloadReferralCookieData", "");
Line Found : user_pref("CT3072253.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.FirstServerDate", "23-5-2012");
Line Found : user_pref("CT3072253.FirstTime", true);
Line Found : user_pref("CT3072253.FirstTimeFF3", true);
Line Found : user_pref("CT3072253.FixPageNotFoundErrors", true);
Line Found : user_pref("CT3072253.GroupingServerCheckInterval", 1440);
Line Found : user_pref("CT3072253.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Found : user_pref("CT3072253.HPInstall", false);
Line Found : user_pref("CT3072253.HasUserGlobalKeys", true);
Line Found : user_pref("CT3072253.HomePageProtectorEnabled", false);
Line Found : user_pref("CT3072253.HomepageBeforeUnload", "hxxp://www.seznam.cz/");
Line Found : user_pref("CT3072253.Initialize", true);
Line Found : user_pref("CT3072253.InitializeCommonPrefs", true);
Line Found : user_pref("CT3072253.InstallationAndCookieDataSentCount", 3);
Line Found : user_pref("CT3072253.InstallationId", "fft5725.tmp.exe");
Line Found : user_pref("CT3072253.InstallationType", "XPE");
Line Found : user_pref("CT3072253.InstalledDate", "Wed May 23 2012 14:34:12 GMT+0200");
Line Found : user_pref("CT3072253.IsAlertDBUpdated", true);
Line Found : user_pref("CT3072253.IsGrouping", false);
Line Found : user_pref("CT3072253.IsInitSetupIni", true);
Line Found : user_pref("CT3072253.IsMulticommunity", false);
Line Found : user_pref("CT3072253.IsOpenThankYouPage", true);
Line Found : user_pref("CT3072253.IsOpenUninstallPage", false);
Line Found : user_pref("CT3072253.LanguagePackLastCheckTime", "Fri Nov 08 2013 22:06:11 GMT+0100");
Line Found : user_pref("CT3072253.LanguagePackReloadIntervalMM", 1440);
Line Found : user_pref("CT3072253.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Found : user_pref("CT3072253.LastLogin_3.12.0.8", "Wed May 23 2012 14:36:37 GMT+0200");
Line Found : user_pref("CT3072253.LastLogin_3.12.2.3", "Wed May 30 2012 22:50:42 GMT+0200");
Line Found : user_pref("CT3072253.LastLogin_3.13.0.6", "Tue Jul 17 2012 11:44:22 GMT+0200");
Line Found : user_pref("CT3072253.LastLogin_3.14.1.0", "Tue Aug 28 2012 12:07:36 GMT+0200");
Line Found : user_pref("CT3072253.LastLogin_3.15.1.0", "Wed Nov 07 2012 14:37:57 GMT+0100");
Line Found : user_pref("CT3072253.LastLogin_3.16.0.3", "Mon Feb 11 2013 11:50:25 GMT+0100");
Line Found : user_pref("CT3072253.LastLogin_3.18.0.7", "Tue Jul 16 2013 10:16:10 GMT+0200");
Line Found : user_pref("CT3072253.LastLogin_3.19.0.3", "Mon Sep 09 2013 17:09:30 GMT+0200");
Line Found : user_pref("CT3072253.LastLogin_3.20.0.4", "Sat Nov 09 2013 13:38:23 GMT+0100");
Line Found : user_pref("CT3072253.LatestVersion", "3.20.0.4");
Line Found : user_pref("CT3072253.Locale", "en");
Line Found : user_pref("CT3072253.MCDetectTooltipHeight", "83");
Line Found : user_pref("CT3072253.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Found : user_pref("CT3072253.MCDetectTooltipWidth", "295");
Line Found : user_pref("CT3072253.MyStuffEnabledAtInstallation", true);
Line Found : user_pref("CT3072253.OriginalFirstVersion", "3.12.0.8");
Line Found : user_pref("CT3072253.SHRINK_TOOLBAR", 1);
Line Found : user_pref("CT3072253.SearchAPILastCheckTime", "Fri Nov 08 2013 22:05:19 GMT+0100");
Line Found : user_pref("CT3072253.SearchCaption", "uTorrentControl2 Customized Web Search");
Line Found : user_pref("CT3072253.SearchEngineBeforeUnload", "AVG Secure Search");
Line Found : user_pref("CT3072253.SearchFromAddressBarIsInit", true);
Line Found : user_pref("CT3072253.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=");
Line Found : user_pref("CT3072253.SearchInNewTabEnabled", true);
Line Found : user_pref("CT3072253.SearchInNewTabIntervalMM", 1440);
Line Found : user_pref("CT3072253.SearchInNewTabLastCheckTime", "Mon Sep 09 2013 17:09:00 GMT+0200");
Line Found : user_pref("CT3072253.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
Line Found : user_pref("CT3072253.SearchInNewTabURLFromSearchAPI", "hxxp://search.conduit.com/?ctid=CT3072253&octid=CT3072253&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_ID");
Line Found : user_pref("CT3072253.SearchProtectorEnabled", false);
Line Found : user_pref("CT3072253.SearchProtectorToolbarDisabled", false);
Line Found : user_pref("CT3072253.SendProtectorDataViaLogin", true);
Line Found : user_pref("CT3072253.ServiceMapLastCheckTime", "Fri Nov 08 2013 22:05:26 GMT+0100");
Line Found : user_pref("CT3072253.SettingsLastCheckTime", "Sat Nov 09 2013 13:37:30 GMT+0100");
Line Found : user_pref("CT3072253.SettingsLastUpdate", "1383901082");
Line Found : user_pref("CT3072253.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=13");
Line Found : user_pref("CT3072253.ThirdPartyComponentsInterval", 504);
Line Found : user_pref("CT3072253.ThirdPartyComponentsLastCheck", "Wed Oct 17 2012 22:32:36 GMT+0200");
Line Found : user_pref("CT3072253.ThirdPartyComponentsLastUpdate", "1331805997");
Line Found : user_pref("CT3072253.ToolbarShrinkedFromSetup", false);
Line Found : user_pref("CT3072253.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Found : user_pref("CT3072253.UserID", "UN24214793701958772");
Line Found : user_pref("CT3072253.ValidationData_Toolbar", 2);
Line Found : user_pref("CT3072253._9b90e_.3c;7b=?ofb>>rhiqs.from_oldbar.enc", "OT81Lz4=");
Line Found : user_pref("CT3072253._9b_7e.:2z527.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253._9b_7e.x305.from_oldbar.enc", "JCM=");
Line Found : user_pref("CT3072253.addressBarTakeOverEnabledInHidden", "true");
Line Found : user_pref("CT3072253.alertChannelId", "1463702");
Line Found : user_pref("CT3072253.autoDisableScopes", -1);
Line Found : user_pref("CT3072253.backendstorage./9b+7e+x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e,x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e-x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e.:2z527", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e.x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e/x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e06cg5el8:", "6E6D6A6A6A726E6E7572");
Line Found : user_pref("CT3072253.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74737070707874747B78242F4B49474F42357D5D5C3D");
Line Found : user_pref("CT3072253.backendstorage./9b+7e0x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e1x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e2x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e3x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e4x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e5x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e6x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e7x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e8x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e9x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e:x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e;x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e<x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e=x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e>x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e?x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7e@x305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7eax305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D337D56545138505C");
Line Found : user_pref("CT3072253.backendstorage./9b+7ebx305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7ecx305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7edx305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b+7etx305", "2423");
Line Found : user_pref("CT3072253.backendstorage./9b-0?3g>d", "6B3D6A406B73726E7A6F46474820474A4E7C254F7A4F4F2A212555282A255C592C5A5E61");
Line Found : user_pref("CT3072253.backendstorage./9b-0?3g@6:5;", "");
Line Found : user_pref("CT3072253.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");
Line Found : user_pref("CT3072253.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D443078324C4142477E2B2C48574B48565D5C3553525C6362615A5C643F6A5F62426D6D6D73606A634B78676B643F6D433D333F5E70737D2[...]
Line Found : user_pref("CT3072253.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6E6A68707374757677");
Line Found : user_pref("CT3072253.backendstorage./9b3=>@44i48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");
Line Found : user_pref("CT3072253.backendstorage./9b5ba==9cjag", "6E673E3C6C6F42747A4543787A74487B4D4D4C4F4F");
Line Found : user_pref("CT3072253.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D696E7374756E757774717A");
Line Found : user_pref("CT3072253.backendstorage./9b90e@.3c;7b=?ofb>>rhiqs", "393F352F3E");
Line Found : user_pref("CT3072253.backendstorage./9b9643g3/9e", "6A");
Line Found : user_pref("CT3072253.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");
Line Found : user_pref("CT3072253.backendstorage./9b<:222h64<", "393F352F3E");
Line Found : user_pref("CT3072253.backendstorage./9b<:222h64<l8daj", "6D70706F76746C7976772A7972727A7E757E7B");
Line Found : user_pref("CT3072253.backendstorage./9b=+03eh8h8j?:", "4443");
Line Found : user_pref("CT3072253.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
Line Found : user_pref("CT3072253.backendstorage./9b?b0d:8aj62<h", "6D");
Line Found : user_pref("CT3072253.backendstorage./9ba@0<0bi6a7gn:6@l?", "6C");
Line Found : user_pref("CT3072253.backendstorage.bt_stats", "7B226C6173745F6C6F67223A313338343030303730372C2275756964223A35353933343435393530383837322C227365715F6964223A372C22737362223A313335343936303338307D");
Line Found : user_pref("CT3072253.backendstorage.cb_experience_000", "3131");
Line Found : user_pref("CT3072253.backendstorage.cb_firstuse0100", "31");
Line Found : user_pref("CT3072253.backendstorage.cb_user_id_000", "43423834363033363033323937375F46697265666F78");
Line Found : user_pref("CT3072253.backendstorage.cbcountry_000", "435A");
Line Found : user_pref("CT3072253.backendstorage.cbcountry_001", "435A");
Line Found : user_pref("CT3072253.backendstorage.cbfirsttime", "576564204D617920323320323031322031343A33363A333820474D542B30323030");
Line Found : user_pref("CT3072253.backendstorage.cbopenmamsettings", "30");
Line Found : user_pref("CT3072253.backendstorage.facebook_mode", "32");
Line Found : user_pref("CT3072253.backendstorage.facebook_user_locale", "656E");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_appsconfig", "7B2241707073436F6E66696775726174696F6E223A5B7B226964223A2245617379746F626F6F6B5F7461726765746564222C2275726C223A22687474703A2F2F636F6E6430312E6[...]
Line Found : user_pref("CT3072253.backendstorage.mam_gk_appsdefaultenabled", "6E756C6C");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_appstate_couponbuddy", "6F6E");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_appstate_easytobook", "6F6E");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_appstate_easytobook_targeted", "6F6E");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_appstate_pricegong", "6F6E");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_appstate_windowshopper", "6F6E");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_appstatereporttime", "31333834303030373337363635");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_calledsetupservice", "31");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_currentversion", "312E31312E342E32");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_eventscache", "7B2265336439343536632D663765332D343239612D383362662D323833303234646436646334223A7B22746F706963223A2273656E645573616765222C2264617461223A7B2263[...]
Line Found : user_pref("CT3072253.backendstorage.mam_gk_existingusersrecoverydone", "31");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_first_time", "31");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_gadgetopen", "30");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_globalkeysmigratedtolocalstorage", "31");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_lastlogintime", "31333834303030373339373036");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_localization", "7B22676164676574436F6E74656E74506F6C696379223A7B2254657874223A22436F6E74656E7420506F6C696379227D2C226761646765744465736372697074696F6E5072696[...]
Line Found : user_pref("CT3072253.backendstorage.mam_gk_mamenabled", "66616C7365");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_new_welcome_experience", "31");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_settings1.10.4.0", "7B22537461747573223A22737563636565646564222C2244617461223A7B2263757272656E7444617465223A223230313331313032222C22696E74657276616C223A32343[...]
Line Found : user_pref("CT3072253.backendstorage.mam_gk_settings1.11.4.2", "7B22537461747573223A22737563636565646564222C2244617461223A7B2263757272656E7444617465223A223230313331313039222C22696E74657276616C223A32343[...]
Line Found : user_pref("CT3072253.backendstorage.mam_gk_showwelcomegadget", "66616C7365");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_stamp", "38345F30");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_user_approval_interacted", "31");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_userid", "65323264623465612D373931662D346561302D393733332D356164636266383439653730");
Line Found : user_pref("CT3072253.backendstorage.mam_gk_welcomedialogmode", "31");
Line Found : user_pref("CT3072253.backendstorage.pg_enable", "74727565");
Line Found : user_pref("CT3072253.backendstorage.searchappstate", "33");
Line Found : user_pref("CT3072253.backendstorage.searchapptracking", "73656E74");
Line Found : user_pref("CT3072253.backendstorage.sf_just_installed", "46414C5345");
Line Found : user_pref("CT3072253.backendstorage.sf_status", "454E41424C4544");
Line Found : user_pref("CT3072253.backendstorage.sf_user_id", "6369645F3131393230313332313331333235363535333835");
Line Found : user_pref("CT3072253.backendstorage.toolbar_prefs", "7B22636F6E6E5F74797065223A226C6F63616C227D");
Line Found : user_pref("CT3072253.backendstorage.url_history0001", "68747470733A2F2F7777772E676F6F676C652E636F6D3A3A3A636C69636B68616E646C65723A3A3A313338343030313239393634342C2C2C68747470733A2F2F7777772E676F6F676[...]
Line Found : user_pref("CT3072253.bt_stats.from_oldbar.enc", "eyJsYXN0X2xvZyI6MTM4NDAwMDcwNywidXVpZCI6NTU5MzQ0NTk1MDg4NzIsInNlcV9pZCI6Nywic3NiIjoxMzU0OTYwMzgwfQ==");
Line Found : user_pref("CT3072253.cb_experience_000.from_oldbar.enc", "MTE=");
Line Found : user_pref("CT3072253.cb_firstuse0100.from_oldbar.enc", "MQ==");
Line Found : user_pref("CT3072253.cb_user_id_000.from_oldbar.enc", "Q0I4NDYwMzYwMzI5NzdfRmlyZWZveA==");
Line Found : user_pref("CT3072253.cbcountry_000.from_oldbar.enc", "Q1o=");
Line Found : user_pref("CT3072253.cbcountry_001.from_oldbar.enc", "Q1o=");
Line Found : user_pref("CT3072253.cbfirsttime.from_oldbar.enc", "V2VkIE1heSAyMyAyMDEyIDE0OjM2OjM4IEdNVCswMjAw");
Line Found : user_pref("CT3072253.cbopenmamsettings.from_oldbar.enc", "MA==");
Line Found : user_pref("CT3072253.counterAppsAdded", 1);
Line Found : user_pref("CT3072253.countryCode", "CZ");
Line Found : user_pref("CT3072253.enableAlerts", "never");
Line Found : user_pref("CT3072253.facebook_mode.from_oldbar.enc", "Mg==");
Line Found : user_pref("CT3072253.facebook_user_locale.from_oldbar.enc", "ZW4=");
Line Found : user_pref("CT3072253.firstTimeDialogOpened", true);
Line Found : user_pref("CT3072253.fixPageNotFoundErrorByUser", "TRUE");
Line Found : user_pref("CT3072253.fixPageNotFoundErrorInHidden", "true");
Line Found : user_pref("CT3072253.fullUserID", "UN24214793701958772.UP.202409140651");
Line Found : user_pref("CT3072253.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Found : user_pref("CT3072253.globalFirstTimeInfoLastCheckTime", "Sun Oct 21 2012 12:48:33 GMT+0200");
Line Found : user_pref("CT3072253.homepageProtectorEnableByLogin", true);
Line Found : user_pref("CT3072253.initDone", true);
Line Found : user_pref("CT3072253.installId", "fft5725.tmp.exe");
Line Found : user_pref("CT3072253.installType", "XPE");
Line Found : user_pref("CT3072253.isAppTrackingManagerOn", false);
Line Found : user_pref("CT3072253.isCheckedStartAsHidden", true);
Line Found : user_pref("CT3072253.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.isFirstTimeToolbarLoading", "false");
Line Found : user_pref("CT3072253.isPerformedSmartBarTransition", "true");
Line Found : user_pref("CT3072253.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Found : user_pref("CT3072253.keyword", true);
Line Found : user_pref("CT3072253.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3072253&octid=CT3072253&SearchSource=15&CUI=UN24214793701958772&SSPV=&Lay=1&UM=\"}");
Line Found : user_pref("CT3072253.lastVersion", "10.20.101.5");
Line Found : user_pref("CT3072253.mam_gk_appsconfig.from_oldbar.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJFYXN5dG9ib29rX3RhcmdldGVkIiwidXJsIjoiaHR0cDovL2NvbmQwMS5ldGJ4bWwuY29tL2NvbmR1aXRfYnVuZGxlL3dlYi9jaGVhcC[...]
Line Found : user_pref("CT3072253.mam_gk_appsdefaultenabled.from_oldbar.enc", "bnVsbA==");
Line Found : user_pref("CT3072253.mam_gk_appstate_couponbuddy.from_oldbar.enc", "b24=");
Line Found : user_pref("CT3072253.mam_gk_appstate_easytobook.from_oldbar.enc", "b24=");
Line Found : user_pref("CT3072253.mam_gk_appstate_easytobook_targeted.from_oldbar.enc", "b24=");
Line Found : user_pref("CT3072253.mam_gk_appstate_pricegong.from_oldbar.enc", "b24=");
Line Found : user_pref("CT3072253.mam_gk_appstate_windowshopper.from_oldbar.enc", "b24=");
Line Found : user_pref("CT3072253.mam_gk_appstatereporttime.from_oldbar.enc", "MTM4NDAwMDczNzY2NQ==");
Line Found : user_pref("CT3072253.mam_gk_calledsetupservice.from_oldbar.enc", "MQ==");
Line Found : user_pref("CT3072253.mam_gk_currentversion.from_oldbar.enc", "MS4xMS40LjI=");
Line Found : user_pref("CT3072253.mam_gk_eventscache.from_oldbar.enc", "eyJlM2Q5NDU2Yy1mN2UzLTQyOWEtODNiZi0yODMwMjRkZDZkYzQiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGVnb3J5IjoiV2VsY29tZSIsImFjdGlvbiI6IlZpZXciL[...]
Line Found : user_pref("CT3072253.mam_gk_existingusersrecoverydone.from_oldbar.enc", "MQ==");
Line Found : user_pref("CT3072253.mam_gk_first_time.from_oldbar.enc", "MQ==");
Line Found : user_pref("CT3072253.mam_gk_gadgetopen.from_oldbar.enc", "MA==");
Line Found : user_pref("CT3072253.mam_gk_globalkeysmigratedtolocalstorage.from_oldbar.enc", "MQ==");
Line Found : user_pref("CT3072253.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Line Found : user_pref("CT3072253.mam_gk_lastlogintime.from_oldbar.enc", "MTM4NDAwMDczOTcwNg==");
Line Found : user_pref("CT3072253.mam_gk_localization.from_oldbar.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOnsiVGV4dCI6IlZhbHVlIEFwcHMgZW5yaWNoZXMg[...]
Line Found : user_pref("CT3072253.mam_gk_mamenabled.from_oldbar.enc", "ZmFsc2U=");
Line Found : user_pref("CT3072253.mam_gk_new_welcome_experience.from_oldbar.enc", "MQ==");
Line Found : user_pref("CT3072253.mam_gk_showwelcomegadget.from_oldbar.enc", "ZmFsc2U=");
Line Found : user_pref("CT3072253.mam_gk_stamp.from_oldbar.enc", "ODRfMA==");
Line Found : user_pref("CT3072253.mam_gk_user_approval_interacted.from_oldbar.enc", "MQ==");
Line Found : user_pref("CT3072253.mam_gk_userid.from_oldbar.enc", "ZTIyZGI0ZWEtNzkxZi00ZWEwLTk3MzMtNWFkY2JmODQ5ZTcw");
Line Found : user_pref("CT3072253.mam_gk_welcomedialogmode.from_oldbar.enc", "MQ==");
Line Found : user_pref("CT3072253.myStuffEnabled", true);
Line Found : user_pref("CT3072253.myStuffPublihserMinWidth", 400);
Line Found : user_pref("CT3072253.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Found : user_pref("CT3072253.myStuffServiceIntervalMM", 1440);
Line Found : user_pref("CT3072253.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Found : user_pref("CT3072253.navigateToUrlOnSearch", false);
Line Found : user_pref("CT3072253.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fwww.facebook.com%2F%3Fstype%3Dlo%26jlou%3DAfdgumQX4fD4aYdASVZGov6LfMegAknqvIfRkW4rM7L2opcwj6OcEdul397sLlmCPzVdEBScs[...]
Line Found : user_pref("CT3072253.oldAppsList", "129295695672325902,129571859753931591,111,129593762370823811,129805375651312503,129749445881800338,129573915102477663,1000080,1000515,1000,1001,1002,1003,1004,1005,[...]
Line Found : user_pref("CT3072253.originalHomepage", "hxxp://start.facemoods.com/?a=wbsttst2");
Line Found : user_pref("CT3072253.originalSearchAddressUrl", "");
Line Found : user_pref("CT3072253.originalSearchEngine", "Facemoods Search");
Line Found : user_pref("CT3072253.pg_enable.from_oldbar.enc", "dHJ1ZQ==");
Line Found : user_pref("CT3072253.revertSettingsEnabled", true);
Line Found : user_pref("CT3072253.searchFromAddressBarEnabledByUser", "true");
Line Found : user_pref("CT3072253.searchInNewTabEnabledByUser", "true");
Line Found : user_pref("CT3072253.searchInNewTabEnabledInHidden", "true");
Line Found : user_pref("CT3072253.searchProtectorDialogDelayInSec", 10);
Line Found : user_pref("CT3072253.searchProtectorEnableByLogin", true);
Line Found : user_pref("CT3072253.searchSuggestEnabledByUser", "true");
Line Found : user_pref("CT3072253.searchappstate.from_oldbar.enc", "Mw==");
Line Found : user_pref("CT3072253.searchapptracking.from_oldbar.enc", "c2VudA==");
Line Found : user_pref("CT3072253.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3072253\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControl2.OurToolbar.com//xpi\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl2 \"}");
Line Found : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Found : user_pref("CT3072253.serviceLayer_services_Configuration_lastUpdate", "1385990131632");
Line Found : user_pref("CT3072253.serviceLayer_services_login_10.20.101.5_lastUpdate", "1385990127305");
Line Found : user_pref("CT3072253.serviceLayer_services_searchAPI_lastUpdate", "1385990126851");
Line Found : user_pref("CT3072253.serviceLayer_services_serviceMap_lastUpdate", "1385990126837");
Line Found : user_pref("CT3072253.serviceLayer_services_toolbarSettings_lastUpdate", "1385997327158");
Line Found : user_pref("CT3072253.serviceLayer_services_translation_lastUpdate", "1385990129413");
Line Found : user_pref("CT3072253.settingsINI", true);
Line Found : user_pref("CT3072253.sf_just_installed.from_oldbar.enc", "RkFMU0U=");
Line Found : user_pref("CT3072253.sf_status.from_oldbar.enc", "RU5BQkxFRA==");
Line Found : user_pref("CT3072253.sf_user_id.from_oldbar.enc", "Y2lkXzExOTIwMTMyMTMxMzI1NjU1Mzg1");
Line Found : user_pref("CT3072253.showToolbarPermission", "false");
Line Found : user_pref("CT3072253.smartbar.CTID", "CT3072253");
Line Found : user_pref("CT3072253.smartbar.Uninstall", "0");
Line Found : user_pref("CT3072253.smartbar.toolbarName", "uTorrentControl2 ");
Line Found : user_pref("CT3072253.testingCtid", "");
Line Found : user_pref("CT3072253.toolbarAppMetaDataLastCheckTime", "Fri Nov 08 2013 22:06:17 GMT+0100");
Line Found : user_pref("CT3072253.toolbarBornServerTime", "23-5-2012");
Line Found : user_pref("CT3072253.toolbarContextMenuLastCheckTime", "Wed Oct 10 2012 22:35:30 GMT+0200");
Line Found : user_pref("CT3072253.toolbarCurrentServerTime", "2-12-2013");
Line Found : user_pref("CT3072253.toolbarDisabled", "true");
Line Found : user_pref("CT3072253.toolbarLoginClientTime", "Sat Nov 09 2013 17:14:07 GMT+0100");
Line Found : user_pref("CT3072253.toolbar_prefs.from_oldbar.enc", "eyJjb25uX3R5cGUiOiJsb2NhbCJ9");
Line Found : user_pref("CT3072253.upgradeFromOBVersion", true);
Line Found : user_pref("CT3072253.url_history0001.from_oldbar.enc", "aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo6OmNsaWNraGFuZGxlcjo6OjEzODQwMDEyOTk2NDQsLCxodHRwczovL3d3dy5nb29nbGUuY29tOjo6Y2xpY2toYW5kbGVyOjo6MTM4NDAwMTMwMDE1[...]
Line Found : user_pref("CT3072253.usagesFlag", 2);
Line Found : user_pref("CT3072253_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1385996587655,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Found : user_pref("CT3289075.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM4NTk5NDcyNSwidXVpZCI6OTE2Mzk4Nzk4NDA4MTExLCJzZXFfaWQiOjEsInNzYiI6MTM4NTk5NDcyNX0=");
Line Found : user_pref("CT3289075.BT_Usage.enc", "eyJ1dWlkIjo5MTYzOTg3OTg0MDgxMTEsInNlcV9pZCI6MX0=");
Line Found : user_pref("CT3289075.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3289075.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3289075.FF19Solved", "true");
Line Found : user_pref("CT3289075.Facebook_Mode.enc", "Mg==");
Line Found : user_pref("CT3289075.Facebook_User_Locale.enc", "ZW4=");
Line Found : user_pref("CT3289075.FirstTime", "true");
Line Found : user_pref("CT3289075.FirstTimeFF3", "true");
Line Found : user_pref("CT3289075.PG_ENABLE", "dHJ1ZQ==");
Line Found : user_pref("CT3289075.SF_JUST_INSTALLED", "%CC%C7%D2%D9%CB");
Line Found : user_pref("CT3289075.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Line Found : user_pref("CT3289075.SF_STATUS", "%CB%D4%C7%C8%D2%CB%CA");
Line Found : user_pref("CT3289075.SF_STATUS.enc", "RU5BQkxFRA==");
Line Found : user_pref("CT3289075.SF_USER_ID", "%E9%EF%EA%E5%B8%B7%B8%B8%B6%B7%B9%B7%BB%B9%B8%B8%BB%BF%B7%BD%BA%B7%B8%B7");
Line Found : user_pref("CT3289075.SF_USER_ID.enc", "Y2lkXzIxMjIwMTMxNTMyMjU5MTc0MTIx");
Line Found : user_pref("CT3289075.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289075&SearchSource=2&CUI=UN25450354131411286&UM=1&q=");
Line Found : user_pref("CT3289075.UserID", "UN25450354131411286");
Line Found : user_pref("CT3289075._key_cl_active", "%BD%E8%BD%E8%B8%BA%BA%BF%B3%BF%BE%EC%BF%B3%BA%BA%EB%B9%B3%BE%BF%B6%B8%B3%EA%BD%BD%BC%B8%BC%B6%BF%BE%E7%BF%BD");
Line Found : user_pref("CT3289075._key_cl_active.enc", "N2I3YjI0NDktOThmOS00NGUzLTg5MDItZDc3NjI2MDk4YTk3");
Line Found : user_pref("CT3289075.addressBarTakeOverEnabledInHidden", "true");
Line Found : user_pref("CT3289075.browser.search.defaultthis.engineName", "true");
Line Found : user_pref("CT3289075.cbfirsttime", "%D3%F5%F4%A6%CA%EB%E9%A6%B6%B8%A6%B8%B6%B7%B9%A6%B7%BB%C0%B9%B8%C0%B7%BB%A6%CD%D3%DA%B1%B6%B7%B6%B6");
Line Found : user_pref("CT3289075.cbfirsttime.enc", "TW9uIERlYyAwMiAyMDEzIDE1OjMyOjE1IEdNVCswMTAw");
Line Found : user_pref("CT3289075.countryCode", "CZ");
Line Found : user_pref("CT3289075.defaultSearch", "true");
Line Found : user_pref("CT3289075.embeddedsData", "[{\"appId\":\"130064539389933152\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Line Found : user_pref("CT3289075.enableSearchFromAddressBar", "true");
Line Found : user_pref("CT3289075.firstTimeDialogOpened", "true");
Line Found : user_pref("CT3289075.fixPageNotFoundErrorByUser", "TRUE");
Line Found : user_pref("CT3289075.fixPageNotFoundErrorInHidden", "true");
Line Found : user_pref("CT3289075.fullUserID", "UN25450354131411286.IN.20131202152520");
Line Found : user_pref("CT3289075.hxxp___facebook_conduitapps_com.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPTAsaHNjcm9sbD0wLHZzY3JvbGw9MCx0aXRsZWJhcj0xLGNsb3NlYnV0dG9uPTEsc2F2ZXJlc2l6ZWRzaXplPTAsb3BlbnBvc2l0aW9uPWFsaWd[...]
Line Found : user_pref("CT3289075.hxxp___toolbar_utorrent_com.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPTAsc2F2ZXJlc2l6ZWRzaXplPTAsdGl0bGViYXI9MCxjbG9zZW9uZXh0ZXJuYWxjbGljaz0xLHNhdmVsb2NhdGlvbj0wLG9wZW5wb3NpdGlvbj1vZmZ[...]
Line Found : user_pref("CT3289075.installDate", "02/12/2013 15:25:22");
Line Found : user_pref("CT3289075.installSessionId", "-1");
Line Found : user_pref("CT3289075.installSp", "FALSE");
Line Found : user_pref("CT3289075.installType", "xpe");
Line Found : user_pref("CT3289075.installUsage", "2013-12-02T17:32:00.5338567+03:00");
Line Found : user_pref("CT3289075.installUsageEarly", "2013-12-02T17:31:59.0385685+03:00");
Line Found : user_pref("CT3289075.installerVersion", "1.8.1.4");
Line Found : user_pref("CT3289075.isCheckedStartAsHidden", true);
Line Found : user_pref("CT3289075.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3289075.isFirstTimeToolbarLoading", "false");
Line Found : user_pref("CT3289075.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Found : user_pref("CT3289075.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Found : user_pref("CT3289075.keyword", "true");
Line Found : user_pref("CT3289075.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3289075&octid=CT3289075&SearchSource=15&CUI=UN25450354131411286&SSPV=&Lay=1&UM=1\"}");
Line Found : user_pref("CT3289075.lastVersion", "10.22.3.18");
Line Found : user_pref("CT3289075.mam_gk_appStateReportTime", "%B7%B9%BE%BB%BF%BF%BA%BD%B8%BC%BB%B6%B7");
Line Found : user_pref("CT3289075.mam_gk_appStateReportTime.enc", "MTM4NTk5NDcyNjUwMQ==");
Line Found : user_pref("CT3289075.mam_gk_appState_Clarity_Active", "%F5%F4");
Line Found : user_pref("CT3289075.mam_gk_appState_Clarity_Active.enc", "b24=");
Line Found : user_pref("CT3289075.mam_gk_appState_CouponBuddy", "%F5%F4");
Line Found : user_pref("CT3289075.mam_gk_appState_CouponBuddy.enc", "b24=");
Line Found : user_pref("CT3289075.mam_gk_appState_Easytobook", "%F5%F4");
Line Found : user_pref("CT3289075.mam_gk_appState_Easytobook.enc", "b24=");
Line Found : user_pref("CT3289075.mam_gk_appState_Easytobook_targeted", "%F5%F4");
Line Found : user_pref("CT3289075.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Line Found : user_pref("CT3289075.mam_gk_appState_PriceGong", "%F5%F4");
Line Found : user_pref("CT3289075.mam_gk_appState_PriceGong.enc", "b24=");
Line Found : user_pref("CT3289075.mam_gk_appState_WindowShopper", "%F5%F4");
Line Found : user_pref("CT3289075.mam_gk_appState_WindowShopper.enc", "b24=");
Line Found : user_pref("CT3289075.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJDbGFyaXR5X0FjdGl2ZSIsInVybCI6Imh0dHA6Ly9zdG9yYWdlLmNvbmR1aXQuY29tL21hbS8zcmRwYXJ0eWFwcHMvY2xhcml0eVJheS9jcl9hY3Rpdm[...]
Line Found : user_pref("CT3289075.mam_gk_appsDefaultEnabled", "%FA%F8%FB%EB");
Line Found : user_pref("CT3289075.mam_gk_appsDefaultEnabled.enc", "dHJ1ZQ==");
Line Found : user_pref("CT3289075.mam_gk_calledSetupService", "%B7");
Line Found : user_pref("CT3289075.mam_gk_calledSetupService.enc", "MQ==");
Line Found : user_pref("CT3289075.mam_gk_currentVersion", "%B7%B4%B7%B7%B4%BB%B4%B7");
Line Found : user_pref("CT3289075.mam_gk_currentVersion.enc", "MS4xMS41LjE=");
Line Found : user_pref("CT3289075.mam_gk_eventsCache", "%u0101%A8%BA%EB%EA%BB%E8%EB%BB%BF%B3%B8%E9%B6%BB%B3%BA%B8%B6%E8%B3%BF%B8%E7%BE%B3%B6%BB%E9%B6%EA%BE%E7%B9%EB%EB%B9%EC%A8%C0%u0101%A8%FA%F5%F6%EF%E9%A8%C0%A8%[...]
Line Found : user_pref("CT3289075.mam_gk_eventsCache.enc", "eyI0ZWQ1YmU1OS0yYzA1LTQyMGItOTJhOC0wNWMwZDhhM2VlM2YiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGVnb3J5IjoiV2VsY29tZSIsImFjdGlvbiI6IlZpZXciLCJsYWJlbCI6I[...]
Line Found : user_pref("CT3289075.mam_gk_existingUsersRecoveryDone", "%B7");
Line Found : user_pref("CT3289075.mam_gk_existingUsersRecoveryDone.enc", "MQ==");
Line Found : user_pref("CT3289075.mam_gk_first_time", "%B7");
Line Found : user_pref("CT3289075.mam_gk_first_time.enc", "MQ==");
Line Found : user_pref("CT3289075.mam_gk_gadgetOpen", "%B6");
Line Found : user_pref("CT3289075.mam_gk_gadgetOpen.enc", "MA==");
Line Found : user_pref("CT3289075.mam_gk_globalKeysMigratedToLocalStorage", "%B7");
Line Found : user_pref("CT3289075.mam_gk_globalKeysMigratedToLocalStorage.enc", "MQ==");
Line Found : user_pref("CT3289075.mam_gk_lastLoginTime", "%B7%B9%BE%BB%BF%BF%BA%BD%B8%BC%BF%BE%BC");
Line Found : user_pref("CT3289075.mam_gk_lastLoginTime.enc", "MTM4NTk5NDcyNjk4Ng==");
Line Found : user_pref("CT3289075.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcbm9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRleHQiOiJGcmVlXHJcblNoaXBtZW50In0sImRtYnVsbGV0MSI6[...]
Line Found : user_pref("CT3289075.mam_gk_mamEnabled", "%EC%E7%F2%F9%EB");
Line Found : user_pref("CT3289075.mam_gk_mamEnabled.enc", "ZmFsc2U=");
Line Found : user_pref("CT3289075.mam_gk_new_welcome_experience", "%B7");
Line Found : user_pref("CT3289075.mam_gk_new_welcome_experience.enc", "MQ==");
Line Found : user_pref("CT3289075.mam_gk_pgUnloadedOnce", "%FA%F8%FB%EB");
Line Found : user_pref("CT3289075.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Line Found : user_pref("CT3289075.mam_gk_settings1.11.5.1", "%u0101%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0%u0101%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%B[...]
Line Found : user_pref("CT3289075.mam_gk_settings1.11.5.1.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxMzEyMDIiLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6Ijg0XzAiLCJpc1Rlc3QiOnRydWUsIlVzZXJDb3VudHJ5[...]
Line Found : user_pref("CT3289075.mam_gk_showWelcomeGadget", "%FA%F8%FB%EB");
Line Found : user_pref("CT3289075.mam_gk_showWelcomeGadget.enc", "dHJ1ZQ==");
Line Found : user_pref("CT3289075.mam_gk_stamp", "%BE%BA%E5%B6");
Line Found : user_pref("CT3289075.mam_gk_stamp.enc", "ODRfMA==");
Line Found : user_pref("CT3289075.mam_gk_userId", "%BB%BE%B6%BA%BB%EC%E7%B8%B3%BB%BA%BF%E8%B3%BA%EA%E8%BC%B3%BF%E8%BC%BB%B3%B9%BC%B6%EB%BA%B6%BF%EB%B9%E9%BD%E8");
Line Found : user_pref("CT3289075.mam_gk_userId.enc", "NTgwNDVmYTItNTQ5Yi00ZGI2LTliNjUtMzYwZTQwOWUzYzdi");
Line Found : user_pref("CT3289075.mam_gk_user_approval_interacted", "%B7");
Line Found : user_pref("CT3289075.mam_gk_user_approval_interacted.enc", "MQ==");
Line Found : user_pref("CT3289075.mam_gk_welcomeDialogMode", "%B7");
Line Found : user_pref("CT3289075.mam_gk_welcomeDialogMode.enc", "MQ==");
Line Found : user_pref("CT3289075.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fwww.facebook.com%2F%3Fstype%3Dlo%26jlou%3DAfdgumQX4fD4aYdASVZGov6LfMegAknqvIfRkW4rM7L2opcwj6OcEdul397sLlmCPzVdEBScs[...]
Line Found : user_pref("CT3289075.openThankYouPage", "true");
Line Found : user_pref("CT3289075.openUninstallPage", "false");
Line Found : user_pref("CT3289075.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3314481&SearchSource=2&CUI=UN35668428492382754&UM=1&q=");
Line Found : user_pref("CT3289075.originalSearchEngine", "Google");
Line Found : user_pref("CT3289075.originalSearchEngineName", "Google");
Line Found : user_pref("CT3289075.price-gong.isManagedApp", "true");
Line Found : user_pref("CT3289075.revertSettingsEnabled", "FALSE");
Line Found : user_pref("CT3289075.search.searchAppId", "130064539389933152");
Line Found : user_pref("CT3289075.search.searchCount", "0");
Line Found : user_pref("CT3289075.searchFromAddressBarEnabledByUser", "true");
Line Found : user_pref("CT3289075.searchInNewTabEnabledByUser", "false");
Line Found : user_pref("CT3289075.searchInNewTabEnabledInHidden", "true");
Line Found : user_pref("CT3289075.searchRevert", "FALSE");
Line Found : user_pref("CT3289075.searchSuggestEnabledByUser", "true");
Line Found : user_pref("CT3289075.searchUninstallUserMode", "1");
Line Found : user_pref("CT3289075.searchUserMode", "1"); C:\AdwCleaner\AdwCleaner[R0].txt - [87801 octets] ##########

3 část


Line Found : user_pref("CT3289075.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3289075.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Found : user_pref("CT3289075.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Found : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3289075\"}");
Line Found : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv6.OurToolbar.com//xpi\"}");
Line Found : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v6 \"}");
Line Found : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3289075.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Found : user_pref("CT3289075.serviceLayer_services_Configuration_lastUpdate", "1385994722815");
Line Found : user_pref("CT3289075.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1385994722924");
Line Found : user_pref("CT3289075.serviceLayer_services_appsMetadata_lastUpdate", "1385994722807");
Line Found : user_pref("CT3289075.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1385994721172");
Line Found : user_pref("CT3289075.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1385994719974");
Line Found : user_pref("CT3289075.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1385994721469");
Line Found : user_pref("CT3289075.serviceLayer_services_login_10.22.3.18_lastUpdate", "1385994722819");
Line Found : user_pref("CT3289075.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1385994721237");
Line Found : user_pref("CT3289075.serviceLayer_services_searchAPI_lastUpdate", "1385994719718");
Line Found : user_pref("CT3289075.serviceLayer_services_serviceMap_lastUpdate", "1385994717554");
Line Found : user_pref("CT3289075.serviceLayer_services_toolbarContextMenu_lastUpdate", "1385994721136");
Line Found : user_pref("CT3289075.serviceLayer_services_toolbarSettings_lastUpdate", "1385994719874");
Line Found : user_pref("CT3289075.serviceLayer_services_translation_lastUpdate", "1385994722899");
Line Found : user_pref("CT3289075.settingsINI", true);
Line Found : user_pref("CT3289075.shouldFirstTimeDialog", "false");
Line Found : user_pref("CT3289075.showToolbarPermission", "false");
Line Found : user_pref("CT3289075.smartbar.CTID", "CT3289075");
Line Found : user_pref("CT3289075.smartbar.Uninstall", "0");
Line Found : user_pref("CT3289075.smartbar.toolbarName", "uTorrentControl_v6 ");
Line Found : user_pref("CT3289075.startPage", "false");
Line Found : user_pref("CT3289075.toolbarBornServerTime", "2-12-2013");
Line Found : user_pref("CT3289075.toolbarCurrentServerTime", "2-12-2013");
Line Found : user_pref("CT3289075.toolbarDisabled", "true");
Line Found : user_pref("CT3289075.toolbarInstallDate", "02-12-2013 15:25:20");
Line Found : user_pref("CT3289075.toolbarLoginClientTime", "Mon Dec 02 2013 15:32:02 GMT+0100");
Line Found : user_pref("CT3289075.url_history0001", "%EE%FA%FA%F6%F9%C0%B5%B5%FD%FD%FD%B4%EC%E7%E9%EB%E8%F5%F5%F1%B4%E9%F5%F3%B5%C5%F8%EB%EC%C3%FA%F4%E5%FA%F4%F3%F4%C0%C0%C0%E9%F2%EF%E9%F1%EE%E7%F4%EA%F2%EB%F8%C0%[...]
Line Found : user_pref("CT3289075.url_history0001.enc", "aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tLz9yZWY9dG5fdG5tbjo6OmNsaWNraGFuZGxlcjo6OjEzODU5OTk2ODM5MjQsLCxodHRwczovL3d3dy5mYWNlYm9vay5jb20vP3JlZj10bl90bm1uOjo6Y2xpY2to[...]
Line Found : user_pref("CT3289075.versionFromInstaller", "10.22.3.18");
Line Found : user_pref("CT3289075.xpeMode", "0");
Line Found : user_pref("CT3289075_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1385996587675,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Found : user_pref("CT3314481.FF19Solved", "true");
Line Found : user_pref("CT3314481.UserID", "UN35668428492382754");
Line Found : user_pref("CT3314481.browser.search.defaultthis.engineName", "true");
Line Found : user_pref("CT3314481.fullUserID", "UN35668428492382754.IN.20131201194043");
Line Found : user_pref("CT3314481.installDate", "01/12/2013 19:40:45");
Line Found : user_pref("CT3314481.installSessionId", "{69F448B3-727C-47C1-866D-B8E8BEF5151E}");
Line Found : user_pref("CT3314481.installSp", "false");
Line Found : user_pref("CT3314481.installerVersion", "1.8.1.4");
Line Found : user_pref("CT3314481.keyword", "true");
Line Found : user_pref("CT3314481.originalHomepage", "hxxp://www.google.com");
Line Found : user_pref("CT3314481.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&CUI=UN24214793701958772&UM=&q=");
Line Found : user_pref("CT3314481.originalSearchEngine", "Google");
Line Found : user_pref("CT3314481.originalSearchEngineName", "Google");
Line Found : user_pref("CT3314481.searchRevert", "false");
Line Found : user_pref("CT3314481.searchUninstallUserMode", "1");
Line Found : user_pref("CT3314481.searchUserMode", "1");
Line Found : user_pref("CT3314481.smartbar.homepage", "true");
Line Found : user_pref("CT3314481.toolbarInstallDate", "01-12-2013 19:40:44");
Line Found : user_pref("CT3314481.versionFromInstaller", "10.22.5.10");
Line Found : user_pref("CT3314481.xpeMode", "0");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT2438727", "\"5df12e7f8b67f7523769596a48640eb23\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT3072253", "\"dee956085d02ea0c080e2fd6614cf66e3\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT2438727", "\"0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT3072253", "\"1362324308\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "G9mW7heT/8xIX1frcduu0A==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "2E1/v7EfCEDbv3VaBQMELg==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "UgzXjW7BIkfdx+x39Ruv3w==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "4BgM4MhF/sOgPsDNmIs3Yw==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-ser ... rt/dlg.pkg", "\"8076e3ce381dcd1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.10.0.1", "\"4ead38b3e6bcd1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.12.0.7", "\"4ead38b3e6bcd1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.12.0.8", "\"4ead38b3e6bcd1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.13.0.6", "\"0d648794549cd1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.14.1.0", "\"0e0a4327275cd1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.15.1.0", "\"0343677cfb1cd1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.16.0.3", "\"0343677cfb1cd1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.18.0.7", "\"0343677cfb1cd1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.19.0.3", "\"23c5489aa686ce1:16c0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.20.0.4", "\"dfe74040abc2ce1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... er=3.8.1.0", "\"80ee9485875dcc1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... er=3.9.0.3", "\"801a319dd78ccc1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT2438727", "\"f1c77625c0e9bd1c80a2fd6901845fa9\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT3072253", "\"07766f5592f76b152ec9246ce6a0b574\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT243 ... /Blank.png", "\"27f9ceb6f365cb1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... =EB_LOCALE", "\"e7ab1c19bc01672d844f8f7180c34436\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... ?locale=en", "\"1f5851f12d58a6c6d5b555ddd5415b6a\"");
Line Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\standa\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\s4cae0wr.default\\conduitCommon\\modules\\3.15.1.0");
Line Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.15.1.0");
Line Found : user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://pianoapp.net/piano/piano.html", "301x230");
Line Found : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pianoapp.net/piano/piano.html", "1052x573");
Line Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
Line Found : user_pref("CommunityToolbar.ToolbarsList", "CT3072253");
Line Found : user_pref("CommunityToolbar.ToolbarsList2", "CT3072253");
Line Found : user_pref("CommunityToolbar.ToolbarsList4", "CT3072253");
Line Found : user_pref("CommunityToolbar.globalUserId", "cbdc5db0-41a2-46f6-a7c2-e5d841b132bb");
Line Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Line Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Line Found : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
Line Found : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Thu Oct 18 2012 18:54:23 GMT+0200");
Line Found : user_pref("CommunityToolbar.notifications.alertEnabled", false);
Line Found : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Found : user_pref("CommunityToolbar.notifications.locale", "en");
Line Found : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Line Found : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Mon Oct 22 2012 22:45:48 GMT+0200");
Line Found : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Line Found : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Line Found : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Found : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Line Found : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Line Found : user_pref("CommunityToolbar.notifications.userId", "cd97391b-1d06-4141-afd7-cf1ccef201f2");
Line Found : user_pref("CommunityToolbar.originalHomepage", "hxxp://start.facemoods.com/?a=wbsttst2");
Line Found : user_pref("CommunityToolbar.originalSearchEngine", "Facemoods Search");
Line Found : user_pref("Smartbar.ConduitSearchEngineList", "");
Line Found : user_pref("Smartbar.ConduitSearchUrlList", "");
Line Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3314481&SearchSource=2&CUI=UN35668428492382754&UM=1&q=");
Line Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3289075");
Line Found : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Line Found : user_pref("browser.search.defaultengine", "Ask.com");
Line Found : user_pref("browser.search.defaultthis.engineName", "uTorrentControl_v6 Customized Web Search");
Line Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289075&CUI=UN25450354131411286&UM=1&SearchSource=3&q={searchTerms}");
Line Found : user_pref("extensions.5096a445d6e05.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf[...]
Line Found : user_pref("extensions.50ace5c3067ae.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf[...]
Line Found : user_pref("extensions.50fbe05e65717.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf[...]
Line Found : user_pref("extensions.BabylonToolbar_i.newTab", true);
Line Found : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=108602&tt=090212_noffx&babsrc=NT_ss&mntrId=86ce24e0000000000000f80f411981d7");
Line Found : user_pref("extensions.EY8nsT.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumo[...]
Line Found : user_pref("extensions.enabledAddons", "ffxtlbr%40Facemoods.com:1.4.1,%7Bea614400-e918-4741-9a97-7a972ff7c30b%7D:2.5.15,suggestor%40suggestor.pirrit.com:2.2.5,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D[...]
Line Found : user_pref("extensions.facemoods._xpiupdate", true);
Line Found : user_pref("extensions.facemoods.admin", false);
Line Found : user_pref("extensions.facemoods.aflt", "orgnl");
Line Found : user_pref("extensions.facemoods.dfltSrch", false);
Line Found : user_pref("extensions.facemoods.excTlbr", false);
Line Found : user_pref("extensions.facemoods.fcmdVrsn", "1.2.7.5.4");
Line Found : user_pref("extensions.facemoods.firstRun", "true");
Line Found : user_pref("extensions.facemoods.hmpg", false);
Line Found : user_pref("extensions.facemoods.id", "_#70f020fee54940078981952de9586671");
Line Found : user_pref("extensions.facemoods.instlDay", "_#15321");
Line Found : user_pref("extensions.facemoods.lastVrsnTs", "");
Line Found : user_pref("extensions.facemoods.newTab", false);
Line Found : user_pref("extensions.facemoods.newTabUrl", "hxxp://start.facemoods.com/?a=wbsttst2&f=2");
Line Found : user_pref("extensions.facemoods.noFFXTlbr", false);
Line Found : user_pref("extensions.facemoods.sid", "_#70f020fee54940078981952de9586671");
Line Found : user_pref("extensions.facemoods.smplGrp", "free");
Line Found : user_pref("extensions.funmoods.admin", false);
Line Found : user_pref("extensions.funmoods.aflt", "wbst");
Line Found : user_pref("extensions.funmoods.brwsrsrc", "ietlbr");
Line Found : user_pref("extensions.funmoods.cntry", "CZ");
Line Found : user_pref("extensions.funmoods.dfltLng", "EN");
Line Found : user_pref("extensions.funmoods.dfltSrch", true);
Line Found : user_pref("extensions.funmoods.dfltlng", "en");
Line Found : user_pref("extensions.funmoods.dfltsrch", true);
Line Found : user_pref("extensions.funmoods.excTlbr", false);
Line Found : user_pref("extensions.funmoods.hdrMd5", "E0834BB5CE05FD66DC1C2AAF1405CE94");
Line Found : user_pref("extensions.funmoods.hmpg", true);
Line Found : user_pref("extensions.funmoods.hrdid", "0");
Line Found : user_pref("extensions.funmoods.id", "86ce24e0000000000000f80f411981d7");
Line Found : user_pref("extensions.funmoods.instlDay", "15407");
Line Found : user_pref("extensions.funmoods.instlRef", "");
Line Found : user_pref("extensions.funmoods.instlday", "15407");
Line Found : user_pref("extensions.funmoods.instlref", "");
Line Found : user_pref("extensions.funmoods.isDcmntCmplt", true);
Line Found : user_pref("extensions.funmoods.keywordurl", "");
Line Found : user_pref("extensions.funmoods.lastVrsnTs", "1.5.12.20:04:48");
Line Found : user_pref("extensions.funmoods.newTab", true);
Line Found : user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=wbst");
Line Found : user_pref("extensions.funmoods.newtab", true);
Line Found : user_pref("extensions.funmoods.newtaburl", "hxxp://start.funmoods.com/?f=2&a=wbst");
Line Found : user_pref("extensions.funmoods.noFFXTlbr", false);
Line Found : user_pref("extensions.funmoods.prdct", "funmoods");
Line Found : user_pref("extensions.funmoods.propectorlck", 70233932);
Line Found : user_pref("extensions.funmoods.prtkHmpg", 1);
Line Found : user_pref("extensions.funmoods.prtnrId", "funmoods");
Line Found : user_pref("extensions.funmoods.prtnrid", "funmoods");
Line Found : user_pref("extensions.funmoods.sg", "none");
Line Found : user_pref("extensions.funmoods.smplGrp", "none");
Line Found : user_pref("extensions.funmoods.smplgrp", "none");
Line Found : user_pref("extensions.funmoods.srch", "");
Line Found : user_pref("extensions.funmoods.srchPrvdr", "Search");
Line Found : user_pref("extensions.funmoods.srchprvdr", "Search");
Line Found : user_pref("extensions.funmoods.tlbrId", "base");
Line Found : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://start.funmoods.com/results.php?f=3&a=wbst&q=");
Line Found : user_pref("extensions.funmoods.tlbrid", "base");
Line Found : user_pref("extensions.funmoods.tlbrsrchurl", "hxxp://start.funmoods.com/results.php?f=3&a=wbst&q=");
Line Found : user_pref("extensions.funmoods.vrsn", "1.5.12.2");
Line Found : user_pref("extensions.funmoods.vrsnTs", "1.5.12.20:04:48");
Line Found : user_pref("extensions.funmoods.vrsni", "1.5.12.2");
Line Found : user_pref("extensions.funmoods.vrsnts", "1.5.12.20:04:48");
Line Found : user_pref("extensions.mywebsearch.prevDefaultEngine", "Yahoo");
Line Found : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Line Found : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=");
Line Found : user_pref("extensions.mywebsearch.prevSelectedEngine", "Yahoo");
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=D98494AD-A799-42AE-B466-D68F3C7748D5&n=77edcbda&ptnrS=HJxdm143YYcz&si=203256994");
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.enabled", true);
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.initialized", true);
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.contextKey", "");
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.installDate", "2012072922");
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerId", "HJxdm143YYcz");
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerSubId", "203256994");
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.success", true);
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.toolbarId", "D98494AD-A799-42AE-B466-D68F3C7748D5");
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.lastActivePing", "1343740063198");
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.options.defaultSearch", true);
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.options.homePageEnabled", true);
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.options.keywordEnabled", true);
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.options.tabEnabled", true);
Line Found : user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
Line Found : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
Line Found : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "videodownloadconverter@mindspark.com");
Line Found : user_pref("extensions.toolbar.mindspark.lastInstalled", "videodownloadconverter@mindspark.com");
Line Found : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
Line Found : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
Line Found : user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");
Line Found : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Line Found : user_pref("smartbar.addressBarOwnerCTID", "CT3289075");
Line Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3314481&CUI=UN35668428492382754&UM=1&SearchSource=13");
Line Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&CU[...]
Line Found : user_pref("smartbar.defaultSearchOwnerCTID", "CT3289075");
Line Found : user_pref("smartbar.homePageOwnerCTID", "CT3314481");
Line Found : user_pref("smartbar.machineId", "QG3O9WTIPJ9VGHMWF+61D8DC9+O7M5ARHXKTV+7QTG6YFHDHLSTNSDM5UWNHV6/P/BCJEOKAF8RHPY3F7WJVPQ");

-\\ Google Chrome v33.0.1750.154

[ File : C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [87740 octets] - [05/04/2014 16:59:50]

########## EOF -

zde je log z MalwareBytes,Anti-Malware


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5.4.2014
Scan Time: 17:40:36
Logfile: log malware.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.05.03
Rootkit Database: v2014.03.27.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows 7 Service Pack 3
CPU: x64
File System: NTFS
User: standa

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 323672
Time Elapsed: 14 min, 26 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 8
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, , [e6d171b5f3883105b317a0a169995ba5],
PUP.Optional.FaceMoods.A, HKU\S-1-5-21-834648176-2438481772-1138511732-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0D7562AE-8EF6-416d-A838-AB665251703A}, , [4f688e98601bf93dd195a36819e9fd03],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, , [882fd5516f0cae8885a4a16cc53d5aa6],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\CLASSES\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9}, , [b60182a41f5c04323aef34d9709253ad],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\3874, , [6e49e04692e989ad62cbc1a00af8fb05],
Security.Hijack, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\FIREFOX.EXE, , [4374ed3999e2a88e8fabb83a0bf7bd43],
Security.Hijack, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\FIREFOX.EXE, , [caed4bdbf58696a0182215ddc63c4cb4],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-834648176-2438481772-1138511732-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [dbdca680f982fd39f7cca0f242c15ea2],

Registry Values: 3
Security.Hijack, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\FIREFOX.EXE|Debugger, "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe", , [4374ed3999e2a88e8fabb83a0bf7bd43]
Security.Hijack, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\FIREFOX.EXE|Debugger, "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe", , [caed4bdbf58696a0182215ddc63c4cb4]
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-834648176-2438481772-1138511732-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [645365c1ff7cc96dcafa474ba65d5ca4]

Registry Data: 1
PUP.Optional.FaceMoods.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, http://start.facemoods.com/?a=wbsttst2&s={searchTerms}&f=4, Good: (www.google.com), Bad: (http://start.facemoods.com/?a=wbsttst2&s={searchTerms}&f=4),,[5265b373d5a6f83e5a6f21f4eb19a25e]

Folders: 35
PUP.Optional.SearchNewTab, C:\ProgramData\SearchNewTab, , [5265e73f91eadf57a893d0841be74cb4],
Trojan.Agent.BCM, C:\Windows\inf\mncsbbpaq, , [5067b373017a91a5ab121e38e220c23e],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\userCode, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\icons, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\icons\actions, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\api, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\popupResource, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0\_locales, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0\_locales\en, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0\_locales\pl, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\defaults, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\defaults\preferences, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\userCode, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\locale, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\locale\en-US, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.DynamicPricer.A, C:\Users\standa\AppData\Local\DynamicPricer, , [fdba27ffd2a9cb6b1874ff5dd42ef60a],
PUP.Optional.DynamicPricer.A, C:\Users\standa\AppData\Local\DynamicPricer\Chrome, , [fdba27ffd2a9cb6b1874ff5dd42ef60a],
PUP.Optional.DynamicPricer.A, C:\Users\standa\AppData\Local\DynamicPricer\Firefox, , [fdba27ffd2a9cb6b1874ff5dd42ef60a],
PUP.Optional.DynamicPricer.A, C:\Users\standa\AppData\Local\DynamicPricer\IE, , [fdba27ffd2a9cb6b1874ff5dd42ef60a],

Files: 260
PUP.Funshion, C:\Users\standa\AppData\Roaming\Funshion\Funshion.exe, , [35829096f9822412d6115213a759c040],
PUP.Funshion, C:\Users\standa\AppData\Roaming\Funshion\funshionplugin2.dll, , [397e4dd9205be551d80f92d3bd43e719],
PUP.Funshion, C:\Users\standa\AppData\Roaming\Funshion\FunshionService.exe, , [2097e5412556cd6938afe481669a47b9],
PUP.Funshion, C:\Users\standa\AppData\Roaming\Funshion\LangResEnAmerican.dll, , [4a6d03239ae194a23bac0263d42cc739],
PUP.Funshion, C:\Users\Public\Fundata\FunTesting.dll, , [5463081e91ea0b2b6e79a8bd3fc17c84],
PUP.Optional.BuenoSearch.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\buenosearch.xml, , [a413180e1566a98d8b533b2760a2619f],
PUP.Optional.Conduit.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\conduit.xml, , [2c8b58ce106b5dd9c228e77b0cf6db25],
PUP.Optional.Conduit.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\conduit-search.xml, , [6f48fa2c522937ff28c3e67c867c8977],
PUP.Optional.FunMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\funmoods.xml, , [704731f5bac10b2ba072acb7bf43768a],
PUP.Optional.Surftastic.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\firefox@surftastic.net.xpi, , [922560c6f78453e3bdfb432031d16a96],
PUP.Optional.WebSearch.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\searchplugins\WebSearch.xml, , [f2c50b1be19a93a305d4b1b22bd711ef],
PUP.Optional.BuenoSearch.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.buenosearch.com_0.localstorage, , [e3d453d3ec8fac8a40f17ee730d2ff01],
PUP.Optional.BuenoSearch.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.buenosearch.com_0.localstorage-journal, , [6453f0365526280eee44fb6aca3809f7],
PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot64.exe, , [04b36abcd9a291a578627becb2501ce4],
PUP.Funshion, C:\Users\standa\funshion.ini, , [4d6aca5c4e2d7eb898f7adcc59a9c040],
Trojan.Agent.BCM, C:\Windows\inf\mncsbbpaq\diakgcn121016.cl, , [5067b373017a91a5ab121e38e220c23e],
Trojan.Agent.BCM, C:\Windows\inf\mncsbbpaq\libcurl-4.dll, , [5067b373017a91a5ab121e38e220c23e],
Trojan.Agent.BCM, C:\Windows\inf\mncsbbpaq\libeay32.dll, , [5067b373017a91a5ab121e38e220c23e],
Trojan.Agent.BCM, C:\Windows\inf\mncsbbpaq\librtmp.dll, , [5067b373017a91a5ab121e38e220c23e],
Trojan.Agent.BCM, C:\Windows\inf\mncsbbpaq\libssh2.dll, , [5067b373017a91a5ab121e38e220c23e],
Trojan.Agent.BCM, C:\Windows\inf\mncsbbpaq\phatk121016.cl, , [5067b373017a91a5ab121e38e220c23e],
Trojan.Agent.BCM, C:\Windows\inf\mncsbbpaq\poclbm130302.cl, , [5067b373017a91a5ab121e38e220c23e],
Trojan.Agent.BCM, C:\Windows\inf\mncsbbpaq\scrypt130511.cl, , [5067b373017a91a5ab121e38e220c23e],
Trojan.Agent.BCM, C:\Windows\inf\mncsbbpaq\zlib1.dll, , [5067b373017a91a5ab121e38e220c23e],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\background.html, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\chromeCoreFilesIndex.txt, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\crossriderManifest.json, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\manifest.json, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\popup.html, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\manifest.xml, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins.json, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\1.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\1000020.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\1000025.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\1000030.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\102.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\103.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\104.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\123.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\13.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\14.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\155.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\17.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\175.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\177.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\180.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\182.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\183.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\19.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\190.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\193.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\195.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\207.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\21.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\22.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\220.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\223.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\226.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\246.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\28.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\4.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\47.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\64.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\7.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\72.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\78.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\80.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\9.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\91.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\93.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\plugins\97.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\userCode\background.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\extensionData\userCode\extension.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\icons\icon128.png, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\icons\icon16.png, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\icons\icon48.png, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\icons\actions\1.png, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\background.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\main.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\platformVersion.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\api\chrome.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\api\cookie.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\api\message.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\api\monitor.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\api\pageAction.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\api\pageActionBG.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\app_api.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\bg_app_api.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\consts.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\cookie_store.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\crossriderAPI.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\delegate.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\events.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\extensionDataStore.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\installer.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\logFile.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\logging.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\onBGDocumentLoad.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\reports.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\storageWrapper.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\updateManager.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\util.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\xhr.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\popupResource\newPopup.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmnbobhffedhdhfpcjkjphcfpeeiocdn\1.26.33_0\js\lib\popupResource\popup.js, , [dadd5bcbea9169cd727abc9baf5339c7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\background.html, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\background.js, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\icon_128.png, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\inject.js, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\jquery.min.js, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\manifest.json, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0\background.html, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0\background.js, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0\icon_128.png, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0\inject.js, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0\jquery.min.js, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0\manifest.json, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0\_locales\en\messages.json, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\2.2.5_0\_locales\pl\messages.json, , [d4e306204f2c33032e336ced57abc13f],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome.manifest, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\install.rdf, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\background.html, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\baseObject.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\browser.xul, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\dialog.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\ffCoreFilesIndex.txt, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\main.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\options.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\options.xul, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\platformVersion.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\search_dialog.xul, , [f6c179ad58234cea09273f1b52b029d7],

2 část

PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\asyncDB.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\background.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\browserAction.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\contextMenu.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\dbManager.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\dom_bg.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\fileManager.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\firefox.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\firefoxNotifications.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\firefoxOmnibox.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\message.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\pageAction.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\request.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\tabs.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\webRequest.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\windowsMessagingHandler.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\addressBarChangeObserver.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\console.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\consts.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\delegate.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\extensionDataStore.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\folderIOWrapper.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\httpObserver.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\IDBWrapper.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\installer.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\logFile.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\prefs.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\progressListenerObserver.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\registry.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\reloadObserver.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\reports.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\requestObject.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\searchSettings.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\uninstallObserver.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\updateManager.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\utils.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\xhr.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\defaults\preferences\prefs.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\manifest.xml, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins.json, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\1.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\1000020.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\1000025.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\1000030.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\102.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\103.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\104.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\123.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\13.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\14.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\155.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\16.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\17.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\175.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\177.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\180.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\182.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\183.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\190.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\193.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\195.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\207.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\21.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\22.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\220.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\223.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\226.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\246.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\28.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\4.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\47.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\64.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\7.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\72.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\78.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\9.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\91.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\93.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\98.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\userCode\background.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\userCode\extension.js, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\locale\en-US\translations.dtd, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\button1.png, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\button2.png, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\button3.png, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\button4.png, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\button5.png, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\crossrider_statusbar.png, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\icon128.png, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\icon16.png, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\icon24.png, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\icon48.png, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\panelarrow-up.png, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\popup.html, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\skin.css, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.CrossRider.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\update.css, , [f6c179ad58234cea09273f1b52b029d7],
PUP.Optional.DynamicPricer.A, C:\Users\standa\AppData\Local\DynamicPricer\Chrome\background.html, , [fdba27ffd2a9cb6b1874ff5dd42ef60a],
PUP.Optional.DynamicPricer.A, C:\Users\standa\AppData\Local\DynamicPricer\Chrome\background.js, , [fdba27ffd2a9cb6b1874ff5dd42ef60a],
PUP.Optional.DynamicPricer.A, C:\Users\standa\AppData\Local\DynamicPricer\Chrome\manifest.json, , [fdba27ffd2a9cb6b1874ff5dd42ef60a],
PUP.Optional.DynamicPricer.A, C:\Users\standa\AppData\Local\DynamicPricer\Firefox\DynamicPricer.xpi, , [fdba27ffd2a9cb6b1874ff5dd42ef60a],
PUP.Optional.BuenoSearch.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "homepage": "http://www.buenosearch.com/?babsrc=HP_ss&mntrId=86CEF80F411981D7&affID=128403&tsp=5207",), ,[67508f978fec45f1effaaf904cb8a55b]
PUP.Optional.BuenoSearch.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "startup_urls": [ "http://www.buenosearch.com/?babsrc=HP_ss&mntrId=86CEF80F411981D7&affID=128403&tsp=5207", "http://www.google.com/", "http://www.google.com/|http://isearch.avg.com/?cid={13FFD1B6-C1E3-46CE-AE34-97D6216F687D}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=17.2.0.38&pid=avg&sg=0&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=0&sap=hp|http://www.google.com/", "http://www.google.com/|http://isearch.avg.com/?cid={13FFD1B6-C1E3-46CE-AE34-97D6216F687D}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=17.2.0.38&pid=avg&sg=0&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=0&sap=hp|http://www.google.com/", "http://www.google.com/|http://isearch.avg.com/?cid={13FFD1B6-C1E3-46CE-AE34-97D6216F687D}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=17.2.0.38&pid=avg&sg=0&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=0&sap=hp|http://www.google.com/", "http://www.google.com/" ],), ,[ffb81e08b0cb05311ffd112fe71dca36]
PUP.Optional.Babylon.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar_i.newTab", true);), ,[eec9cb5b2c4f6bcb3c2d57e805ff7d83]
PUP.Optional.Babylon.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar_i.newTabUrl", "http://search.babylon.com/?AF=108602&tt=090212_noffx&babsrc=NT_ss&mntrId=86ce24e0000000000000f80f411981d7");), ,[585fb076710a0e283831c47b57ad14ec]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods._xpiupdate", true);), ,[3a7d9393413ad660531cc97612f243bd]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.admin", false);), ,[5d5a60c697e4fa3c5f1053eccf35728e]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.aflt", "orgnl");), ,[feb9c165d6a5a1954728b28d2ed66e92]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.dfltSrch", false);), ,[fcbbac7ab4c72b0be887ac93be469967]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.excTlbr", false);), ,[1c9bfb2b27542a0cfb7492adc93bdf21]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.fcmdVrsn", "1.2.7.5.4");), ,[81366cbab1ca77bf3b34cf7053b153ad]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.firstRun", "true");), ,[f5c2e93da5d6b1852946b887788c44bc]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.hmpg", false);), ,[a6118d998bf07eb89ed1c778ab592ed2]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.id", "_#70f020fee54940078981952de9586671");), ,[833447df93e81c1a89e644fb7094d12f]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.instlDay", "_#15321");), ,[90279591a6d595a1fc7375cacd379c64]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.lastVrsnTs", "");), ,[10a7dc4a62192a0c84eb6ed18480a55b]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.newTab", false);), ,[1a9d6cbaa0db0333036cc47b44c007f9]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.newTabUrl", "http://start.facemoods.com/?a=wbsttst2&f=2");), ,[b0079195daa137ff432c4ef119eb47b9]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.noFFXTlbr", false);), ,[a80fe73f84f71c1a244b1d2255af40c0]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.sid", "_#70f020fee54940078981952de9586671");), ,[3b7c2cfa80fb2016046b043ba460c040]
PUP.Optional.FaceMoods.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("extensions.facemoods.smplGrp", "free");), ,[9d1aee38f08b3df90a6527184fb552ae]
PUP.Optional.Conduit.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3289075&CUI=UN25450354131411286&UM=1&SearchSource=3&q={searchTerms}");), ,[30876db9bbc0f44219b580bfdb29d22e]
PUP.Optional.Conduit.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("CT3072253.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=");), ,[bef96bbb334857df11beb58ab25227d9]
PUP.Optional.Conduit.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("CT3289075.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3289075&SearchSource=2&CUI=UN25450354131411286&UM=1&q=");), ,[496e44e297e46fc7646b6ad536ce50b0]
PUP.Optional.Conduit.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("CT3072253.CT3072253.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?ctid=CT3072253&octid=CT3072253&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_ID\"}");), ,[5d5ac561601bd85e746a6fd0b450cc34]
PUP.Optional.Conduit.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("CT3072253.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?ctid=CT3072253&octid=CT3072253&SearchSource=15&CUI=UN24214793701958772&SSPV=&Lay=1&UM=\"}");), ,[c7f02df955263bfbca1496a9e61e6c94]
PUP.Optional.Conduit.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\prefs.js, Good: (), Bad: (user_pref("CT3289075.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"http://search.conduit.com/?ctid=CT3289075&octid=CT3289075&SearchSource=15&CUI=UN25450354131411286&SSPV=&Lay=1&UM=1\"}");), ,[8f28d4527ffc37ffd806ab9458ac0af6]
PUP.Optional.BuenoSearch.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\user.js, Good: (), Bad: (user_pref("extensions.buenosearch.tlbrSrchUrl", "http://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=86CEF80F411981D7&affID=128403&tsp=5207");), ,[9324bc6a8eedba7c2b41b38c08fca55b]
PUP.Optional.BuenoSearch.A, C:\Users\standa\AppData\Roaming\Mozilla\Firefox\Profiles\s4cae0wr.default\user.js, Good: (), Bad: (user_pref("extensions.buenosearch.tb_url", "http://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=86CEF80F411981D7&affID=128403&tsp=5207");), ,[d6e16fb71b60e74f195340ffa2626a96]

Physical Sectors: 0
(No malicious items detected)


(end)

AVG PC TuneUp - tuhle aplikaci ze systému odstraň.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

===================================================

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

====================================================

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Smazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

ok hned to udělám ale já používám hlavně google chrome co s ním?

log MbAM

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5.4.2014
Scan Time: 23:43:01
Logfile: log malware čisto.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.05.04
Rootkit Database: v2014.03.27.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows 7 Service Pack 3
CPU: x64
File System: NTFS
User: standa

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 323651
Time Elapsed: 17 min, 57 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 3
PUP.Funshion, C:\Users\standa\FunShion.ini, , [12a6d650017af640535bf287db279e62],
PUP.Optional.BuenoSearch.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "homepage": "http://www.buenosearch.com/?babsrc=HP_ss&mntrId=86CEF80F411981D7&affID=128403&tsp=5207",), ,[9a1eb86e7dfee551f12a7fc161a3728e]
PUP.Optional.BuenoSearch.A, C:\Users\standa\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "startup_urls": [ "http://www.buenosearch.com/?babsrc=HP_ss&mntrId=86CEF80F411981D7&affID=128403&tsp=5207", "http://www.google.com/", "http://www.google.com/|http://isearch.avg.com/?cid={13FFD1B6-C1E3-46CE-AE34-97D6216F687D}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=17.2.0.38&pid=avg&sg=0&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=0&sap=hp|http://www.google.com/", "http://www.google.com/|http://isearch.avg.com/?cid={13FFD1B6-C1E3-46CE-AE34-97D6216F687D}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=17.2.0.38&pid=avg&sg=0&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=0&sap=hp|http://www.google.com/", "http://www.google.com/|http://isearch.avg.com/?cid={13FFD1B6-C1E3-46CE-AE34-97D6216F687D}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=17.2.0.38&pid=avg&sg=0&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=&sap=hp|http://isearch.avg.com/?cid={9130BB86-BA90-4EF6-8E65-F6CE3874A894}&mid=ee87eb104ab447d18ab6294607fd6824-b1752661c7a4c40b5adf684354c8d05dc31e93c0&lang=cs&ds=AVG&pr=pr&d=2012-12-08%2010:58:40&v=14.2.0.1&pid=avg&sg=0&sap=hp|http://www.google.com/", "http://www.google.com/" ],), ,[952355d1abd01c1afa54d26e1de7956b]

Physical Sectors: 0
(No malicious items detected)


(end)

log AdwCleaner

# AdwCleaner v3.023 - Report created

05/04/2014 at 23:45:32
# Updated 01/04/2014 by Xplode
# Operating System : Windows 7 Home

Premium Service Pack 3 (64 bits)
# Username : standa - STANDA-PC
# Running from : C:\Users\standa

\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : PirritUpdater

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\AVG

Secure Search
Folder Deleted : C:\ProgramData

\Babylon
Folder Deleted : C:\ProgramData\clsoft

ltd
Folder Deleted : C:\ProgramData

\Conduit
Folder Deleted : C:\ProgramData

\continuetosave
Folder Deleted : C:\ProgramData\iWin
Folder Deleted : C:\ProgramData

\ParetoLogic
Folder Deleted : C:\ProgramData

\WinterSoft
Folder Deleted : C:\ProgramData

\AlawarWrapper
Folder Deleted : C:\ProgramData

\Microsoft\Windows\Start Menu

\Programs\continuetosave
Folder Deleted : C:\Program Files

(x86)\AVG Secure Search
Folder Deleted : C:\Program Files

(x86)\baidu
Folder Deleted : C:\Program Files

(x86)\Complitly
Folder Deleted : C:\Program Files

(x86)\Conduit
Folder Deleted : C:\Program Files

(x86)\driver-soft
Folder Deleted : C:\Program Files

(x86)\GadgetBox
Folder Deleted : C:\Program Files

(x86)\GreenTree Applications
Folder Deleted : C:\Program Files

(x86)\Pirrit
Folder Deleted : C:\Program Files

(x86)\WinZip Registry Optimizer
Folder Deleted : C:\Program Files

(x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Program Files

(x86)\Common Files\ParetoLogic
Folder Deleted : C:\Windows

\SysWOW64\AI_RecycleBin
Folder Deleted : C:\Windows

\SysWOW64\SearchProtect
Folder Deleted : C:\Program Files

\Windows Sidebar\Shared Gadgets

\gadgetbox.gadget
Folder Deleted : C:\Users\standa

\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\standa

\AppData\Local\Babylon
Folder Deleted : C:\Users\standa

\AppData\Local\Conduit
Folder Deleted : C:\Users\standa

\AppData\Local\iWin
Folder Deleted : C:\Users\standa

\AppData\Local\NativeMessaging
Folder Deleted : C:\Users\standa

\AppData\Local\Pirrit Suggestor
Folder Deleted : C:\Users\standa

\AppData\Local\AlawarWrapper
Folder Deleted : C:\Users\standa

\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\standa

\AppData\LocalLow\AVG Security

Toolbar
Folder Deleted : C:\Users\standa

\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\standa

\AppData\LocalLow\Minibar
Folder Deleted : C:\Users\standa

\AppData\Roaming\Complitly
Folder Deleted : C:\Users\standa

\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\standa

\AppData\Roaming\iWin
Folder Deleted : C:\Users\standa

\AppData\Roaming\ParetoLogic
Folder Deleted : C:\Users\standa

\AppData\Roaming\Pirrit
Folder Deleted : C:\Users\standa

\AppData\Roaming\Systweak
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default

\ConduitCommon
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\Smartbar
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\CT3314481
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\CT3072253
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\CT3289075
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\Extensions

\{33E0DAA6-3AF3-D8B5-6752-

10E949C61516}
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\Extensions

\50fbe05e6566d@50fbe05e656a5.com
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\Extensions

\yiqaiue@v-ia.net
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\Extensions

\{1a269fe4-5995-4e74-8206-

20db87d38e57}
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\Extensions

\{687578b9-7132-4a7a-80e4-

30ee31099e03}
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\Extensions

\{96f454ea-9d38-474f-b504-

56193e00c1a5}
Folder Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\Extensions

\{ea614400-e918-4741-9a97-

7a972ff7c30b}
Folder Deleted : C:\Users\standa

\AppData\Local\Google\Chrome\User

Data\Default\Extensions

\dlfienamagdnkekbbbocojppncdambda
Folder Deleted : C:\Users\standa

\AppData\Local\Google\Chrome\User

Data\Default\Extensions

\cflheckfmhopnialghigdlggahiomebp
Folder Deleted : C:\Users\standa

\AppData\Local\Google\Chrome\User

Data\Default\Extensions

\pacgpkgadgmibnhpdidcnfafllnmeomc
File Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\Extensions

\ffxtlbr@Facemoods.com.xpi
File Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\Extensions

\suggestor@suggestor.pirrit.com.xpi
File Deleted : C:\END
File Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default

\searchplugins\Askcom.xml
File Deleted : C:\Program Files

(x86)\Mozilla Firefox\searchplugins

\avg-secure-search.xml
File Deleted : C:\Program Files

(x86)\Mozilla Firefox\browser

\searchplugins\avg-secure-search.xml
File Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default

\searchplugins\my-web-search.xml
File Deleted : C:\Users\standa

\AppData\Roaming\Mozilla\Firefox

\Profiles\s4cae0wr.default\user.js
File Deleted : C:\Windows\Tasks

\paretologic registration3.job
File Deleted : C:\Windows

\System32\Tasks\paretologic

registration3
File Deleted : C:\Windows\Tasks

\paretologic update version3.job
File Deleted : C:\Windows

\System32\Tasks\paretologic update

version3

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE

\Mozilla\Firefox\Extensions

[Avg@toolbar]
Key Deleted : HKLM\SOFTWARE

\Google\Chrome\Extensions

\dlfienamagdnkekbbbocojppncdambda
Key Deleted : HKLM\SOFTWARE

\Google\Chrome\Extensions

\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKCU\Software\Google

\Chrome\Extensions

\cflheckfmhopnialghigdlggahiomebp
Key Deleted : HKLM\SOFTWARE

\Google\Chrome\Extensions

\cflheckfmhopnialghigdlggahiomebp
Key Deleted : HKCU\Software\Google

\Chrome\Extensions

\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKLM\SOFTWARE

\Google\Chrome\Extensions

\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKLM\SOFTWARE

\Classes\AppID\Complitly.DLL
Key Deleted : HKLM\SOFTWARE

\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE

\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE

\Classes\AVG Secure

Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE

\Classes\AVG Secure

Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE

\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE

\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE

\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE

\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE

\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE

\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE

\Classes

\SuggestMeYes.SuggestMeYesBHO
Key Deleted : HKLM\SOFTWARE

\Classes

\SuggestMeYes.SuggestMeYesBHO.1
Key Deleted : HKLM\SOFTWARE

\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE

\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\AskInstallChecker_RASAPI32
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\AskInstallChecker_RASMANCS
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing\AskInstallChecker-

1_RASAPI32
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing\AskInstallChecker-

1_RASMANCS
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\askpartnercobrandingtool_rasapi32
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\askpartnercobrandingtool_rasmancs
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing\AskSLib_RASAPI32
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing\AskSLib_RASMANCS
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\ContinueToSave_RASAPI32
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\ContinueToSave_RASMANCS
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\facemoods_RASAPI32
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\facemoods_RASMANCS
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\facemoodssrv_RASAPI32
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\facemoodssrv_RASMANCS
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE

\Microsoft\Tracing

\TaskScheduler_RASMANCS
Value Deleted : HKLM\SOFTWARE

\Microsoft\Windows\CurrentVersion

\Run [vProt]
Key Deleted : HKLM\SOFTWARE

\MozillaPlugins\@avg.com/AVG

SiteSafety

plugin,version=11.0.0.1,application/x-

avg-sitesafety-plugin
Key Deleted : HKCU\Software

\bc417da8242d899d911d46b52a2aa2c

2
Key Deleted : HKLM\SOFTWARE

\Classes\AppID\{0A18A436-2A7A-49F3

-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE

\Classes\AppID\{1FDFF5A2-7BB1-48E1

-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE

\Classes\AppID\{442F13BC-2031-42D5

-9520-437F65271153}
Key Deleted : HKLM\SOFTWARE

\Classes\AppID\{5B1881D1-D9C7-

46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE

\Classes\AppID\{BB711CB0-C70B-

482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE

\Classes\AppID\{BDB69379-802F-

4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE

\Classes\AppID\{EA28B360-05E0-4F93

-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{00000001-4FEF-40D3-

B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{02478D38-C3F9-4EFB-

9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{059EACC2-1ABE-49E8-

928D-DC8BD355B7A9}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{0FB6A909-6086-458F-

BD92-1F8EE10042A0}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{1AA60054-57D9-4F99

-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{3C471948-F874-49F5-

B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{408CFAD9-8F13-4747-

8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{4E92DB5F-AAD9-49D3

-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{64697678-0000-0010-

8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{933B95E2-E7B7-4AD9

-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{95B7759C-8C7F-4BF1-

B163-73684A933233}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{AE805869-2E5C-4ED4-

8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{B658800C-F66E-4EF3-

AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{CC5AD34C-6F10-4CB3

-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{D40C654D-7C51-4EB3

-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{DE9028D0-5FFA-4E69-

94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{E7DF6BFF-55A5-4EB7-

A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{EF99BD32-C1FB-11D2

-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE

\Classes\CLSID\{F25AF245-4A81-40DC-

92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE

\Classes\Interface\{03E2A1F3-4402-

4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE

\Classes\Interface\{31E3BC75-2A09-

4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : HKLM\SOFTWARE

\Classes\Interface\{4E92DB5F-AAD9-

49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE

\Classes\Interface\{813A22E0-3E2B-

4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE

\Classes\Interface\{9E3B11F6-4179-

4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE

\Classes\Interface\{C401D2CE-DC27-

45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE

\Classes\Interface\{C66F0B7A-BD67-

4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE

\Classes\Interface\{C9AE652B-8C99-

4AC2-B556-8B501182874E}
Key Deleted : HKLM\SOFTWARE

\Classes\TypeLib\{01BCB858-2F62-

4F06-A8F4-48F927C15333}
Key Deleted : HKLM\SOFTWARE

\Classes\TypeLib\{07CAC314-E962-

4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE

\Classes\TypeLib\{74FB6AFD-DD77-

4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE

\Classes\TypeLib\{9C049BA6-EA47-

4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE

\Classes\TypeLib\{C2AC8A0E-E48E-

484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE

\Classes\TypeLib\{E2343056-CC08-

46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\SOFTWARE

\Microsoft\Windows\CurrentVersion

\Explorer\Browser Helper Objects

\{0FB6A909-6086-458F-BD92-

1F8EE10042A0}
Key Deleted : HKLM\SOFTWARE

\Microsoft\Windows\CurrentVersion

\Explorer\Browser Helper Objects

\{95B7759C-8C7F-4BF1-B163-

73684A933233}
Key Deleted : HKLM\SOFTWARE

\Microsoft\Windows\CurrentVersion

\Explorer\Browser Helper Objects

\{AE805869-2E5C-4ED4-8F7B-

F1F7851A4497}
Key Deleted : HKLM\SOFTWARE

\Microsoft\Windows\CurrentVersion

\Explorer\Browser Helper Objects

\{D40C654D-7C51-4EB3-95B2-

1E23905C2A2D}
Key Deleted : HKCU\Software

\Microsoft\Windows\CurrentVersion

\Ext\Stats\{0FB6A909-6086-458F-BD92

-1F8EE10042A0}
Key Deleted : HKCU\Software

\Microsoft\Windows\CurrentVersion

\Ext\Stats\{2974C985-8151-4DE5-

B23C-B875F0A8522F}
Key Deleted : HKCU\Software

\Microsoft\Windows\CurrentVersion

\Ext\Stats\{95B7759C-8C7F-4BF1-B163

-73684A933233}
Key Deleted : HKCU\Software

\Microsoft\Windows\CurrentVersion

\Ext\Stats\{AE805869-2E5C-4ED4-

8F7B-F1F7851A4497}
Key Deleted : HKCU\Software

\Microsoft\Windows\CurrentVersion

\Ext\Stats\{D40C654D-7C51-4EB3-95B2

-1E23905C2A2D}
Key Deleted : HKCU\Software

\Microsoft\Windows\CurrentVersion

\Ext\Stats\{F25AF245-4A81-40DC-92F9

-E9021F207706}
Key Deleted : HKCU\Software

\Microsoft\Windows\CurrentVersion

\Ext\Settings\{0FB6A909-6086-458F-

BD92-1F8EE10042A0}
Key Deleted : HKCU\Software

\Microsoft\Windows\CurrentVersion

\Ext\Settings\{95B7759C-8C7F-4BF1-

B163-73684A933233}
Key Deleted : HKCU\Software

\Microsoft\Windows\CurrentVersion

\Ext\Settings\{AE805869-2E5C-4ED4-

8F7B-F1F7851A4497}
Key Deleted : HKCU\Software

\Microsoft\Windows\CurrentVersion

\Ext\Settings\{D40C654D-7C51-4EB3-

95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE

\Microsoft\Windows\CurrentVersion

\Ext\PreApproved\{C6FDD0C3-266A-

4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE

\Microsoft\Windows\CurrentVersion

\Ext\PreApproved\{F25AF245-4A81-

40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE

\Microsoft\Internet Explorer\Low

Rights\ElevationPolicy\{E7DF6BFF-

55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE

\Microsoft\Internet Explorer\Low

Rights\ElevationPolicy\{F25AF245-

4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software

\Microsoft\Internet Explorer

\SearchScopes\{014DB5FA-EAFB-4592-

A95B-F44D3EE87FA9}
Key Deleted : HKCU\Software

\Microsoft\Internet Explorer

\SearchScopes\{0ECDF796-C2DC-4D79

-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software

\Microsoft\Internet Explorer

\SearchScopes\{95B7759C-8C7F-4BF1-

B163-73684A933233}
Key Deleted : HKCU\Software

\Microsoft\Internet Explorer

\SearchScopes\{AD22EBAF-0D18-4FC7

-90CC-5EA0ABBE9EB8}
Key Deleted : HKLM\SOFTWARE

\Microsoft\Internet Explorer

\SearchScopes\{BB74DE59-BC4C-4172-

9AC4-73315F71CFFE}
Value Deleted : HKLM\SOFTWARE

\Microsoft\Internet Explorer\Toolbar

[{95B7759C-8C7F-4BF1-B163-

73684A933233}]
Key Deleted : [x64] HKLM\SOFTWARE

\Classes\CLSID\{0FB6A909-6086-458F-

BD92-1F8EE10042A0}
Key Deleted : [x64] HKLM\SOFTWARE

\Classes\CLSID\{AE805869-2E5C-4ED4-

8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE

\Classes\Interface\{03E2A1F3-4402-

4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE

\Classes\Interface\{31E3BC75-2A09-

4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE

\Classes\Interface\{4E92DB5F-AAD9-

49D3-8EAB-B40CBE5B1FF7}
Key Deleted : [x64] HKLM\SOFTWARE

\Classes\Interface\{813A22E0-3E2B-

4188-9BDA-ECA9878B8D48}
Key Deleted : [x64] HKLM\SOFTWARE

\Classes\Interface\{9E3B11F6-4179-

4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE

\Classes\Interface\{C401D2CE-DC27-

45C7-BC0C-8E6EA7F085D6}
Key Deleted : [x64] HKLM\SOFTWARE

\Classes\Interface\{C66F0B7A-BD67-

4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE

\Classes\Interface\{C9AE652B-8C99-

4AC2-B556-8B501182874E}
Key Deleted : [x64] HKLM\SOFTWARE

\Microsoft\Windows\CurrentVersion

\Explorer\Browser Helper Objects

\{0FB6A909-6086-458F-BD92-

1F8EE10042A0}
Key Deleted : [x64] HKLM\SOFTWARE

\Microsoft\Windows\CurrentVersion

\Explorer\Browser Helper Objects

\{AE805869-2E5C-4ED4-8F7B-

F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE

\Microsoft\Internet Explorer\Low

Rights\ElevationPolicy\{F25AF245-

4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\AVG

Secure Search
Key Deleted : HKCU\Software\Complitly
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software

\installedbrowserextensions
Key Deleted : HKCU\Software\OCS
Key Deleted : HKCU\Software

\ParetoLogic
Key Deleted : HKCU\Software

\smarttweak
Key Deleted : HKCU\Software

\AppDataLow\Software\AVG Security

Toolbar
Key Deleted : HKCU\Software

\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software

\AppDataLow\Software

\ConduitSearchScopes
Key Deleted : HKCU\Software

\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\AVG

Secure Search
Key Deleted : HKLM\Software\AVG

Security Toolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\Dexpot

\OpenCandy
Key Deleted : HKLM\Software\Driver-

Soft
Key Deleted : HKLM\Software

\installedbrowserextensions
Key Deleted : HKLM\Software

\ParetoLogic
Key Deleted : HKLM\Software\Pirrit
Key Deleted : HKLM\Software

\SimplyGen
Key Deleted : HKLM\Software

\SProtector
Key Deleted : HKLM\Software\Trymedia

Systems
Key Deleted : HKLM\SOFTWARE

\Microsoft\Windows\CurrentVersion

\Uninstall\{4FFBB818-B13C-11E0-

931D-B2664824019B}_is1
Key Deleted : HKLM\SOFTWARE

\Microsoft\Windows\CurrentVersion

\Uninstall\AVG Secure Search
Key Deleted : [x64] HKLM\SOFTWARE

\installedbrowserextensions
Key Deleted : [x64] HKLM\SOFTWARE

\Pirrit

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Users\standa\AppData

\Roaming\Mozilla\Firefox\Profiles

\s4cae0wr.default\prefs.js ]

Line Deleted : user_pref

("CT3072253..clientLogIsEnabled",

false);
Line Deleted : user_pref

("CT3072253..clientLogServiceUrl",

"hxxp://clientlog.users.conduit.com/Cli

entDiagnostics.asmx/ReportDiagnostics

Event");
Line Deleted : user_pref

("CT3072253..uninstallLogServiceUrl",

"hxxp://uninstall.users.conduit.com/Un

install.asmx/RegisterToolbarUninstalla

tion");
Line Deleted : user_pref

("CT3072253./9b+7e

+x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e,x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b+7e-

x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e/x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e06cg5el8:.from_oldbar.enc",

"bm1qampybm51cg==");
Line Deleted : user_pref

("CT3072253./9b

+7e06cg5el;8i:k.from_oldbar.enc",

"JH4tLyJqdHNwcHB4dHR7eCQvS0lHT0I1

fV1cPQ==");
Line Deleted : user_pref

("CT3072253./9b

+7e0x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e1x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e2x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e3x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e4x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e5x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e6x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e7x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e8x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e9x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e:x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e;x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e<x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e=x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e>x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b+7e?

x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7e@x305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7eax305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7ebe3g=;d9n9=d.from_oldbar.enc",

"NywtMml1di46PHs6OUNKSUhBQ0sm

UUZJKWVQRlZJZXFzTTN9VlRROFBc");
Line Deleted : user_pref

("CT3072253./9b

+7ebx305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7ecx305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7edx305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b

+7etx305.from_oldbar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253./9b-0?

3g>d.from_oldbar.enc",

"az1qQGtzcm56b0ZHSCBHSk58JU96T08

qISVVKColXFksWl5h");
Line Deleted : user_pref

("CT3072253./9b-0?

3g@6:5;.from_oldbar.enc", "AA==");
Line Deleted : user_pref

("CT3072253./9b-0?

3gfa7ef.from_oldbar.enc",

"Ky4sPQ==");
Line Deleted : user_pref

("CT3072253./9b-

3=3eccja=f>.from_oldbar.enc",

"JH4zPSxFL0E1J28pKiEsOT1EMHgyTEFC

R34rLEhXS0hWXVw1U1JcY2JhWlxkP2pf

YkJtbW1zYGpjS3hna2Q/bUM9Mz9ecH

N9IUxZVWZ5KXx5KC8uV2RgcTYlXTU2dz

wpY29udXQgNzRrUkE9[...]
Line Deleted : user_pref

("CT3072253./9b/>01=9a6k6<im;krie@

pdawm.from_oldbar.enc",

"bmpocHN0dXZ3");
Line Deleted : user_pref

("CT3072253./9b3=>@44i48?.from_old

bar.enc",

"NywtMml1djNCNjNBSEcgPj1HTk1MRU

dPKlVKTS1YWFheS1VONmNSVk8=");
Line Deleted : user_pref

("CT3072253./9b5ba==9cjag.from_oldb

ar.enc", "bmc

+PGxvQnR6RUN4enRIe01NTE9P");
Line Deleted : user_pref

("CT3072253./9b6b11g4c56b>f;p;anr@

p.from_oldbar.enc",

"bm1pbnN0dW51d3Rxeg==");
Line Deleted : user_pref

("CT3072253./9b9643g3/9e.from_oldb

ar.enc", "ag==");
Line Deleted : user_pref

("CT3072253./9b;45>:bi9i7ie.from_oldb

ar.enc", "Ky4sPQ==");
Line Deleted : user_pref

("CT3072253./9b<:222h64<.from_oldba

r.enc", "OT81Lz4=");
Line Deleted : user_pref

("CT3072253./9b<:222h64<l8daj.from_

oldbar.enc",

"bXBwb3Z0bHl2dyp5cnJ6fnV+ew==");
Line Deleted : user_pref

("CT3072253./9b=

+03eh8h8j?:.from_oldbar.enc",

"REM=");
Line Deleted : user_pref

("CT3072253./9b?

+e2a52d8.from_oldbar.enc",

"NywtMml1di46PHs6OUNKSUhBQ0sm

UUZJKWVQRlZkcHJ5UVVeXlI=");
Line Deleted : user_pref

("CT3072253./9b?

b0d:8aj62<h.from_oldbar.enc",

"bQ==");
Line Deleted : user_pref

("CT3072253./9ba@0<0bi6a7gn:6@l?.f

rom_oldbar.enc", "bA==");
Line Deleted : user_pref

("CT3072253.ALLOW_SHOWING_HIDDE

N_TOOLBAR", false);
Line Deleted : user_pref

("CT3072253.AboutPrivacyUrl",

"hxxp://www.conduit.com/privacy/Def

ault.aspx");
Line Deleted : user_pref

("CT3072253.AppTrackingLastCheckTim

e", "Tue May 29 2012 10:31:20 GMT

+0200");
Line Deleted : user_pref

("CT3072253.BrowserCompStateIsOpen

_129573915102477663", true);
Line Deleted : user_pref

("CT3072253.BrowserCompStateIsOpen

_129749445881800338", true);
Line Deleted : user_pref

("CT3072253.BrowserCompStateIsOpen

_129805375651312503", true);
Line Deleted : user_pref

("CT3072253.BrowserCompStateIsOpen

_130067979083742856", true);
Line Deleted : user_pref

("CT3072253.BrowserCompStateIsOpen

_1359634299000", true);
Line Deleted : user_pref

("CT3072253.CTID", "CT3072253");
Line Deleted : user_pref

("CT3072253.ConfigurationLastCheckTi

me", "Fri Nov 08 2013 22:06:10 GMT

+0100");
Line Deleted : user_pref

("CT3072253.CurrentServerDate", "9-

11-2013");
Line Deleted : user_pref

("CT3072253.DSInstall", false);
Line Deleted : user_pref

("CT3072253.DialogsAlignMode",

"LTR");
Line Deleted : user_pref

("CT3072253.DialogsGetterLastCheckTi

me", "Wed Nov 06 2013 12:05:32 GMT

+0100");
Line Deleted : user_pref

("CT3072253.DownloadReferralCookieD

ata", "");
Line Deleted : user_pref

("CT3072253.ENABALE_HISTORY",

"{\"dataType\":\"string\",\"data\":

\"true\"}");
Line Deleted : user_pref

("CT3072253.FirstServerDate", "23-5-

2012");
Line Deleted : user_pref

("CT3072253.FirstTime", true);
Line Deleted : user_pref

("CT3072253.FirstTimeFF3", true);
Line Deleted : user_pref

("CT3072253.FixPageNotFoundErrors",

true);
Line Deleted : user_pref

("CT3072253.GroupingServerCheckInter

val", 1440);
Line Deleted : user_pref

("CT3072253.GroupingServiceUrl",

"hxxp://grouping.services.conduit.com

/");
Line Deleted : user_pref

("CT3072253.HPInstall", false);
Line Deleted : user_pref

("CT3072253.HasUserGlobalKeys",

true);
Line Deleted : user_pref

("CT3072253.HomePageProtectorEnabl

ed", false);
Line Deleted : user_pref

("CT3072253.HomepageBeforeUnload",

"hxxp://www.seznam.cz/");
Line Deleted : user_pref

("CT3072253.Initialize", true);
Line Deleted : user_pref

("CT3072253.InitializeCommonPrefs",

true);
Line Deleted : user_pref

("CT3072253.InstallationAndCookieDat

aSentCount", 3);
Line Deleted : user_pref

("CT3072253.InstallationId",

"fft5725.tmp.exe");
Line Deleted : user_pref

("CT3072253.InstallationType", "XPE");
Line Deleted : user_pref

("CT3072253.InstalledDate", "Wed May

23 2012 14:34:12 GMT+0200");
Line Deleted : user_pref

("CT3072253.IsAlertDBUpdated", true);
Line Deleted : user_pref

("CT3072253.IsGrouping", false);
Line Deleted : user_pref

("CT3072253.IsInitSetupIni", true);
Line Deleted : user_pref

("CT3072253.IsMulticommunity",

false);
Line Deleted : user_pref

("CT3072253.IsOpenThankYouPage",

true);
Line Deleted : user_pref

("CT3072253.IsOpenUninstallPage",

false);
Line Deleted : user_pref

("CT3072253.LanguagePackLastCheckTi

me", "Fri Nov 08 2013 22:06:11 GMT

+0100");
Line Deleted : user_pref

("CT3072253.LanguagePackReloadInter

valMM", 1440);
Line Deleted : user_pref

("CT3072253.LanguagePackServiceUrl",

"hxxp://translation.users.conduit.com/

Translation.ashx");
Line Deleted : user_pref

("CT3072253.LastLogin_3.12.0.8", "Wed

May 23 2012 14:36:37 GMT+0200");
Line Deleted : user_pref

("CT3072253.LastLogin_3.12.2.3", "Wed

May 30 2012 22:50:42 GMT+0200");
Line Deleted : user_pref

("CT3072253.LastLogin_3.13.0.6", "Tue

Jul 17 2012 11:44:22 GMT+0200");
Line Deleted : user_pref

("CT3072253.LastLogin_3.14.1.0", "Tue

Aug 28 2012 12:07:36 GMT+0200");
Line Deleted : user_pref

("CT3072253.LastLogin_3.15.1.0", "Wed

Nov 07 2012 14:37:57 GMT+0100");
Line Deleted : user_pref

("CT3072253.LastLogin_3.16.0.3",

"Mon Feb 11 2013 11:50:25 GMT

+0100");
Line Deleted : user_pref

("CT3072253.LastLogin_3.18.0.7", "Tue

Jul 16 2013 10:16:10 GMT+0200");
Line Deleted : user_pref

("CT3072253.LastLogin_3.19.0.3",

"Mon Sep 09 2013 17:09:30 GMT

+0200");
Line Deleted : user_pref

("CT3072253.LastLogin_3.20.0.4", "Sat

Nov 09 2013 13:38:23 GMT+0100");
Line Deleted : user_pref

("CT3072253.LatestVersion",

"3.20.0.4");
Line Deleted : user_pref

("CT3072253.Locale", "en");
Line Deleted : user_pref

("CT3072253.MCDetectTooltipHeight",

"83");
Line Deleted : user_pref

("CT3072253.MCDetectTooltipUrl",

"hxxp://@EB_INSTALL_LINK@/rank/too

ltip/?version=1");
Line Deleted : user_pref

("CT3072253.MCDetectTooltipWidth",

"295");
Line Deleted : user_pref

("CT3072253.MyStuffEnabledAtInstalla

tion", true);
Line Deleted : user_pref

("CT3072253.OriginalFirstVersion",

"3.12.0.8");
Line Deleted : user_pref

("CT3072253.SHRINK_TOOLBAR", 1);
Line Deleted : user_pref

("CT3072253.SearchAPILastCheckTime",

"Fri Nov 08 2013 22:05:19 GMT+0100");
Line Deleted : user_pref

("CT3072253.SearchCaption",

"uTorrentControl2 Customized Web

Search");
Line Deleted : user_pref

("CT3072253.SearchEngineBeforeUnloa

d", "AVG Secure Search");
Line Deleted : user_pref

("CT3072253.SearchFromAddressBarIsI

nit", true);
Line Deleted : user_pref

("CT3072253.SearchInNewTabEnabled",

true);
Line Deleted : user_pref

("CT3072253.SearchInNewTabIntervalM

M", 1440);
Line Deleted : user_pref

("CT3072253.SearchInNewTabLastCheck

Time", "Mon Sep 09 2013 17:09:00

GMT+0200");
Line Deleted : user_pref

("CT3072253.SearchInNewTabServiceUr

l", "hxxp://newtab.conduit-

hosting.com/newtab/?

ctid=EB_TOOLBAR_ID&UM=UM_ID");
Line Deleted : user_pref

("CT3072253.SearchInNewTabURLFrom

SearchAPI",

"hxxp://search.conduit.com/?

ctid=CT3072253&octid=CT3072253&Sea

rchSource=15&CUI=SB_CUI&SSPV=EB_S

SPV&Lay=1&UM=UM_ID");
Line Deleted : user_pref

("CT3072253.SearchProtectorEnabled",

false);
Line Deleted : user_pref

("CT3072253.SearchProtectorToolbarDi

sabled", false);
Line Deleted : user_pref

("CT3072253.SendProtectorDataViaLogi

n", true);
Line Deleted : user_pref

("CT3072253.ServiceMapLastCheckTime

", "Fri Nov 08 2013 22:05:26 GMT

+0100");
Line Deleted : user_pref

("CT3072253.SettingsLastCheckTime",

"Sat Nov 09 2013 13:37:30 GMT

+0100");
Line Deleted : user_pref

("CT3072253.SettingsLastUpdate",

"1383901082");
Line Deleted : user_pref

("CT3072253.TBHomePageUrl",

"hxxp://search.conduit.com/?

ctid=CT3072253&SearchSource=13");
Line Deleted : user_pref

("CT3072253.ThirdPartyComponentsInt

erval", 504);
Line Deleted : user_pref

("CT3072253.ThirdPartyComponentsLas

tCheck", "Wed Oct 17 2012 22:32:36

GMT+0200");
Line Deleted : user_pref

("CT3072253.ThirdPartyComponentsLas

tUpdate", "1331805997");
Line Deleted : user_pref

("CT3072253.ToolbarShrinkedFromSetu

p", false);
Line Deleted : user_pref

("CT3072253.TrustedApiDomains",

"conduit.com,conduit-

hosting.com,conduit-

services.com,client.conduit-

storage.com,OurToolbar.com,Communit

yToolbars.com,ForumToolbar.com,MyBl

ogToolbar.com,MyCity[...]
Line Deleted : user_pref

("CT3072253.UserID",

"UN24214793701958772");
Line Deleted : user_pref

("CT3072253.ValidationData_Toolbar",

2);
Line Deleted : user_pref

("CT3072253._9b90e_.3c;7b=?

ofb>>rhiqs.from_oldbar.enc",

"OT81Lz4=");
Line Deleted : user_pref

("CT3072253._9b_7e.:2z527.from_oldb

ar.enc", "JCM=");
Line Deleted : user_pref

("CT3072253._9b_7e.x305.from_oldbar.

enc", "JCM=");
Line Deleted : user_pref

("CT3072253.addressBarTakeOverEnabl

edInHidden", "true");
Line Deleted : user_pref

("CT3072253.alertChannelId",

"1463702");
Line Deleted : user_pref

("CT3072253.autoDisableScopes", -1);
Line Deleted : user_pref

("CT3072253.backendstorage./9b+7e

+x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e,x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b+7e-

x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e.:2z527", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e.x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e/x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e06cg5el8:",

"6E6D6A6A6A726E6E7572");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e06cg5el;8i:k",

"247E2D2F226A74737070707874747B7

8242F4B49474F42357D5D5C3D");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e0x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e1x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e2x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e3x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e4x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e5x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e6x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e7x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e8x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e9x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e:x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e;x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e<x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e=x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e>x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b+7e?

x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7e@x305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7eax305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7ebe3g=;d9n9=d",

"372C2D326975762E3A3C7B3A39434A4

94841434B26514649296550465649657

1734D337D56545138505C");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7ebx305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7ecx305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7edx305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b

+7etx305", "2423");
Line Deleted : user_pref

("CT3072253.backendstorage./9b-0?

3g>d",

"6B3D6A406B73726E7A6F46474820474

A4E7C254F7A4F4F2A212555282A255C5

92C5A5E61");
Line Deleted : user_pref

("CT3072253.backendstorage./9b-0?

3g@6:5;", "");
Line Deleted : user_pref

("CT3072253.backendstorage./9b-0?

3gfa7ef", "2B2E2C3D");
Line Deleted : user_pref

("CT3072253.backendstorage./9b-

3=3eccja=f>",

"247E333D2C452F4135276F292A212C3

93D443078324C4142477E2B2C48574B4

8565D5C3553525C6362615A5C643F6A5

F62426D6D6D73606A634B78676B643F

6D433D333F5E70737D2[...]
Line Deleted : user_pref

("CT3072253.backendstorage./9b/>01=

9a6k6<im;krie@pdawm",

"6E6A68707374757677");
Line Deleted : user_pref

("CT3072253.backendstorage./9b3=>@

44i48?",

"372C2D3269757633423633414847203

E3D474E4D4C45474F2A554A4D2D5858

585E4B554E366352564F");
Line Deleted : user_pref

("CT3072253.backendstorage./9b5ba==

9cjag",

"6E673E3C6C6F42747A4543787A74487

B4D4D4C4F4F");
Line Deleted : user_pref

("CT3072253.backendstorage./9b6b11g

4c56b>f;p;anr@p",

"6E6D696E7374756E757774717A");
Line Deleted : user_pref

("CT3072253.backendstorage./9b90e@.

3c;7b=?ofb>>rhiqs", "393F352F3E");
Line Deleted : user_pref

("CT3072253.backendstorage./9b9643g

3/9e", "6A");
Line Deleted : user_pref

("CT3072253.backendstorage./9b;45>:b

i9i7ie", "2B2E2C3D");
Line Deleted : user_pref

("CT3072253.backendstorage./9b<:222

h64<", "393F352F3E");
Line Deleted : user_pref

("CT3072253.backendstorage./9b<:222

h64<l8daj",

"6D70706F76746C7976772A7972727A7

E757E7B");
Line Deleted : user_pref

("CT3072253.backendstorage./9b=

+03eh8h8j?:", "4443");
Line Deleted : user_pref

("CT3072253.backendstorage./9b?

+e2a52d8",

"372C2D326975762E3A3C7B3A39434A4

94841434B26514649296550465664707

27951555E5E52");
Line Deleted : user_pref

("CT3072253.backendstorage./9b?

b0d:8aj62<h", "6D");
Line Deleted : user_pref

("CT3072253.backendstorage./9ba@0<

0bi6a7gn:6@l?", "6C");
Line Deleted : user_pref

("CT3072253.backendstorage.bt_stats",

"7B226C6173745F6C6F67223A3133383

43030303730372C2275756964223A353

53933343435393530383837322C22736

5715F6964223A372C22737362223A313

335343936303338307D");
Line Deleted : user_pref

("CT3072253.backendstorage.cb_experi

ence_000", "3131");
Line Deleted : user_pref

("CT3072253.backendstorage.cb_firstus

e0100", "31");
Line Deleted : user_pref

("CT3072253.backendstorage.cb_user_i

d_000",

"43423834363033363033323937375F4

6697265666F78");
Line Deleted : user_pref

("CT3072253.backendstorage.cbcountry

_000", "435A");
Line Deleted : user_pref

("CT3072253.backendstorage.cbcountry

_001", "435A");
Line Deleted : user_pref

("CT3072253.backendstorage.cbfirsttim

e",

"576564204D617920323320323031322

031343A33363A333820474D542B30323

030");
Line Deleted : user_pref

("CT3072253.backendstorage.cbopenm

amsettings", "30");
Line Deleted : user_pref

("CT3072253.backendstorage.facebook

_mode", "32");
Line Deleted : user_pref

("CT3072253.backendstorage.facebook

_user_locale", "656E");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

appsconfig",

"7B2241707073436F6E6669677572617

4696F6E223A5B7B226964223A2245617

379746F626F6F6B5F7461726765746564

222C2275726C223A22687474703A2F2F

636F6E6430312E6[...]
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

appsdefaultenabled", "6E756C6C");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

appstate_couponbuddy", "6F6E");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

appstate_easytobook", "6F6E");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

appstate_easytobook_targeted",

"6F6E");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

appstate_pricegong", "6F6E");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

appstate_windowshopper", "6F6E");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

appstatereporttime",

"31333834303030373337363635");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

calledsetupservice", "31");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

currentversion", "312E31312E342E32");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

eventscache",

"7B2265336439343536632D663765332

D343239612D383362662D32383330323

4646436646334223A7B22746F7069632

23A2273656E645573616765222C22646

17461223A7B2263[...]
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

existingusersrecoverydone", "31");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

first_time", "31");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

gadgetopen", "30");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

globalkeysmigratedtolocalstorage",

"31");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

lastlogintime",

"31333834303030373339373036");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

localization",

"7B22676164676574436F6E74656E745

06F6C696379223A7B2254657874223A2

2436F6E74656E7420506F6C696379227

D2C22676164676574446573637269707

4696F6E5072696[...]
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

mamenabled", "66616C7365");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

new_welcome_experience", "31");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

settings1.10.4.0",

"7B22537461747573223A22737563636

565646564222C2244617461223A7B226

3757272656E7444617465223A2232303

13331313032222C22696E74657276616

C223A32343[...]
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

settings1.11.4.2",

"7B22537461747573223A22737563636

565646564222C2244617461223A7B226

3757272656E7444617465223A2232303

13331313039222C22696E74657276616

C223A32343[...]
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

showwelcomegadget", "66616C7365");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

stamp", "38345F30");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

user_approval_interacted", "31");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

userid",

"65323264623465612D373931662D346

561302D393733332D356164636266383

439653730");
Line Deleted : user_pref

("CT3072253.backendstorage.mam_gk_

welcomedialogmode", "31");
Line Deleted : user_pref

("CT3072253.backendstorage.pg_enabl

e", "74727565");
Line Deleted : user_pref

("CT3072253.backendstorage.searchap

pstate", "33");
Line Deleted : user_pref

("CT3072253.backendstorage.searchap

ptracking", "73656E74");
Line Deleted : user_pref

("CT3072253.backendstorage.sf_just_in

stalled", "46414C5345");
Line Deleted : user_pref

("CT3072253.backendstorage.sf_status"

, "454E41424C4544");
Line Deleted : user_pref

("CT3072253.backendstorage.sf_user_i

d",

"6369645F31313932303133323133313

33235363535333835");
Line Deleted : user_pref

("CT3072253.backendstorage.toolbar_p

refs",

"7B22636F6E6E5F74797065223A226C6

F63616C227D");
Line Deleted : user_pref

("CT3072253.backendstorage.url_histor

y0001",

"68747470733A2F2F7777772E676F6F67

6C652E636F6D3A3A3A636C69636B6861

6E646C65723A3A3A3133383430303132

39393634342C2C2C68747470733A2F2F

7777772E676F6F676[...]
Line Deleted : user_pref

("CT3072253.bt_stats.from_oldbar.enc"

,

"eyJsYXN0X2xvZyI6MTM4NDAwMDcw

NywidXVpZCI6NTU5MzQ0NTk1MDg4Nz

IsInNlcV9pZCI6Nywic3NiIjoxMzU0OTYw

MzgwfQ==");
Line Deleted : user_pref

("CT3072253.cb_experience_000.from_

oldbar.enc", "MTE=");
Line Deleted : user_pref

("CT3072253.cb_firstuse0100.from_old

bar.enc", "MQ==");
Line Deleted : user_pref

("CT3072253.cb_user_id_000.from_old

bar.enc",

"Q0I4NDYwMzYwMzI5NzdfRmlyZWZve

A==");
Line Deleted : user_pref

("CT3072253.cbcountry_000.from_oldb

ar.enc", "Q1o=");
Line Deleted : user_pref

("CT3072253.cbcountry_001.from_oldb

ar.enc", "Q1o=");
Line Deleted : user_pref

("CT3072253.cbfirsttime.from_oldbar.e

nc",

"V2VkIE1heSAyMyAyMDEyIDE0OjM2Oj

M4IEdNVCswMjAw");
Line Deleted : user_pref

("CT3072253.cbopenmamsettings.from

_oldbar.enc", "MA==");
Line Deleted : user_pref

("CT3072253.counterAppsAdded", 1);
Line Deleted : user_pref

("CT3072253.countryCode", "CZ");
Line Deleted : user_pref

("CT3072253.enableAlerts", "never");
Line Deleted : user_pref

("CT3072253.facebook_mode.from_old

bar.enc", "Mg==");
Line Deleted : user_pref

("CT3072253.facebook_user_locale.fro

m_oldbar.enc", "ZW4=");
Line Deleted : user_pref

("CT3072253.firstTimeDialogOpened",

true);
Line Deleted : user_pref

("CT3072253.fixPageNotFoundErrorByU

ser", "TRUE");
Line Deleted : user_pref

("CT3072253.fixPageNotFoundErrorInHi

dden", "true");
Line Deleted : user_pref

("CT3072253.fullUserID",

"UN24214793701958772.UP.202409140

651");
Line Deleted : user_pref

("CT3072253.generalConfigFromLogin",

"{\"ApiMaxAlerts\":\"12\",

\"SocialDomains\":

\"social.conduit.com;apps.conduit.com;

services.apps.conduit.com\",

\"AppsDetectionUrlPattern\":

\"hxxp://appdown[...]
Line Deleted : user_pref

("CT3072253.globalFirstTimeInfoLastCh

eckTime", "Sun Oct 21 2012 12:48:33

GMT+0200");
Line Deleted : user_pref

("CT3072253.homepageProtectorEnabl

eByLogin", true);
Line Deleted : user_pref

("CT3072253.initDone", true);
Line Deleted : user_pref

("CT3072253.installId",

"fft5725.tmp.exe");
Line Deleted : user_pref

("CT3072253.installType", "XPE");
Line Deleted : user_pref

("CT3072253.isAppTrackingManagerOn

", false);
Line Deleted : user_pref

("CT3072253.isCheckedStartAsHidden",

true);
Line Deleted : user_pref

("CT3072253.isEnableAllDialogs",

"{\"dataType\":\"string\",\"data\":

\"true\"}");
Line Deleted : user_pref

("CT3072253.isFirstTimeToolbarLoading

", "false");
Line Deleted : user_pref

("CT3072253.isPerformedSmartBarTran

sition", "true");
Line Deleted : user_pref

("CT3072253.isToolbarShrinked",

"{\"dataType\":\"string\",\"data\":

\"false\"}");
Line Deleted : user_pref

("CT3072253.keyword", true);
Line Deleted : user_pref

("CT3072253.lastVersion",

"10.20.101.5");
Line Deleted : user_pref

("CT3072253.mam_gk_appsconfig.from

_oldbar.enc",

"eyJBcHBzQ29uZmlndXJhdGlvbiI6W3sia

WQiOiJFYXN5dG9ib29rX3RhcmdldGVkIi

widXJsIjoiaHR0cDovL2NvbmQwMS5ldG

J4bWwuY29tL2NvbmR1aXRfYnVuZGxlL3

dlYi9jaGVhcC[...]
Line Deleted : user_pref

("CT3072253.mam_gk_appsdefaultena

bled.from_oldbar.enc", "bnVsbA==");
Line Deleted : user_pref

("CT3072253.mam_gk_appstate_coupo

nbuddy.from_oldbar.enc", "b24=");
Line Deleted : user_pref

("CT3072253.mam_gk_appstate_easyto

book.from_oldbar.enc", "b24=");
Line Deleted : user_pref

("CT3072253.mam_gk_appstate_easyto

book_targeted.from_oldbar.enc",

"b24=");
Line Deleted : user_pref

("CT3072253.mam_gk_appstate_priceg

ong.from_oldbar.enc", "b24=");
Line Deleted : user_pref

("CT3072253.mam_gk_appstate_windo

2 část

wshopper.from_oldbar.enc", "b24=");
Line Deleted : user_pref

("CT3072253.mam_gk_appstatereportti

me.from_oldbar.enc",

"MTM4NDAwMDczNzY2NQ==");
Line Deleted : user_pref

("CT3072253.mam_gk_calledsetupservi

ce.from_oldbar.enc", "MQ==");
Line Deleted : user_pref

("CT3072253.mam_gk_currentversion.f

rom_oldbar.enc", "MS4xMS40LjI=");
Line Deleted : user_pref

("CT3072253.mam_gk_eventscache.fro

m_oldbar.enc",

"eyJlM2Q5NDU2Yy1mN2UzLTQyOWEtO

DNiZi0yODMwMjRkZDZkYzQiOnsidG9w

aWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7I

mNhdGVnb3J5IjoiV2VsY29tZSIsImFjdGl

vbiI6IlZpZXciL[...]
Line Deleted : user_pref

("CT3072253.mam_gk_existingusersrec

overydone.from_oldbar.enc", "MQ==");
Line Deleted : user_pref

("CT3072253.mam_gk_first_time.from_

oldbar.enc", "MQ==");
Line Deleted : user_pref

("CT3072253.mam_gk_gadgetopen.fro

m_oldbar.enc", "MA==");
Line Deleted : user_pref

("CT3072253.mam_gk_globalkeysmigra

tedtolocalstorage.from_oldbar.enc",

"MQ==");
Line Deleted : user_pref

("CT3072253.mam_gk_installer_preapp

roved.enc", "ZmFsc2U=");
Line Deleted : user_pref

("CT3072253.mam_gk_lastlogintime.fr

om_oldbar.enc",

"MTM4NDAwMDczOTcwNg==");
Line Deleted : user_pref

("CT3072253.mam_gk_localization.fro

m_oldbar.enc",

"eyJnYWRnZXRDb250ZW50UG9saWN5I

jp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9L

CJnYWRnZXREZXNjcmlwdGlvblByaW1hc

nkiOnsiVGV4dCI6IlZhbHVlIEFwcHMgZW

5yaWNoZXMg[...]
Line Deleted : user_pref

("CT3072253.mam_gk_mamenabled.fr

om_oldbar.enc", "ZmFsc2U=");
Line Deleted : user_pref

("CT3072253.mam_gk_new_welcome_e

xperience.from_oldbar.enc", "MQ==");
Line Deleted : user_pref

("CT3072253.mam_gk_showwelcomeg

adget.from_oldbar.enc", "ZmFsc2U=");
Line Deleted : user_pref

("CT3072253.mam_gk_stamp.from_old

bar.enc", "ODRfMA==");
Line Deleted : user_pref

("CT3072253.mam_gk_user_approval_i

nteracted.from_oldbar.enc", "MQ==");
Line Deleted : user_pref

("CT3072253.mam_gk_userid.from_old

bar.enc",

"ZTIyZGI0ZWEtNzkxZi00ZWEwLTk3MzM

tNWFkY2JmODQ5ZTcw");
Line Deleted : user_pref

("CT3072253.mam_gk_welcomedialog

mode.from_oldbar.enc", "MQ==");
Line Deleted : user_pref

("CT3072253.myStuffEnabled", true);
Line Deleted : user_pref

("CT3072253.myStuffPublihserMinWidt

h", 400);
Line Deleted : user_pref

("CT3072253.myStuffSearchUrl",

"hxxp://Apps.conduit.com/search?

q=SEARCH_TERM&SearchSourceOrigin=

29&ctid=EB_TOOLBAR_ID&octid=EB_OR

IGINAL_CTID");
Line Deleted : user_pref

("CT3072253.myStuffServiceIntervalM

M", 1440);
Line Deleted : user_pref

("CT3072253.myStuffServiceUrl",

"hxxp://mystuff.conduit-

services.com/MyStuffService.ashx?

ComponentId=EB_MY_STUFF_INSTANCE

_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref

("CT3072253.navigateToUrlOnSearch",

false);
Line Deleted : user_pref

("CT3072253.navigationAliasesJson",

"{\"EB_MAIN_FRAME_URL\":\"hxxps

%3A%2F%2Fwww.facebook.com%2F

%3Fstype%3Dlo%26jlou

%3DAfdgumQX4fD4aYdASVZGov6LfMe

gAknqvIfRkW4rM7L2opcwj6OcEdul397s

LlmCPzVdEBScs[...]
Line Deleted : user_pref

("CT3072253.oldAppsList",

"129295695672325902,1295718597539

31591,111,129593762370823811,12980

5375651312503,129749445881800338,

129573915102477663,1000080,100051

5,1000,1001,1002,1003,1004,1005,[...]
Line Deleted : user_pref

("CT3072253.originalHomepage",

"hxxp://start.facemoods.com/?

a=wbsttst2");
Line Deleted : user_pref

("CT3072253.originalSearchAddressUrl"

, "");
Line Deleted : user_pref

("CT3072253.originalSearchEngine",

"Facemoods Search");
Line Deleted : user_pref

("CT3072253.pg_enable.from_oldbar.e

nc", "dHJ1ZQ==");
Line Deleted : user_pref

("CT3072253.revertSettingsEnabled",

true);
Line Deleted : user_pref

("CT3072253.searchFromAddressBarEn

abledByUser", "true");
Line Deleted : user_pref

("CT3072253.searchInNewTabEnabledB

yUser", "true");
Line Deleted : user_pref

("CT3072253.searchInNewTabEnabledIn

Hidden", "true");
Line Deleted : user_pref

("CT3072253.searchProtectorDialogDel

ayInSec", 10);
Line Deleted : user_pref

("CT3072253.searchProtectorEnableByL

ogin", true);
Line Deleted : user_pref

("CT3072253.searchSuggestEnabledByU

ser", "true");
Line Deleted : user_pref

("CT3072253.searchappstate.from_oldb

ar.enc", "Mw==");
Line Deleted : user_pref

("CT3072253.searchapptracking.from_o

ldbar.enc", "c2VudA==");
Line Deleted : user_pref

("CT3072253.selectToSearchBoxEnabled

", "{\"dataType\":\"string\",\"data\":

\"true\"}");
Line Deleted : user_pref

("CT3072253.serviceLayer_service_login

_isFirstLoginInvoked", "{\"dataType\":

\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref

("CT3072253.serviceLayer_service_login

_loginCount", "{\"dataType\":

\"number\",\"data\":\"4\"}");
Line Deleted : user_pref

("CT3072253.serviceLayer_service_tool

barGrouping_activeCTID",

"{\"dataType\":\"string\",\"data\":

\"CT3072253\"}");
Line Deleted : user_pref

("CT3072253.serviceLayer_service_tool

barGrouping_activeDownloadUrl",

"{\"dataType\":\"string\",\"data\":

\"hxxp://uTorrentControl2.OurToolbar.

com//xpi\"}");
Line Deleted : user_pref

("CT3072253.serviceLayer_service_tool

barGrouping_activeToolbarName",

"{\"dataType\":\"string\",\"data\":

\"uTorrentControl2 \"}");
Line Deleted : user_pref

("CT3072253.serviceLayer_service_tool

barGrouping_invoked", "{\"dataType

\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref

("CT3072253.serviceLayer_service_usag

e_toolbarUsageCount", "{\"dataType

\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref

("CT3072253.serviceLayer_services_Con

figuration_lastUpdate",

"1385990131632");
Line Deleted : user_pref

("CT3072253.serviceLayer_services_logi

n_10.20.101.5_lastUpdate",

"1385990127305");
Line Deleted : user_pref

("CT3072253.serviceLayer_services_sea

rchAPI_lastUpdate",

"1385990126851");
Line Deleted : user_pref

("CT3072253.serviceLayer_services_ser

viceMap_lastUpdate",

"1385990126837");
Line Deleted : user_pref

("CT3072253.serviceLayer_services_tool

barSettings_lastUpdate",

"1385997327158");
Line Deleted : user_pref

("CT3072253.serviceLayer_services_tra

nslation_lastUpdate",

"1385990129413");
Line Deleted : user_pref

("CT3072253.settingsINI", true);
Line Deleted : user_pref

("CT3072253.sf_just_installed.from_old

bar.enc", "RkFMU0U=");
Line Deleted : user_pref

("CT3072253.sf_status.from_oldbar.enc

", "RU5BQkxFRA==");
Line Deleted : user_pref

("CT3072253.sf_user_id.from_oldbar.en

c",

"Y2lkXzExOTIwMTMyMTMxMzI1NjU1M

zg1");
Line Deleted : user_pref

("CT3072253.showToolbarPermission",

"false");
Line Deleted : user_pref

("CT3072253.smartbar.CTID",

"CT3072253");
Line Deleted : user_pref

("CT3072253.smartbar.Uninstall", "0");
Line Deleted : user_pref

("CT3072253.smartbar.toolbarName",

"uTorrentControl2 ");
Line Deleted : user_pref

("CT3072253.testingCtid", "");
Line Deleted : user_pref

("CT3072253.toolbarAppMetaDataLast

CheckTime", "Fri Nov 08 2013 22:06:17

GMT+0100");
Line Deleted : user_pref

("CT3072253.toolbarBornServerTime",

"23-5-2012");
Line Deleted : user_pref

("CT3072253.toolbarContextMenuLastC

heckTime", "Wed Oct 10 2012 22:35:30

GMT+0200");
Line Deleted : user_pref

("CT3072253.toolbarCurrentServerTime

", "2-12-2013");
Line Deleted : user_pref

("CT3072253.toolbarDisabled", "true");
Line Deleted : user_pref

("CT3072253.toolbarLoginClientTime",

"Sat Nov 09 2013 17:14:07 GMT

+0100");
Line Deleted : user_pref

("CT3072253.toolbar_prefs.from_oldbar

.enc",

"eyJjb25uX3R5cGUiOiJsb2NhbCJ9");
Line Deleted : user_pref

("CT3072253.upgradeFromOBVersion",

true);
Line Deleted : user_pref

("CT3072253.url_history0001.from_old

bar.enc",

"aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo

6OmNsaWNraGFuZGxlcjo6OjEzODQwM

DEyOTk2NDQsLCxodHRwczovL3d3dy5n

b29nbGUuY29tOjo6Y2xpY2toYW5kbGV

yOjo6MTM4NDAwMTMwMDE1[...]
Line Deleted : user_pref

("CT3072253.usagesFlag", 2);
Line Deleted : user_pref

("CT3072253_Firefox.csv", "[{\"from

\":\"Abs Layer\",\"action\":\"loading

toolbar\",\"time\":1385996587655,

\"isWithState\":\"\",\"timeFromStart

\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref

("CT3289075.BT_Stats.enc",

"eyJsYXN0X2xvZyI6MTM4NTk5NDcyNS

widXVpZCI6OTE2Mzk4Nzk4NDA4MTExL

CJzZXFfaWQiOjEsInNzYiI6MTM4NTk5N

DcyNX0=");
Line Deleted : user_pref

("CT3289075.BT_Usage.enc",

"eyJ1dWlkIjo5MTYzOTg3OTg0MDgxMT

EsInNlcV9pZCI6MX0=");
Line Deleted : user_pref

("CT3289075.ENABALE_HISTORY",

"{\"dataType\":\"string\",\"data\":

\"true\"}");
Line Deleted : user_pref

("CT3289075.ENABLE_RETURN_WEB_SE

ARCH_ON_THE_PAGE", "{\"dataType

\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref

("CT3289075.FF19Solved", "true");
Line Deleted : user_pref

("CT3289075.Facebook_Mode.enc",

"Mg==");
Line Deleted : user_pref

("CT3289075.Facebook_User_Locale.en

c", "ZW4=");
Line Deleted : user_pref

("CT3289075.FirstTime", "true");
Line Deleted : user_pref

("CT3289075.FirstTimeFF3", "true");
Line Deleted : user_pref

("CT3289075.PG_ENABLE",

"dHJ1ZQ==");
Line Deleted : user_pref

("CT3289075.SF_JUST_INSTALLED",

"%CC%C7%D2%D9%CB");
Line Deleted : user_pref

("CT3289075.SF_JUST_INSTALLED.enc",

"RkFMU0U=");
Line Deleted : user_pref

("CT3289075.SF_STATUS", "%CB

%D4%C7%C8%D2%CB%CA");
Line Deleted : user_pref

("CT3289075.SF_STATUS.enc",

"RU5BQkxFRA==");
Line Deleted : user_pref

("CT3289075.SF_USER_ID", "%E9%EF

%EA

%E5%B8%B7%B8%B8%B6%B7%B9%B7

%BB%B9%B8%B8%BB%BF%B7%BD

%BA%B7%B8%B7");
Line Deleted : user_pref

("CT3289075.SF_USER_ID.enc",

"Y2lkXzIxMjIwMTMxNTMyMjU5MTc0M

TIx");
Line Deleted : user_pref

("CT3289075.UserID",

"UN25450354131411286");
Line Deleted : user_pref

("CT3289075._key_cl_active", "%BD

%E8%BD%E8%B8%BA%BA%BF

%B3%BF%BE%EC%BF%B3%BA%BA

%EB%B9%B3%BE%BF%B6%B8%B3%EA

%BD%BD%BC%B8%BC%B6%BF%BE

%E7%BF%BD");
Line Deleted : user_pref

("CT3289075._key_cl_active.enc",

"N2I3YjI0NDktOThmOS00NGUzLTg5MDI

tZDc3NjI2MDk4YTk3");
Line Deleted : user_pref

("CT3289075.addressBarTakeOverEnabl

edInHidden", "true");
Line Deleted : user_pref

("CT3289075.browser.search.defaultthi

s.engineName", "true");
Line Deleted : user_pref

("CT3289075.cbfirsttime",

"%D3%F5%F4%A6%CA%EB

%E9%A6%B6%B8%A6%B8%B6%B7%B9

%A6%B7%BB

%C0%B9%B8%C0%B7%BB%A6%CD

%D3%DA%B1%B6%B7%B6%B6");
Line Deleted : user_pref

("CT3289075.cbfirsttime.enc",

"TW9uIERlYyAwMiAyMDEzIDE1OjMyOj

E1IEdNVCswMTAw");
Line Deleted : user_pref

("CT3289075.countryCode", "CZ");
Line Deleted : user_pref

("CT3289075.defaultSearch", "true");
Line Deleted : user_pref

("CT3289075.embeddedsData",

"[{\"appId\":

\"130064539389933152\",

\"apiPermissions\":

{\"crossDomainAjax\":true,

\"getMainFrameTitle\":true,

\"getMainFrameUrl\":true,

\"getSearchTerm\":true,\"insta[...]
Line Deleted : user_pref

("CT3289075.enableSearchFromAddress

Bar", "true");
Line Deleted : user_pref

("CT3289075.firstTimeDialogOpened",

"true");
Line Deleted : user_pref

("CT3289075.fixPageNotFoundErrorByU

ser", "TRUE");
Line Deleted : user_pref

("CT3289075.fixPageNotFoundErrorInHi

dden", "true");
Line Deleted : user_pref

("CT3289075.fullUserID",

"UN25450354131411286.IN.201312021

52520");
Line Deleted : user_pref

("CT3289075.hxxp___facebook_conduit

apps_com.APP_WIN_FEATURES.enc",

"cmVzaXphYmxlPTAsaHNjcm9sbD0wLH

ZzY3JvbGw9MCx0aXRsZWJhcj0xLGNsb3

NlYnV0dG9uPTEsc2F2ZXJlc2l6ZWRzaXpl

PTAsb3BlbnBvc2l0aW9uPWFsaWd[...]
Line Deleted : user_pref

("CT3289075.hxxp___toolbar_utorrent_

com.APP_WIN_FEATURES.enc",

"cmVzaXphYmxlPTAsc2F2ZXJlc2l6ZWRz

aXplPTAsdGl0bGViYXI9MCxjbG9zZW9uZ

Xh0ZXJuYWxjbGljaz0xLHNhdmVsb2Nhd

Glvbj0wLG9wZW5wb3NpdGlvbj1vZmZ

[...]
Line Deleted : user_pref

("CT3289075.installDate", "02/12/2013

15:25:22");
Line Deleted : user_pref

("CT3289075.installSessionId", "-1");
Line Deleted : user_pref

("CT3289075.installSp", "FALSE");
Line Deleted : user_pref

("CT3289075.installType", "xpe");
Line Deleted : user_pref

("CT3289075.installUsage", "2013-12-

02T17:32:00.5338567+03:00");
Line Deleted : user_pref

("CT3289075.installUsageEarly", "2013

-12-02T17:31:59.0385685+03:00");
Line Deleted : user_pref

("CT3289075.installerVersion",

"1.8.1.4");
Line Deleted : user_pref

("CT3289075.isCheckedStartAsHidden",

true);
Line Deleted : user_pref

("CT3289075.isEnableAllDialogs",

"{\"dataType\":\"string\",\"data\":

\"true\"}");
Line Deleted : user_pref

("CT3289075.isFirstTimeToolbarLoading

", "false");
Line Deleted : user_pref

("CT3289075.isToolbarShrinked",

"{\"dataType\":\"string\",\"data\":

\"false\"}");
Line Deleted : user_pref

("CT3289075.isWelcomPage",

"{\"dataType\":\"boolean\",\"data\":

\"true\"}");
Line Deleted : user_pref

("CT3289075.keyword", "true");
Line Deleted : user_pref

("CT3289075.lastVersion",

"10.22.3.18");
Line Deleted : user_pref

("CT3289075.mam_gk_appStateReport

Time", "%B7%B9%BE%BB%BF%BF%BA

%BD%B8%BC%BB%B6%B7");
Line Deleted : user_pref

("CT3289075.mam_gk_appStateReport

Time.enc",

"MTM4NTk5NDcyNjUwMQ==");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_Clarity

_Active", "%F5%F4");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_Clarity

_Active.enc", "b24=");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_Coupo

nBuddy", "%F5%F4");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_Coupo

nBuddy.enc", "b24=");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_Easyto

book", "%F5%F4");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_Easyto

book.enc", "b24=");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_Easyto

book_targeted", "%F5%F4");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_Easyto

book_targeted.enc", "b24=");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_PriceG

ong", "%F5%F4");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_PriceG

ong.enc", "b24=");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_Wind

owShopper", "%F5%F4");
Line Deleted : user_pref

("CT3289075.mam_gk_appState_Wind

owShopper.enc", "b24=");
Line Deleted : user_pref

("CT3289075.mam_gk_appsConfig.enc"

,

"eyJBcHBzQ29uZmlndXJhdGlvbiI6W3sia

WQiOiJDbGFyaXR5X0FjdGl2ZSIsInVybCI

6Imh0dHA6Ly9zdG9yYWdlLmNvbmR1a

XQuY29tL21hbS8zcmRwYXJ0eWFwcHM

vY2xhcml0eVJheS9jcl9hY3Rpdm[...]
Line Deleted : user_pref

("CT3289075.mam_gk_appsDefaultEna

bled", "%FA%F8%FB%EB");
Line Deleted : user_pref

("CT3289075.mam_gk_appsDefaultEna

bled.enc", "dHJ1ZQ==");
Line Deleted : user_pref

("CT3289075.mam_gk_calledSetupServi

ce", "%B7");
Line Deleted : user_pref

("CT3289075.mam_gk_calledSetupServi

ce.enc", "MQ==");
Line Deleted : user_pref

("CT3289075.mam_gk_currentVersion",

"%B7%B4%B7%B7%B4%BB%B4%B7");
Line Deleted : user_pref

("CT3289075.mam_gk_currentVersion.e

nc", "MS4xMS41LjE=");
Line Deleted : user_pref

("CT3289075.mam_gk_eventsCache",

"%u0101%A8%BA%EB%EA%BB

%E8%EB%BB%BF%B3%B8%E9%B6%BB

%B3%BA%B8%B6%E8%B3%BF

%B8%E7%BE%B3%B6%BB%E9%B6%EA

%BE%E7%B9%EB%EB%B9%EC

%A8%C0%u0101%A8%FA%F5%F6%EF

%E9%A8%C0%A8%[...]
Line Deleted : user_pref

("CT3289075.mam_gk_eventsCache.enc

",

"eyI0ZWQ1YmU1OS0yYzA1LTQyMGItOT

JhOC0wNWMwZDhhM2VlM2YiOnsidG9

waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp

7ImNhdGVnb3J5IjoiV2VsY29tZSIsImFjd

GlvbiI6IlZpZXciLCJsYWJlbCI6I[...]
Line Deleted : user_pref

("CT3289075.mam_gk_existingUsersRe

coveryDone", "%B7");
Line Deleted : user_pref

("CT3289075.mam_gk_existingUsersRe

coveryDone.enc", "MQ==");
Line Deleted : user_pref

("CT3289075.mam_gk_first_time",

"%B7");
Line Deleted : user_pref

("CT3289075.mam_gk_first_time.enc",

"MQ==");
Line Deleted : user_pref

("CT3289075.mam_gk_gadgetOpen",

"%B6");
Line Deleted : user_pref

("CT3289075.mam_gk_gadgetOpen.enc

", "MA==");
Line Deleted : user_pref

("CT3289075.mam_gk_globalKeysMigr

atedToLocalStorage", "%B7");
Line Deleted : user_pref

("CT3289075.mam_gk_globalKeysMigr

atedToLocalStorage.enc", "MQ==");
Line Deleted : user_pref

("CT3289075.mam_gk_lastLoginTime",

"%B7%B9%BE%BB%BF%BF%BA%BD

%B8%BC%BF%BE%BC");
Line Deleted : user_pref

("CT3289075.mam_gk_lastLoginTime.e

nc", "MTM4NTk5NDcyNjk4Ng==");
Line Deleted : user_pref

("CT3289075.mam_gk_localization.enc"

,

"eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifS

wiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcb

m9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRl

eHQiOiJGcmVlXHJcblNoaXBtZW50In0sI

mRtYnVsbGV0MSI6[...]
Line Deleted : user_pref

("CT3289075.mam_gk_mamEnabled",

"%EC%E7%F2%F9%EB");
Line Deleted : user_pref

("CT3289075.mam_gk_mamEnabled.en

c", "ZmFsc2U=");
Line Deleted : user_pref

("CT3289075.mam_gk_new_welcome_e

xperience", "%B7");
Line Deleted : user_pref

("CT3289075.mam_gk_new_welcome_e

xperience.enc", "MQ==");
Line Deleted : user_pref

("CT3289075.mam_gk_pgUnloadedOnc

e", "%FA%F8%FB%EB");
Line Deleted : user_pref

("CT3289075.mam_gk_pgUnloadedOnc

e.enc", "dHJ1ZQ==");
Line Deleted : user_pref

("CT3289075.mam_gk_settings1.11.5.1

", "%u0101%A8%D9%FA%E7%FA%FB

%F9%A8%C0%A8%F9%FB%E9%E9%EB

%EB%EA%EB%EA%A8%B2%A8%CA

%E7%FA

%E7%A8%C0%u0101%A8%E9%FB

%F8%F8%EB%F4%FA%CA%E7%FA%EB

%A8%C0%A8%B8%B6%B7%B[...]
Line Deleted : user_pref

("CT3289075.mam_gk_settings1.11.5.1.

enc",

"eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJ

EYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxM

zEyMDIiLCJpbnRlcnZhbCI6MjQwLCJzdGF

tcCI6Ijg0XzAiLCJpc1Rlc3QiOnRydWUsIlV

zZXJDb3VudHJ5[...]
Line Deleted : user_pref

("CT3289075.mam_gk_showWelcomeG

adget", "%FA%F8%FB%EB");
Line Deleted : user_pref

("CT3289075.mam_gk_showWelcomeG

adget.enc", "dHJ1ZQ==");
Line Deleted : user_pref

("CT3289075.mam_gk_stamp", "%BE

%BA%E5%B6");
Line Deleted : user_pref

("CT3289075.mam_gk_stamp.enc",

"ODRfMA==");
Line Deleted : user_pref

("CT3289075.mam_gk_userId", "%BB

%BE%B6%BA%BB%EC

%E7%B8%B3%BB%BA%BF

%E8%B3%BA%EA%E8%BC%B3%BF

%E8%BC%BB%B3%B9%BC%B6%EB

%BA%B6%BF%EB%B9%E9%BD%E8");
Line Deleted : user_pref

("CT3289075.mam_gk_userId.enc",

"NTgwNDVmYTItNTQ5Yi00ZGI2LTliNjUt

MzYwZTQwOWUzYzdi");
Line Deleted : user_pref

("CT3289075.mam_gk_user_approval_i

nteracted", "%B7");
Line Deleted : user_pref

("CT3289075.mam_gk_user_approval_i

nteracted.enc", "MQ==");
Line Deleted : user_pref

("CT3289075.mam_gk_welcomeDialog

Mode", "%B7");
Line Deleted : user_pref

("CT3289075.mam_gk_welcomeDialog

Mode.enc", "MQ==");
Line Deleted : user_pref

("CT3289075.navigationAliasesJson",

"{\"EB_MAIN_FRAME_URL\":\"hxxps

%3A%2F%2Fwww.facebook.com%2F

%3Fstype%3Dlo%26jlou

%3DAfdgumQX4fD4aYdASVZGov6LfMe

gAknqvIfRkW4rM7L2opcwj6OcEdul397s

LlmCPzVdEBScs[...]
Line Deleted : user_pref

("CT3289075.openThankYouPage",

"true");
Line Deleted : user_pref

("CT3289075.openUninstallPage",

"false");
Line Deleted : user_pref

("CT3289075.originalSearchAddressUrl"

,

"hxxp://search.conduit.com/ResultsExt.

aspx?

ctid=CT3314481&SearchSource=2&CUI=

UN35668428492382754&UM=1&q=");
Line Deleted : user_pref

("CT3289075.originalSearchEngine",

"Google");
Line Deleted : user_pref

("CT3289075.originalSearchEngineNam

e", "Google");
Line Deleted : user_pref

("CT3289075.price-

gong.isManagedApp", "true");
Line Deleted : user_pref

("CT3289075.revertSettingsEnabled",

"FALSE");
Line Deleted : user_pref

("CT3289075.search.searchAppId",

"130064539389933152");
Line Deleted : user_pref

("CT3289075.search.searchCount", "0");
Line Deleted : user_pref

("CT3289075.searchFromAddressBarEn

abledByUser", "true");
Line Deleted : user_pref

("CT3289075.searchInNewTabEnabledB

yUser", "false");
Line Deleted : user_pref

("CT3289075.searchInNewTabEnabledIn

Hidden", "true");
Line Deleted : user_pref

("CT3289075.searchRevert", "FALSE");
Line Deleted : user_pref

("CT3289075.searchSuggestEnabledByU

ser", "true");
Line Deleted : user_pref

("CT3289075.searchUninstallUserMode

", "1");
Line Deleted : user_pref

("CT3289075.searchUserMode", "1");
Line Deleted : user_pref

("CT3289075.selectToSearchBoxEnabled

", "{\"dataType\":\"string\",\"data\":

\"true\"}");
Line Deleted : user_pref

("CT3289075.serviceLayer_service_login

_isFirstLoginInvoked", "{\"dataType\":

\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref

("CT3289075.serviceLayer_service_login

_loginCount", "{\"dataType\":

\"number\",\"data\":\"2\"}");
Line Deleted : user_pref

("CT3289075.serviceLayer_service_tool

barGrouping_activeCTID",

"{\"dataType\":\"string\",\"data\":

\"CT3289075\"}");
Line Deleted : user_pref

("CT3289075.serviceLayer_service_tool

barGrouping_activeDownloadUrl",

"{\"dataType\":\"string\",\"data\":

\"hxxp://uTorrentControlv6.OurToolbar

.com//xpi\"}");
Line Deleted : user_pref

("CT3289075.serviceLayer_service_tool

barGrouping_activeToolbarName",

"{\"dataType\":\"string\",\"data\":

\"uTorrentControl_v6 \"}");
Line Deleted : user_pref

("CT3289075.serviceLayer_service_tool

barGrouping_invoked", "{\"dataType

\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref

("CT3289075.serviceLayer_service_usag

e_toolbarUsageCount", "{\"dataType

\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_Con

figuration_lastUpdate",

"1385994722815");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_app

TrackingFirstTime_lastUpdate",

"1385994722924");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_app

sMetadata_lastUpdate",

"1385994722807");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_go

ttenAppsContextMenu_lastUpdate",

"1385994721172");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_inst

allUsage_ToolbarInstallEarly_lastUpdat

e", "1385994719974");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_inst

allUsage_ToolbarInstall_lastUpdate",

"1385994721469");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_logi

n_10.22.3.18_lastUpdate",

"1385994722819");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_oth

erAppsContextMenu_lastUpdate",

"1385994721237");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_sea

rchAPI_lastUpdate",

"1385994719718");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_ser

viceMap_lastUpdate",

"1385994717554");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_tool

barContextMenu_lastUpdate",

"1385994721136");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_tool

barSettings_lastUpdate",

"1385994719874");
Line Deleted : user_pref

("CT3289075.serviceLayer_services_tra

nslation_lastUpdate",

"1385994722899");
Line Deleted : user_pref

("CT3289075.settingsINI", true);
Line Deleted : user_pref

("CT3289075.shouldFirstTimeDialog",

"false");
Line Deleted : user_pref

("CT3289075.showToolbarPermission",

"false");
Line Deleted : user_pref

("CT3289075.smartbar.CTID",

"CT3289075");
Line Deleted : user_pref

("CT3289075.smartbar.Uninstall", "0");
Line Deleted : user_pref

("CT3289075.smartbar.toolbarName",

"uTorrentControl_v6 ");
Line Deleted : user_pref

("CT3289075.startPage", "false");
Line Deleted : user_pref

("CT3289075.toolbarBornServerTime",

"2-12-2013");
Line Deleted : user_pref

("CT3289075.toolbarCurrentServerTime

", "2-12-2013");
Line Deleted : user_pref

("CT3289075.toolbarDisabled", "true");
Line Deleted : user_pref

("CT3289075.toolbarInstallDate", "02-

12-2013 15:25:20");
Line Deleted : user_pref

("CT3289075.toolbarLoginClientTime",

"Mon Dec 02 2013 15:32:02 GMT

+0100");
Line Deleted : user_pref

("CT3289075.url_history0001", "%EE

%FA%FA%F6%F9%C0%B5%B5%FD%FD

%FD%B4%EC%E7%E9%EB

%E8%F5%F5%F1%B4%E9%F5%F3%B5%

C5%F8%EB%EC%C3%FA%F4%E5%FA

%F4%F3%F4%C0%C0%C0%E9%F2%EF

%E9%F1%EE%E7%F4%EA%F2%EB

%F8%C0%[...]
Line Deleted : user_pref

("CT3289075.url_history0001.enc",

"aHR0cHM6Ly93d3cuZmFjZWJvb2suY29

tLz9yZWY9dG5fdG5tbjo6OmNsaWNraG

FuZGxlcjo6OjEzODU5OTk2ODM5MjQsLC

xodHRwczovL3d3dy5mYWNlYm9vay5jb

20vP3JlZj10bl90bm1uOjo6Y2xpY2to[...]
Line Deleted : user_pref

("CT3289075.versionFromInstaller",

"10.22.3.18");
Line Deleted : user_pref

("CT3289075.xpeMode", "0");
Line Deleted : user_pref

("CT3289075_Firefox.csv", "[{\"from

\":\"Abs Layer\",\"action\":\"loading

toolbar\",\"time\":1385996587675,

\"isWithState\":\"\",\"timeFromStart

\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref

("CT3314481.FF19Solved", "true");
Line Deleted : user_pref

("CT3314481.UserID",

"UN35668428492382754");
Line Deleted : user_pref

("CT3314481.browser.search.defaultthi

s.engineName", "true");
Line Deleted : user_pref

("CT3314481.fullUserID",

"UN35668428492382754.IN.201312011

94043");
Line Deleted : user_pref

("CT3314481.installDate", "01/12/2013

19:40:45");
Line Deleted : user_pref

("CT3314481.installSessionId",

"{69F448B3-727C-47C1-866D-

B8E8BEF5151E}");
Line Deleted : user_pref

("CT3314481.installSp", "false");
Line Deleted : user_pref

("CT3314481.installerVersion",

"1.8.1.4");
Line Deleted : user_pref

("CT3314481.keyword", "true");
Line Deleted : user_pref

("CT3314481.originalHomepage",

"hxxp://www.google.com");
Line Deleted : user_pref

("CT3314481.originalSearchAddressUrl"

,

"hxxp://search.conduit.com/ResultsExt.

aspx?

ctid=CT3072253&SearchSource=2&CUI=

UN24214793701958772&UM=&q=");
Line Deleted : user_pref

("CT3314481.originalSearchEngine",

"Google");
Line Deleted : user_pref

("CT3314481.originalSearchEngineNam

e", "Google");
Line Deleted : user_pref

("CT3314481.searchRevert", "false");
Line Deleted : user_pref

("CT3314481.searchUninstallUserMode

", "1");
Line Deleted : user_pref

("CT3314481.searchUserMode", "1");
Line Deleted : user_pref

("CT3314481.smartbar.homepage",

"true");
Line Deleted : user_pref

("CT3314481.toolbarInstallDate", "01-

12-2013 19:40:44");
Line Deleted : user_pref

("CT3314481.versionFromInstaller",

"10.22.5.10");
Line Deleted : user_pref

("CT3314481.xpeMode", "0");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://Settin

gs.toolbar.search.conduit.com/root/CT

2438727/CT2438727",

"\"5df12e7f8b67f7523769596a48640eb

23\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://Settin

gs.toolbar.search.conduit.com/root/CT

3072253/CT3072253",

"\"dee956085d02ea0c080e2fd6614cf66

e3\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://apps

metadata.toolbar.conduit-

services.com/?ctid=CT2438727",

"\"0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://apps

metadata.toolbar.conduit-

services.com/?ctid=CT3072253",

"\"1362324308\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://conte

xtmenu.toolbar.conduit-

services.com/?

name=GottenApps&locale=en",

"G9mW7heT/8xIX1frcduu0A==");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://conte

xtmenu.toolbar.conduit-

services.com/?

name=OtherApps&locale=en",

"2E1/v7EfCEDbv3VaBQMELg==");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://conte

xtmenu.toolbar.conduit-

services.com/?

name=SharedApps&locale=en",

"UgzXjW7BIkfdx+x39Ruv3w==");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://conte

xtmenu.toolbar.conduit-

services.com/?

name=Toolbar&locale=en",

"4BgM4MhF/sOgPsDNmIs3Yw==");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.alert.conduit-

services.com/alert/dlg.pkg",

"\"8076e3ce381dcd1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.10.0.1",

"\"4ead38b3e6bcd1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.12.0.7",

"\"4ead38b3e6bcd1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.12.0.8",

"\"4ead38b3e6bcd1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.12.2.3",

"\"4ead38b3e6bcd1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.13.0.6",

"\"0d648794549cd1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.14.1.0",

"\"0e0a4327275cd1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.15.1.0",

"\"0343677cfb1cd1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.16.0.3",

"\"0343677cfb1cd1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.18.0.7",

"\"0343677cfb1cd1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.19.0.3",

"\"23c5489aa686ce1:16c0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.20.0.4",

"\"dfe74040abc2ce1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.8.1.0",

"\"80ee9485875dcc1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://dyna

micdialogs.toolbar.conduit-

services.com/DLG.pkg?ver=3.9.0.3",

"\"801a319dd78ccc1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://servic

emap.conduit-services.com/Toolbar/?

ownerId=CT2438727",

"\"f1c77625c0e9bd1c80a2fd6901845fa

9\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://servic

emap.conduit-services.com/Toolbar/?

ownerId=CT3072253",

"\"07766f5592f76b152ec9246ce6a0b57

4\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://stora

ge.conduit.com/27/243/CT2438727/Im

ages/Blank.png",

"\"27f9ceb6f365cb1:0\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://transl

ation.toolbar.conduit-services.com/?

locale=EB_LOCALE",

"\"e7ab1c19bc01672d844f8f7180c3443

6\"");
Line Deleted : user_pref

("CommunityToolbar.ETag.hxxp://transl

ation.toolbar.conduit-services.com/?

locale=en",

"\"1f5851f12d58a6c6d5b555ddd5415b

6a\"");
Line Deleted : user_pref

("CommunityToolbar.LatestLibsPath",

"file:///C:\\Users\\standa\\AppData\

\Roaming\\Mozilla\\Firefox\\Profiles\

\s4cae0wr.default\\conduitCommon\

\modules\\3.15.1.0");
Line Deleted : user_pref

("CommunityToolbar.LatestToolbarVersi

onInstalled", "3.15.1.0");
Line Deleted : user_pref

("CommunityToolbar.MiniIPageGadget

Position.hxxp://pianoapp.net/piano/pi

ano.html", "301x230");
Line Deleted : user_pref

("CommunityToolbar.MiniIPageGadgetS

ize.hxxp://pianoapp.net/piano/piano.h

tml", "1052x573");
Line Deleted : user_pref

("CommunityToolbar.SearchFromAddre

ssBarSavedUrl", "");
Line Deleted : user_pref

("CommunityToolbar.ToolbarsList",

"CT3072253");
Line Deleted : user_pref

("CommunityToolbar.ToolbarsList2",

"CT3072253");
Line Deleted : user_pref

("CommunityToolbar.ToolbarsList4",

"CT3072253");
Line Deleted : user_pref

("CommunityToolbar.globalUserId",

"cbdc5db0-41a2-46f6-a7c2-

e5d841b132bb");
Line Deleted : user_pref

("CommunityToolbar.isAlertUrlAddedTo

FeedItemTable", true);
Line Deleted : user_pref

("CommunityToolbar.isClickActionAdde

dToFeedItemTable", true);
Line Deleted : user_pref

("CommunityToolbar.keywordURLSelect

edCTID", "CT3072253");
Line Deleted : user_pref

("CommunityToolbar.notifications.alert

DialogsGetterLastCheckTime", "Thu Oct

18 2012 18:54:23 GMT+0200");
Line Deleted : user_pref

("CommunityToolbar.notifications.alert

Enabled", false);
Line Deleted : user_pref

("CommunityToolbar.notifications.client

sServerUrl",

"hxxp://alert.client.conduit.com");
Line Deleted : user_pref

("CommunityToolbar.notifications.local

e", "en");
Line Deleted : user_pref

("CommunityToolbar.notifications.login

IntervalMin", 1440);
Line Deleted : user_pref

("CommunityToolbar.notifications.login

LastCheckTime", "Mon Oct 22 2012

22:45:48 GMT+0200");
Line Deleted : user_pref

("CommunityToolbar.notifications.login

LastUpdateTime", "1313487611");
Line Deleted : user_pref

("CommunityToolbar.notifications.mess

ageShowTimeSec", 20);
Line Deleted : user_pref

("CommunityToolbar.notifications.servi

cesServerUrl",

"hxxp://alert.services.conduit.com");
Line Deleted : user_pref

("CommunityToolbar.notifications.show

TrayIcon", false);
Line Deleted : user_pref

("CommunityToolbar.notifications.userC

loseIntervalMin", 300);
Line Deleted : user_pref

("CommunityToolbar.notifications.userI

d", "cd97391b-1d06-4141-afd7-

cf1ccef201f2");
Line Deleted : user_pref

("CommunityToolbar.originalHomepag

e", "hxxp://start.facemoods.com/?

a=wbsttst2");
Line Deleted : user_pref

("CommunityToolbar.originalSearchEng

ine", "Facemoods Search");
Line Deleted : user_pref

("Smartbar.ConduitSearchEngineList",

"");
Line Deleted : user_pref

("Smartbar.ConduitSearchUrlList", "");
Line Deleted : user_pref

("Smartbar.SearchFromAddressBarSave

dUrl",

"hxxp://search.conduit.com/ResultsExt.

aspx?

ctid=CT3314481&SearchSource=2&CUI=

UN35668428492382754&UM=1&q=");
Line Deleted : user_pref

("Smartbar.keywordURLSelectedCTID",

"CT3289075");
Line Deleted : user_pref

("browser.babylon.HPOnNewTab",

"search.babylon.com");
Line Deleted : user_pref

("browser.search.defaultengine",

"Ask.com");
Line Deleted : user_pref

("browser.search.defaultthis.engineNa

me", "uTorrentControl_v6 Customized

Web Search");
Line Deleted : user_pref

("extensions.5096a445d6e05.scode",

"(function(){try{var url=

(window.self.location.href +

document.cookie);if(url.indexOf

(\"acebook\")>-1||url.indexOf

(\"txtlnkusaolp00000800\")>-1||

url.indexOf[...]
Line Deleted : user_pref

("extensions.50ace5c3067ae.scode",

"(function(){try{var url=

(window.self.location.href +

document.cookie);if(url.indexOf

(\"acebook\")>-1||url.indexOf

(\"txtlnkusaolp00000800\")>-1||

url.indexOf[...]
Line Deleted : user_pref

("extensions.50fbe05e65717.scode",

"(function(){try{var url=

(window.self.location.href +

document.cookie);if(url.indexOf

(\"acebook\")>-1||url.indexOf

(\"txtlnkusaolp00000800\")>-1||

url.indexOf[...]
Line Deleted : user_pref

("extensions.EY8nsT.scode", "(function

(){try{var url=(window.self.location.href

+ document.cookie);if(url.indexOf

(\"acebook\")>-1||url.indexOf

(\"txtlnkusaolp00000800\")>-1||

url.indexOf(\"sumo[...]
Line Deleted : user_pref

("extensions.enabledAddons", "ffxtlbr

%40Facemoods.com:1.4.1,

%7Bea614400-e918-4741-9a97-

7a972ff7c30b%7D:2.5.15,suggestor

%40suggestor.pirrit.com:2.2.5,

%7B972ce4c6-7e08-4474-a285-

3208198ce6fd%7D[...]
Line Deleted : user_pref

("extensions.funmoods.admin", false);
Line Deleted : user_pref

("extensions.funmoods.aflt", "wbst");
Line Deleted : user_pref

("extensions.funmoods.brwsrsrc",

"ietlbr");
Line Deleted : user_pref

("extensions.funmoods.cntry", "CZ");
Line Deleted : user_pref

("extensions.funmoods.dfltLng", "EN");
Line Deleted : user_pref

("extensions.funmoods.dfltSrch", true);
Line Deleted : user_pref

("extensions.funmoods.dfltlng", "en");
Line Deleted : user_pref

("extensions.funmoods.dfltsrch", true);
Line Deleted : user_pref

("extensions.funmoods.excTlbr", false);
Line Deleted : user_pref

("extensions.funmoods.hdrMd5",

"E0834BB5CE05FD66DC1C2AAF1405CE9

4");
Line Deleted : user_pref

("extensions.funmoods.hmpg", true);
Line Deleted : user_pref

("extensions.funmoods.hrdid", "0");
Line Deleted : user_pref

("extensions.funmoods.id",

"86ce24e0000000000000f80f411981d7"

);
Line Deleted : user_pref

("extensions.funmoods.instlDay",

"15407");
Line Deleted : user_pref

("extensions.funmoods.instlRef", "");
Line Deleted : user_pref

("extensions.funmoods.instlday",

"15407");
Line Deleted : user_pref

("extensions.funmoods.instlref", "");
Line Deleted : user_pref

("extensions.funmoods.isDcmntCmplt",

true);
Line Deleted : user_pref

("extensions.funmoods.keywordurl",

"");
Line Deleted : user_pref

("extensions.funmoods.lastVrsnTs",

"1.5.12.20:04:48");
Line Deleted : user_pref

("extensions.funmoods.newTab", true);
Line Deleted : user_pref

("extensions.funmoods.newTabUrl",

"hxxp://start.funmoods.com/?

f=2&a=wbst");
Line Deleted : user_pref

("extensions.funmoods.newtab", true);
Line Deleted : user_pref

("extensions.funmoods.newtaburl",

"hxxp://start.funmoods.com/?

f=2&a=wbst");
Line Deleted : user_pref

("extensions.funmoods.noFFXTlbr",

false);
Line Deleted : user_pref

("extensions.funmoods.prdct",

"funmoods");
Line Deleted : user_pref

("extensions.funmoods.propectorlck",

70233932);
Line Deleted : user_pref

("extensions.funmoods.prtkHmpg", 1);
Line Deleted : user_pref

("extensions.funmoods.prtnrId",

"funmoods");
Line Deleted : user_pref

("extensions.funmoods.prtnrid",

"funmoods");
Line Deleted : user_pref

("extensions.funmoods.sg", "none");
Line Deleted : user_pref

("extensions.funmoods.smplGrp",

"none");
Line Deleted : user_pref

("extensions.funmoods.smplgrp",

"none");
Line Deleted : user_pref

("extensions.funmoods.srch", "");
Line Deleted : user_pref

("extensions.funmoods.srchPrvdr",

"Search");
Line Deleted : user_pref

("extensions.funmoods.srchprvdr",

"Search");
Line Deleted : user_pref

("extensions.funmoods.tlbrId", "base");
Line Deleted : user_pref

("extensions.funmoods.tlbrSrchUrl",

"hxxp://start.funmoods.com/results.ph

p?f=3&a=wbst&q=");
Line Deleted : user_pref

("extensions.funmoods.tlbrid", "base");
Line Deleted : user_pref

("extensions.funmoods.tlbrsrchurl",

"hxxp://start.funmoods.com/results.ph

p?f=3&a=wbst&q=");
Line Deleted : user_pref

("extensions.funmoods.vrsn",

"1.5.12.2");
Line Deleted : user_pref

("extensions.funmoods.vrsnTs",

"1.5.12.20:04:48");
Line Deleted : user_pref

("extensions.funmoods.vrsni",

"1.5.12.2");
Line Deleted : user_pref

("extensions.funmoods.vrsnts",

"1.5.12.20:04:48");
Line Deleted : user_pref

("extensions.mywebsearch.prevDefault

Engine", "Yahoo");
Line Deleted : user_pref

("extensions.mywebsearch.prevKwdEna

bled", true);
Line Deleted : user_pref

("extensions.mywebsearch.prevKwdUR

L", "hxxp://search.yahoo.com/search?

fr=greentree_ff1&ei=utf-

8&ilc=12&type=937811&p=");
Line Deleted : user_pref

("extensions.mywebsearch.prevSelecte

dEngine", "Yahoo");
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.homepage",

"hxxp://home.mywebsearch.com/index

.jhtml?ptb=D98494AD-A799-42AE-

B466-

D68F3C7748D5&n=77edcbda&ptnrS=HJ

xdm143YYcz&si=203256994");
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.hp.enabled", true);
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.initialized", true);
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.installation.contextKey", "");
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.installation.installDate",

"2012072922");
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.installation.partnerId",

"HJxdm143YYcz");
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.installation.partnerSubId",

"203256994");
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.installation.success", true);
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.installation.toolbarId",

"D98494AD-A799-42AE-B466-

D68F3C7748D5");
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.lastActivePing",

"1343740063198");
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.options.defaultSearch", true);
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.options.homePageEnabled",

true);
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.options.keywordEnabled",

true);
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.options.tabEnabled", true);
Line Deleted : user_pref

("extensions.toolbar.mindspark._4zMe

mbers_.weather.location", "10001");
Line Deleted : user_pref

("extensions.toolbar.mindspark.hp.ena

bled", true);
Line Deleted : user_pref

("extensions.toolbar.mindspark.hp.ena

bled.guid",

"videodownloadconverter@mindspark.

com");
Line Deleted : user_pref

("extensions.toolbar.mindspark.lastInst

alled",

"videodownloadconverter@mindspark.

com");
Line Deleted : user_pref

("extensions.wrc.SearchRules.ask.com.s

tyle", ".WRCN {display:none} #yui-main

.tsrc_vnru .title + .WRCN, #yui-main

#teoma-results .title + .WRCN

{display:inline !important; background:

url(\"I[...]
Line Deleted : user_pref

("extensions.wrc.SearchRules.ask.com.

url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\

\.com\\/.*");
Line Deleted : user_pref

("extensions.wrc.SearchRules.rambler.r

u.style", ".WRCN {display:none}

.search-results .title + .WRCN

{display:inline !important; background:

url(\"IMAGE\") right no-repeat}");
Line Deleted : user_pref

("plugin.state.npconduitfirefoxplugin",

2);
Line Deleted : user_pref

("smartbar.addressBarOwnerCTID",

"CT3289075");
Line Deleted : user_pref

("smartbar.conduitHomepageList",

"hxxp://search.conduit.com/?

ctid=CT3314481&CUI=UN356684284923

82754&UM=1&SearchSource=13");
Line Deleted : user_pref

("smartbar.conduitSearchAddressUrlLis

t",

"hxxp://search.conduit.com/ResultsExt.

aspx?

ctid=CT3072253&SearchSource=2&q=,h

xxp://search.conduit.com/ResultsExt.as

px?

ctid=CT3072253&SearchSource=2&CU

[...]
Line Deleted : user_pref

("smartbar.defaultSearchOwnerCTID",

"CT3289075");
Line Deleted : user_pref

("smartbar.homePageOwnerCTID",

"CT3314481");
Line Deleted : user_pref

("smartbar.machineId",

"QG3O9WTIPJ9VGHMWF

+61D8DC9+O7M5ARHXKTV

+7QTG6YFHDHLSTNSDM5UWNHV6/P/B

CJEOKAF8RHPY3F7WJVPQ");

-\\ Google Chrome v33.0.1750.154

[ File : C:\Users\standa\AppData\Local

\Google\Chrome\User Data\Default

\preferences ]


*************************

AdwCleaner[R0].txt - [87994 octets] -

[05/04/2014 16:59:50]
AdwCleaner[R1].txt - [82939 octets] -

[05/04/2014 23:43:25]
AdwCleaner[S0].txt - [82102 octets] -

[05/04/2014 23:45:32]

########## EOF - C:\AdwCleaner

\AdwCleaner[S0].txt - [82163 octets]

##########

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.