SmasH 0 Denunciar post Postado Janeiro 26, 2012 Faz alguns mêses que minha internet está lenta... Uma hora ela está boa, depois do nada ela fica ruim ou cai de vez... Creio que seja algum malware que esteja afetando meu PC. Peço a ajuda dos moderadores e membros do IMaster para resolver esse meu problema. Aqui o LOG do HijackThis: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 23:51:25, on 25/01/2012 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16766) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Microsoft Security Essentials\msseces.exe C:\Program Files\Mp3Tube Toolbar\Mp3TubeVideoToMp3.exe C:\Windows\System32\hkcmd.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe C:\Program Files\Ask.com\Updater\Updater.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Windows Live\Messenger\MsgPlus.exe C:\Program Files\BrowserCompanion\BCHelper.exe C:\Program Files\MyWebSearch\bar\2.bin\MWSOEMON.EXE C:\Users\marilaine.marilaine-Mega\AppData\Local\Akamai\netsession_win.exe C:\Windows\System32\spool\drivers\w32x86\3\E_FATIBIP.EXE C:\Users\marilaine.marilaine-Mega\AppData\Local\Akamai\netsession_win.exe C:\HijackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://nmd.msn.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss&affID=101365&mntrId=128c0892000000000000002511b32bf6 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1:9421 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\2.bin\MWSSRCAS.DLL R3 - URLSearchHook: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\prxtbMyA0.dll R3 - URLSearchHook: Softonic ES Toolbar - {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} - C:\Program Files\Softonic_ES\prxtbSof2.dll R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\prxtbXfir.dll R3 - URLSearchHook: (no name) - {90eee664-34b1-422a-a782-779af65cdf6d} - (no file) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,,"C:\Program Files\Velocidade Do PC\PCSpeedUpNotifier.exe" O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\2.bin\MWSSRCAS.DLL O2 - BHO: script helper for ie - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files\BrowserCompanion\jsloader.dll O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Complitly\Complitly.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: XfireXO - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\prxtbXfir.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: LevelUp Toolbar - {949A7FED-30B4-433e-9718-23EC99A126B0} - C:\Program Files\leveluptb\levelupdx.dll O2 - BHO: Update Timer - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files\BrowserCompanion\updatebhoWin32.dll O2 - BHO: MyAshampoo - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\prxtbMyA0.dll O2 - BHO: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll O2 - BHO: Softonic ES - {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} - C:\Program Files\Softonic_ES\prxtbSof2.dll O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: VDownloader Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL O3 - Toolbar: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\prxtbMyA0.dll O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll O3 - Toolbar: Softonic ES Toolbar - {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} - C:\Program Files\Softonic_ES\prxtbSof2.dll O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\prxtbXfir.dll O3 - Toolbar: LevelUp Toolbar - {949A7FED-30B4-433e-9718-23EC99A126B0} - C:\Program Files\leveluptb\levelupdx.dll O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll O3 - Toolbar: Mp3Tube Toolbar - {46897C77-E7A6-4c33-BFFB-E9C2E2718942} - "C:\Program Files\Mp3Tube Toolbar\mp3tubetb.DLL" (file missing) O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [sSDMonitor] C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe" /m=2 /w /h O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Windows Live\Messenger\MsgPlus.exe" O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [browser companion helper] C:\Program Files\BrowserCompanion\BCHelper.exe /T=3 /CHI=ibgfbdggapddbjjbopabhlhianklajie O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h O4 - HKCU\..\Run: [Ghost Control] "C:\Program Files\Ghost Control\ghost.exe" -startup O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Windows Live\Messenger\MsgPlus.exe" /WinStart O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\marilaine.marilaine-Mega\AppData\Local\Akamai\netsession_win.exe" O4 - HKCU\..\Run: [EPSON Stylus CX5900 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIBIP.EXE /FU "C:\Windows\TEMP\E_SE3C9.tmp" /EF "HKCU" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE') O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?s=100000349&p=ZNxmk936YYBR&si=41245&a=wukfbkdLVx._ZIW216fZYg&n=2011030118 O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll O18 - Protocol: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll O18 - Protocol: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: BasicScan Service - Unknown owner - C:\Program Files\BasicScan\basicscan.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: Mp3Tube Toolbar Updater Service (Mp3Tube Toolbar Service) - Mp3Tube - C:\Program Files\Mp3Tube Toolbar\Mp3TubeSvc.exe O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwssvc.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: PCSpeedUp Service (PCSpeedUpService) - Speedchecker - C:\Program Files\Velocidade Do PC\PCSpeedUpService.exe O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.6\bin\httpd.exe O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.45\bin\mysqld-nt.exe O23 - Service: xsherlock - Wellbia.com Co., Ltd. - C:\Windows\system32\xsherlock.xem -- End of file - 12814 bytes Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Janeiro 26, 2012 Bom Dia! SmasH |- Baixe: < > |- < Link - 2 > |- < Link - 3 > |- Atualize o programa! |- Escolha o escaneamento Rápido! |- Desabilite programas de proteção,ao executar o malwarebytes. |- Ps: Para determinadas infecções,a ferramenta pedirá reboot. <-- Confirme! |- Ao concluir,clique em "Remover itens". |- Poste,o relatório: mbam-log-2012-xx-xx (00-00-00).txt ////°°°//// |- Baixe: < ToolbarShooter > ( ... de 2011N2 ) |- Salve-o no desktop! |- Desabilite seu antivírus. |- Execute a ferramenta,e escolha a opção 2. Suppression ou Delete. |- Ps: Para Windows Vista ou 7,execute-o como administrador! |- Ao concluir,aperte Enter,para dispormos do relatório. |- Poste o relatório: "Rapport de suppression de ToolbarShooter" ////°°°//// |- Baixe: < AD-Remover > ( ... de C-XX ) |- Ou... < Aqui! > <- Link! |- Salve-o em C:\ ( Disco local ) |- Duplo clique em AD-R.exe |- Para Windows Vista ou 7,execute-o como administrador! |- Aperte a opção "Clean". |- Ao concluir,aceite/confirme o reboot,para que Adwares sejam removidos. |- Ou seja,o computador irá reiniciar! |- Poste o relatório: C:\Ad-Report-CLEAN[1].txt ////°°°//// |- Poste,também,HijackThis atualizado. Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
SmasH 0 Denunciar post Postado Janeiro 26, 2012 Log do MalwareBits Malwarebytes Anti-Malware 1.60.0.1800 www.malwarebytes.org Versão da Base de Dados: v2012.01.26.05 Windows 7 x86 NTFS Internet Explorer 8.0.7600.16385 marilaine :: MARILAINE-MEGA [administrador] 26/01/2012 13:34:33 mbam-log-2012-01-26 (13-34-33).txt Tipo de Verificação: Verificação Rápida Opções de verificações ativadas: Memória | Inicialização | Registro | Sistema de arquivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM Opções de verificação desativadas: P2P Objetos escaneados: 207067 Tempo decorrido: 7 minuto(s), 55 segundo(s) Processos de Memória Detectados: 5 C:\Program Files\Mp3Tube Toolbar\Mp3TubeSvc.exe (Adware.Mp3Tube) -> 2192 -> Será deletado na próxima inicialização. C:\Program Files\Mp3Tube Toolbar\Mp3TubeVideoToMp3.exe (Adware.Mp3Tube) -> 2632 -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\2.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> 2956 -> Será deletado na próxima inicialização. C:\Program Files\BasicScan\basicscan.exe (Adware.Zwangi) -> 324 -> Será deletado na próxima inicialização. C:\Program Files\BasicScan\basicscan.exe (Adware.Zwangi) -> 752 -> Será deletado na próxima inicialização. Módulos de Memória Detectados: 7 C:\Program Files\MyWebSearch\bar\2.bin\F3HTMLMU.DLL (PUP.FunWebProducts) -> Nenhuma ação foi feita. C:\Program Files\BasicScan\basicscan.dll (Adware.Agent.ZGen) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\2.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\2.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\2.bin\M3PLUGIN.DLL (Adware.MyWebSearch) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\2.bin\M3FFTBPR.DLL (Adware.MyWebSearch) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Será deletado na próxima inicialização. Chaves de Registro Detectadas: 161 HKCR\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (PUP.FunWebProducts) -> Nenhuma ação foi feita. HKCR\FunWebProducts.HTMLMenu.2 (PUP.FunWebProducts) -> Nenhuma ação foi feita. HKCR\FunWebProducts.HTMLMenu (PUP.FunWebProducts) -> Nenhuma ação foi feita. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (PUP.FunWebProducts) -> Nenhuma ação foi feita. HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D} (PUP.FunWebProducts) -> Nenhuma ação foi feita. HKCR\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495} (PUP.FunWebProducts) -> Nenhuma ação foi feita. HKLM\SYSTEM\CurrentControlSet\Services\Mp3Tube Toolbar Service (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearchToolBar.ToolbarPlugin.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearchToolBar.ToolbarPlugin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearchToolBar.SettingsPlugin.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearchToolBar.SettingsPlugin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{1093995A-BA37-41D2-836E-091067C4AD17} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.IECookiesManager.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.IECookiesManager (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{1D4DB7D0-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{1D4DB7D1-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProductsInstaller.Start.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProductsInstaller.Start (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.DataControl.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.DataControl (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.HTMLMenu.2 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.HTMLMenu (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{3E720451-B472-4954-B7AA-33069EB53906} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.HTMLPanel.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.HTMLPanel (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{46897C77-E7A6-4c33-BFFB-E9C2E2718942} (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{46897C77-E7A6-4C33-BFFB-E9C2E2718942} (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{46897C77-E7A6-4C33-BFFB-E9C2E2718942} (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.PopSwatterSettingsControl.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.PopSwatterSettingsControl (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.PseudoTransparentPlugin.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.PseudoTransparentPlugin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.PopSwatterBarButton.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.PopSwatterBarButton (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.HTMLMenu.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\ScreenSaverControl.ScreenSaverInstaller.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\ScreenSaverControl.ScreenSaverInstaller (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{A9571378-68A1-443d-B082-284F960C6D17} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.OutlookAddin.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.KillerObjManager.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.KillerObjManager (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.HistoryKillerScheduler.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.HistoryKillerScheduler (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.HistorySwatterControlBar.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\FunWebProducts.HistorySwatterControlBar (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.ChatSessionPlugin.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.ChatSessionPlugin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Typelib\{D518921A-4A03-425E-9873-B9A71756821E} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Typelib\{F42228FB-E84E-479E-B922-FBBD096E792C} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33524C00-63FB-43DB-A6BF-0A4E14B24649} (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SYSTEM\CurrentControlSet\Services\BasicScan Service (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.MultipleButton (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.MultipleButton.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.ThirdPartyInstaller (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.ThirdPartyInstaller.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.UrlAlertButton (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\MyWebSearch.UrlAlertButton.1 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Mp3Tube (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Mp3Tube (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IspAssistant-Mp3Tube (Adware.Adware.MP3TubeToolBar) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mp3Tube Toolbar (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BASICSCAN (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HOMEPAGE PROTECTION SERVICE (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{819FFE22-35C7-4925-8CDA-4E0E2DB94302} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{819FFE20-35C7-4925-8CDA-4E0E2DB94302} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{819FFE21-35C7-4925-8CDA-4E0E2DB94302} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{67FA02C4-AB30-4e77-A640-78EE8EC8673B} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\TypeLib\{8FFDF636-0D87-4B33-B9E9-79A53F6E1DAE} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\Interface\{01947140-417F-46B6-8751-A3A2B8345E1A} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{799391D3-EB86-4bac-9BD3-CBFEA58A0E15} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. HKCR\CLSID\{D858DAFC-9573-4811-B323-7011A3AA7E61} (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. Valores de Registro Detectadas: 19 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MyWebSearch Email Plugin (Adware.MyWebSearch) -> Data: C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MyWebSearch Email Plugin (Adware.MyWebSearch) -> Data: C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|My Web Search Bar Search Scope Monitor (Adware.MyWebSearch) -> Data: "C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe" /m=2 /w /h -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks|{00A6FAF6-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Data: -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser|{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Data: ©Ž±#¥aI¶» äG\Ê -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Data: -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser|{46897C77-E7A6-4C33-BFFB-E9C2E2718942} (Adware.Mp3Tube) -> Data: w|‰F¦ç3L¿ûéÂâq‰B -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{46897C77-E7A6-4C33-BFFB-E9C2E2718942} (Adware.Mp3Tube) -> Data: -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Data: -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{46897C77-E7A6-4C33-BFFB-E9C2E2718942} (Adware.Mp3Tube) -> Data: -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{00A6FAF6-072E-44cf-8957-5838F569A31D} (Adware.MyWebSearch) -> Data: -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Data: -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{46897C77-E7A6-4c33-BFFB-E9C2E2718942} (Adware.Mp3Tube) -> Data: -> Enviado para a Quarentena e deletado com sucesso. HKCU\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search| (Adware.Hotbar) -> Data: http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?s=100000349&p=ZNxmk936YYBR&si=41245&a=wukfbkdLVx._ZIW216fZYg&n=2011030118 -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources|f3PopularScreensavers (Adware.MyWebSearch) -> Data: C:\Program Files\MyWebSearch\bar\2.bin\F3SCRCTR.DLL -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform|FunWebProducts (Adware.MyWebSearch) -> Data: -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BasicScan|DisplayName (Adware.Zwangi) -> Data: BasicScan 1.0 build 115 -> Enviado para a Quarentena e deletado com sucesso. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Homepage Protection Service|UninstallString (Adware.Mp3Tube) -> Data: C:\Program Files\Mp3Tube Toolbar\uninstall.exe hpp /S -> Enviado para a Quarentena e deletado com sucesso. HKLM\SYSTEM\CurrentControlSet\Services\BasicScan Service|ImagePath (Adware.Zwangi) -> Data: "C:\Program Files\BasicScan\basicscan.exe" "C:\Program Files\BasicScan\basicscan.dll" egexovegub reposuwewu -> Enviado para a Quarentena e deletado com sucesso. Itens de Dados no Registro Detectadas: 0 (Não foram detectados ítens maliciosos) Pastas Detectadas: 37 C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\FunWebProducts\Installr (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\FunWebProducts\Installr\1.bin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\FunWebProducts\Shared\Cache (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\1.bin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\1.bin\chrome (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\1.bin\ThirdPartyInstallers (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin (Adware.MyWebSearch) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\2.bin\chrome (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\ThirdPartyInstallers (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Avatar (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Cache (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Game (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\icons (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Message (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Overlay (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mp3Tube Toolbar (Adware.Mp3Tube) -> Será deletado na próxima inicialização. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\images (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C} (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}\chrome (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}\defaults (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}\defaults\preferences (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. Arquivos Detectados: 192 C:\Program Files\MyWebSearch\bar\2.bin\F3HTMLMU.DLL (PUP.FunWebProducts) -> Nenhuma ação foi feita. C:\Windows\System32\f3PSSavr.scr (PUP.FunWebProducts) -> Nenhuma ação foi feita. C:\Users\marilaine.marilaine-Mega\Downloads\SoftonicDownloader_para_nolimits-rollercoaster.exe (PUP.BundleOffer.Downloader.S) -> Nenhuma ação foi feita. C:\Users\marilaine.marilaine-Mega\Downloads\SoftonicDownloader_para_rigs-of-rods.exe (PUP.BundleOffer.Downloader.S) -> Nenhuma ação foi feita. C:\Program Files\BasicScan\basicscan.dll (Adware.Agent.ZGen) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\2.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Será deletado na próxima inicialização. C:\Program Files\Mp3Tube Toolbar\Mp3TubeSvc.exe (Adware.Mp3Tube) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\2.bin\MWSSVC.EXE (Adware.MyWebSearch) -> Será deletado na próxima inicialização. C:\Program Files\Mp3Tube Toolbar\Mp3TubeVideoToMp3.exe (Adware.Mp3Tube) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\2.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> Será deletado na próxima inicialização. C:\Program Files\MyWebSearch\bar\2.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3PLUGIN.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3FFTBPR.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3HISTSW.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\FunWebProducts\Installr\1.bin\F3EZSETP.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3DTACTL.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mp3Tube Toolbar\mp3tubetb.dll (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3POPSWT.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3SKIN.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3CJPEG.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3SCRCTR.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3HTTPCT.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3MSG.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3REPROX.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Windows\System32\drivers\etc\show.dll (Trojan.Dropper.PGen) -> Enviado para a Quarentena e deletado com sucesso. C:\ProgramData\BasicScan\basicscan115.exe (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\BasicScan\basicscan.exe (Adware.Zwangi) -> Será deletado na próxima inicialização. C:\Program Files\Mozilla Firefox\searchplugins\Mp3Tube.xml (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Windows\System32\f3PSSavr.scr (Trojan.Agent) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\FunWebProducts\Installr\1.bin\F3PLUGIN.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\FunWebProducts\Installr\1.bin\NPFUNWEB.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\1.bin\chrome\M3FFXTBR.JAR (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3SPACER.WMV (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\CHROME.MANIFEST (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3BKGERR.JPG (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3HKSTUB.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3IMSTUB.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3PSSAVR.SCR (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3REGHK.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3RESTUB.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3SCHMON.EXE (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3WALLPP.DAT (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\F3WPHOOK.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\FWPBUDDY.PNG (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\INSTALL.RDF (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3AUXSTB.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3DLGHK.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3MEDINT.EXE (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3PATCH.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3SLSRCH.EXE (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3TPINST.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\M3UNPAT.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\MWSMLBTN.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\MWSUABTN.DLL (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\2.bin\chrome\M3FFXTBR.JAR (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Cache\003887F4 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Cache\004A0EFF.bin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Cache\004A10B3.bmp (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Cache\004A118E.bin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Cache\004A167D.bin (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Cache\007C084C (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Cache\files.ini (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\History\search3 (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\icons\CM.ICO (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\icons\MFC.ICO (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\icons\PSS.ICO (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\icons\WB.ICO (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Overlay\COMMON.F3S (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mp3Tube Toolbar\ffmpeg.exe (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mp3Tube Toolbar\ShowMsg.exe (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mp3Tube Toolbar\uninstall.exe (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome.manifest (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\install.rdf (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\constants.js (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\convertvideo.js (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\convertvideodlg.js (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\convertvideodlg.xul (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\events.js (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\savetomp3popup.js (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\savetomp3popup.xul (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\tbcore.js (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\toolbar.xul (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\weather.js (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\weatherLoc.js (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\content\weatherLoc.xul (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\arrow-grey.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\arrow_partner.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\arrow_small.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\bg.jpg (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\feeditem.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\logo.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\news_refresh.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\popupSearchMp3.css (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\popupWindow.css (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\SaveMp3_bg_hover.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\SaveMp3_bg_normal.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\savetomp3PopUp.css (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\Thumbs.db (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\toolbar.css (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\savemp3_disabled.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\arrow.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\arrow_big.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\btn_close.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\dailyhotdeals.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\divider.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\facebook.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\games.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\icon-RSS.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\news.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\plainbutton.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\savemp3.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\savemp3popup-musicicon.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\savemp3popup.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\saveyoutubevideos.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\screensaver.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\search.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\searchbar-grey-250.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\searchbox.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\separator_line.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\shopping.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\Thumbs.db (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\watermark.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\buttons\youtube.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\chance_of_rain.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\chance_of_snow.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\chance_of_storm.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\chance_of_tstorm.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\cloudy.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\flurries.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\hazy.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\mist.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\mostly_cloudy.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\mostly_sunny.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\rain.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\sleet.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\snow.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\storm.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\sunny.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\Thumbs.db (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\thunderstorm.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\weatherbug.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com\chrome\skin\weather\windy.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\pref.xml (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\tbconfig.xml (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\tbconfig.xml.bak (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\images\dailyhotdeals.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\images\divider.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\images\feeditem.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\images\games.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\images\savemp3.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\images\savemp3_disabled.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\images\screensaver.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\images\shopping.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\images\watermark.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mp3Tube Toolbar\images\weatherbug.png (Adware.Mp3Tube) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}\chrome.manifest (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}\install.rdf (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}\chrome\basicscan.jar (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Mozilla Firefox\extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}\defaults\preferences\prefs.js (Adware.Zwangi) -> Enviado para a Quarentena e deletado com sucesso. (fim) Log do ToolbarShotter: =========== Informations =========== Mis à jour le : 20/01/2012 à 19h45 par 2011N2 Rapport de suppression de ToolbarShooter par 2011N2 Contact : lot12@hotmail.fr Site : http://2011n2.forumgratuit.fr/ Début du scan de suppression : 14:02:51 ################################## Toolbars, pups et adwares néfastes supprimés ################################ Clé supprimée avec succès : HKLM\Software\Classes\CLSID\{8856F961-340A-11D0-A96B-00C04FD705A2} Clé supprimée avec succès : HKLM\Software\Classes\CLSID\{8856F961-340A-11D0-A96B-00C04FD705A2} Clé supprimée avec succès : HKCU\Software\APN Dossier supprimé avec succès : "C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml" ======== Page de démarrage Internet Explorer ======== Page de démarrage d'Internet Explorer restaurée avec succès. =================================== Fin du nettoyage : 14:03:11 ======== EOF ======== Merci d'envoyer le rapport à cette adresse, en précisant la raison d'emploi de cet outil. Cela permettera au développeur d'effectuer d'éventuelles modifications : lot12@hotmail.fr Merci de votre contribution ! L'utilisateur à décidé de redémarrer l'ordinateur ultérieurement Log do Ad-Remover: ======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 13:56:54 on 26/01/2012, Normal boot Microsoft Windows 7 Starter (X86) marilaine@MARILAINE-MEGA (MEGAWARE MW-G31T-M7) ============== ACTION(S) ============== File deleted: C:\Windows\system32\ConduitEngine.tmp File deleted: C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar File deleted: C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\FireFox\Profiles\tzol3vmr.default\searchplugins\askcom.xml Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\FireFox\Profiles\tzol3vmr.default\conduit File deleted: C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\FireFox\Profiles\tzol3vmr.default\searchplugins\conduit.xml Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\FireFox\Profiles\tzol3vmr.default\extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516} File deleted: C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\FireFox\Profiles\tzol3vmr.default\searchplugins\mywebsearch.xml Folder deleted: C:\Program Files\Ask.com Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\LocalLow\AskToolbar Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\Local\Conduit Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\LocalLow\Conduit Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\Local\ConduitEngine Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\LocalLow\ConduitEngine Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Complitly Folder deleted: C:\Program Files\Complitly Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\LocalLow\FunWebProducts Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\LocalLow\MyWebSearch Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\Roaming\OpenCandy Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\Local\OpenCandy Folder deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PopCap Games Folder deleted: C:\Program Files\PopCap Games Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\Roaming\PriceGong Folder deleted: C:\Users\marilaine.marilaine-Mega\AppData\LocalLow\PriceGong File deleted: C:\Program Files\Windows Live\Messenger\Riched20.dll File deleted: C:\Program Files\Windows Live\Messenger\Msimg32.dll (!) -- Temporary files deleted. -- File opened: C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\FireFox\Profiles\tzol3vmr.default\Prefs.js -- Line deleted: user_pref("CT1098640.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT109... Line deleted: user_pref("CT2247187.SavedHomepage", "hxxp://search.conduit.com/?ctid=CT1098640&SearchSource=13"); Line deleted: user_pref("CT2247187.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT224... Line deleted: user_pref("CT2304157.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT230... Line deleted: user_pref("CT2324177.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT232... Line deleted: user_pref("CT2475029.SearchEngineBeforeUnload", "Ask.com"); Line deleted: user_pref("CT2475029.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT247... Line deleted: user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2475029,CT2247187,CT1098640"); Line deleted: user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2304157&Search... Line deleted: user_pref("CommunityToolbar.ConduitSearchList", "XfireXO Customized Web Search"); Line deleted: user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2324177/CT2324177... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/5747/5719/BR", "\"0\""); Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/644679/640541/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/700614/696475/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/720205/716065/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/868510/864310/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874426/870225/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874430/870228/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874431/870229/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874435/870233/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874437/870235/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874438/870236/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874439/870237/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874440/870238/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874441/870239/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874443/870241/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/BR", "\"0\"")... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT1098640", ... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2247187", ... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2304157", ... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2324177", ... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", ... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2878731", ... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT1098640",... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2247187",... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2304157",... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2324177",... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2475029",... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2878731",... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/20... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT1098640&octid=... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2247187&octid=... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2304157&octid=... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2324177&octid=... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2475029&octid=... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2878731&octid=... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT1098640/CT1098640... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2247187/CT2247187... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2304157/CT2304157... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2324177/CT2324177... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2475029/CT2475029... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equaliz... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimiz... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gi... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gi... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/maxi.gif",... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/minimize.g... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/play.gif",... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/play_mini.... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/stop.gif",... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/stopped.GI... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/vol.gif", ... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/equalizer_de... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/minimize.gif... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/play.gif", "... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/stop.gif", "... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/vol.gif", "\... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/equalize... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/minimize... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/play.gif... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/stop.gif... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/vol.gif"... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=pt", "\"c3c... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"059d4725a5ba97b3bb9b... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"60fab9e7a0fb88a67cb... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml", "\"8fb32822fe16bfe8574... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"6dffbbf3249b308fac1... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/21817319.xml", "\"534cbd3b554fa659e87... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"b1e096e882a1a25110c... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"8ba53819612e914cb7a... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"3b81d79ab7ee921001c7f... Line deleted: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"74e433e4aba6f3b6a8e90... Line deleted: user_pref("CommunityToolbar.EngineOwner", ""); Line deleted: user_pref("CommunityToolbar.EngineOwnerGuid", "{f8e9011a-4c40-4940-9480-a8ac729c8658}"); Line deleted: user_pref("CommunityToolbar.EngineOwnerToolbarId", "ccv_team"); Line deleted: user_pref("CommunityToolbar.IsEngineShown", true); Line deleted: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Line deleted: user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\marilaine.marilaine-Mega\\AppData\\... Line deleted: user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.8.1.0"); Line deleted: user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.labpixies.com/campaigns/tv/tv.html", ... Line deleted: user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://virusscan.ashampoo.com/", "580x484"); Line deleted: user_pref("CommunityToolbar.OriginalEngineOwner", "CT2324177"); Line deleted: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{f8e9011a-4c40-4940-9480-a8ac729c8658}"); Line deleted: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "ccv_team"); Line deleted: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://websearch.ask.com/redirect?client... Line deleted: user_pref("CommunityToolbar.ToolbarsList", "CT2324177,CT2475029,CT1098640,CT2247187,CT2304157"); Line deleted: user_pref("CommunityToolbar.ToolbarsList2", "CT2324177,CT2475029,CT1098640,CT2247187,CT2304157"); Line deleted: user_pref("CommunityToolbar.ToolbarsList4", "CT2304157"); Line deleted: user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Wed Jul 13 2011 22:37:39 GMT-03... Line deleted: user_pref("CommunityToolbar.alert.alertEnabled", true); Line deleted: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); Line deleted: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Jul 03 2011 10:38:39 GMT-0300 (Hora ... Line deleted: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Line deleted: user_pref("CommunityToolbar.alert.locale", "en"); Line deleted: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Line deleted: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Aug 16 2011 13:18:32 GMT-0300 (Hora ofic... Line deleted: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611"); Line deleted: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Line deleted: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Line deleted: user_pref("CommunityToolbar.alert.showTrayIcon", false); Line deleted: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Line deleted: user_pref("CommunityToolbar.alert.userId", "d5d05cff-5486-488a-803f-88df484756b0"); Line deleted: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Oct 08 2011 11:59:01 GMT-0300 (Hor... Line deleted: user_pref("CommunityToolbar.globalUserId", "59ae5db3-7693-4c72-9eed-4b882dd25faf"); Line deleted: user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Line deleted: user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Line deleted: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2304157"); Line deleted: user_pref("CommunityToolbar.killedEngine", true); Line deleted: user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Dec 25 2011 22:24:5... Line deleted: user_pref("CommunityToolbar.notifications.alertEnabled", true); Line deleted: user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440); Line deleted: user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Wed Dec 28 2011 14:20:09 GMT-020... Line deleted: user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com"); Line deleted: user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true); Line deleted: user_pref("CommunityToolbar.notifications.locale", "en"); Line deleted: user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); Line deleted: user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Dec 28 2011 14:20:01 GMT-0200"); Line deleted: user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); Line deleted: user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); Line deleted: user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com"); Line deleted: user_pref("CommunityToolbar.notifications.showTrayIcon", false); Line deleted: user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); Line deleted: user_pref("CommunityToolbar.notifications.userId", "fd1dd1fc-4231-4564-a1a1-ad96272537c1"); Line deleted: user_pref("CommunityToolbar.originalHomepage", "hxxp://mystart.incredimail.com/mb59?u=92823115015413... Line deleted: user_pref("CommunityToolbar.originalSearchEngine", "Google"); Line deleted: user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300 ... Line deleted: user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300... Line deleted: user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300... Line deleted: user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300... Line deleted: user_pref("CommunityToolbar.twitter.user_21817319.LastCheckTime", "Sat Oct 08 2011 18:25:46 GMT-0300... Line deleted: user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300... Line deleted: user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300... Line deleted: user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300 (... Line deleted: user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300 (... Line deleted: user_pref("CommunityToolbar.undefined", ""); Line deleted: user_pref("browser.search.defaultengine", "Ask.com"); Line deleted: user_pref("browser.search.defaultenginename", "Ask.com"); Line deleted: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2304157&Sea... Line deleted: user_pref("browser.search.order.1", "Ask.com"); Line deleted: user_pref("extensions.asktb.abar-war-timeout", "4000"); Line deleted: user_pref("extensions.asktb.autofill-competitor-query-enabled", true); Line deleted: user_pref("extensions.asktb.autofill-text-highlight-enabled", true); Line deleted: user_pref("extensions.asktb.cbid", "VY"); Line deleted: user_pref("extensions.asktb.config-updated", true); Line deleted: user_pref("extensions.asktb.crumb", "2010.11.14+12.54.40-toolbar001iad-BR-UmlvIEdyYW5kZSxCcmF6aWw%3D... Line deleted: user_pref("extensions.asktb.default-channel-url-mask", "hxxp://br.ask.com/web?q={query}&qsrc={qsrc}&... Line deleted: user_pref("extensions.asktb.displaybehavior", ""); Line deleted: user_pref("extensions.asktb.displaytext", ""); Line deleted: user_pref("extensions.asktb.dtid", "YYYYYYYYBR"); Line deleted: user_pref("extensions.asktb.dyn-weather-do-locid-lookup-weatherWidget", true); Line deleted: user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.mywebsearch.com/mywebsearch/GGm... Line deleted: user_pref("extensions.asktb.fresh-install", false); Line deleted: user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com... Line deleted: user_pref("extensions.asktb.l", "dis"); Line deleted: user_pref("extensions.asktb.last-config-req", "1318029967317"); Line deleted: user_pref("extensions.asktb.last-search-timestamp", "1311970320012"); Line deleted: user_pref("extensions.asktb.last-v", "3.12.2.100006"); Line deleted: user_pref("extensions.asktb.locale", "pt_BR"); Line deleted: user_pref("extensions.asktb.lstation", ""); Line deleted: user_pref("extensions.asktb.o", "14782"); Line deleted: user_pref("extensions.asktb.options-lang", "pt"); Line deleted: user_pref("extensions.asktb.options-locale", "UK"); Line deleted: user_pref("extensions.asktb.overlay-reloaded-using-restart", true); Line deleted: user_pref("extensions.asktb.pstate", ""); Line deleted: user_pref("extensions.asktb.qsrc", "2871"); Line deleted: user_pref("extensions.asktb.r", "3"); Line deleted: user_pref("extensions.asktb.search-history-queries", "orkut||translema||E||Foto Extra Online E... Line deleted: user_pref("extensions.asktb.search-suggestions-enabled", true); Line deleted: user_pref("extensions.asktb.silent-upgrade", true); Line deleted: user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", true); Line deleted: user_pref("extensions.asktb.socialmini-first", true); Line deleted: user_pref("extensions.asktb.socialmini-interval", "1200000"); Line deleted: user_pref("extensions.asktb.socialmini-max-char-ticker", "33"); Line deleted: user_pref("extensions.asktb.socialmini-max-items", "30"); Line deleted: user_pref("extensions.asktb.socialmini-native-on", true); Line deleted: user_pref("extensions.asktb.socialmini-speed", "5000"); Line deleted: user_pref("extensions.asktb.socialmini-transition-first-open", false); Line deleted: user_pref("extensions.asktb.volume", ""); Line deleted: user_pref("extensions.enabledAddons", "m3ffxtbr@mywebsearch.com:1.1,{33e0daa6-3af3-d8b5-6752-10e949c... Line deleted: user_pref("extensions.enabledItems", "toolbar@ask.com:3.11.3.15590,firebug@software.joehewitt.com:1.... Line deleted: user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"msntoolbar@msn.... Line deleted: user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea... Line deleted: user_pref("extensions.mywebsearch.prevKwdEnabled", true); Line deleted: user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&t... Line deleted: user_pref("keyword.URL", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZNxmk936YYBR&ptn... -- File closed -- Key deleted: HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} Key deleted: HKLM\Software\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0} Key deleted: HKLM\Software\Classes\CLSID\{562D25F8-E371-495F-A006-84C9902BA19F} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{562D25F8-E371-495F-A006-84C9902BA19F} Key deleted: HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Key deleted: HKLM\Software\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1} Key deleted: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd Key deleted: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1 Key deleted: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO Key deleted: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO.1 Key deleted: HKLM\Software\Classes\Toolbar.CT1351364 Key deleted: HKLM\Software\Classes\Toolbar.CT2475029 Key deleted: HKLM\Software\Classes\Toolbar.CT2878731 Key deleted: HKLM\Software\Classes\AppID\GenericAskToolbar.DLL Key deleted: HKLM\Software\AskToolbar Key deleted: HKLM\Software\conduitEngine Key deleted: HKCU\Software\Complitly Key deleted: HKCU\Software\conduitEngine Key deleted: HKCU\Software\FunWebProducts Key deleted: HKCU\Software\PopCap Key deleted: HKCU\Software\PriceGong Key deleted: HKCU\Software\AppDataLow\Software\Fun Web Products Key deleted: HKCU\Software\AppDataLow\Software\FunWebProducts Key deleted: HKCU\Software\AppDataLow\Software\MyWebSearch Key deleted: HKCU\Software\AppDataLow\Software\PriceGong Key deleted: HKLM\Software\VDownloader\OpenCandy Key deleted: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DA6A28D-8AC8-4427-9B7C-E6D736AC2F5C} Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine Key deleting error: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar Key deleted: HKLM\Software\MozillaPlugins\@mywebsearch.com/Plugin Value deleted: HKLM\Software\Mozilla\Firefox\Extensions|m3ffxtbr@mywebsearch.com Value deleted: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00000000-6E41-4FD3-8538-502F5495E5FC} Value deleted: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440} Value deleted: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{30F9B915-B755-4826-820B-08FBA6BD249D} Value deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} Value deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [9.0.1 (pt-BR)] **** HKLM_MozillaPlugins\@funwebproducts.com/Plugin (x) HKLM_MozillaPlugins\@ogplanet.com/npOGPPlugin (x) HKLM_MozillaPlugins\@pandonetworks.com/PandoWebPlugin (x) HKLM_MozillaPlugins\Adobe Reader (x) HKCU_MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0 (x) HKCU_MozillaPlugins\pandonetworks.com/PandoWebPlugin (x) Searchplugins\babylon.xml (hxxp://search.babylon.com/web/{searchTerms}) Searchplugins\buscape.xml (hxxp://busca.buscape.com.br/cprocura) Searchplugins\mercadolivre.xml (hxxp://pmstrk.mercadolivre.com.br/jm/PmsTrk) Searchplugins\search.xml (hxxp://www.mystart.com/results.php) Searchplugins\twitter.xml (hxxps://twitter.com/search/{searchTerms}) Searchplugins\wikipedia-br.xml (hxxp://pt.wikipedia.org/wiki/Especial:Busca) Searchplugins\yahoo-br.xml (hxxp://br.search.yahoo.com/search) Components\browsercomps.dll (Mozilla Foundation) HKLM_Extensions|msntoolbar@msn.com - C:\Program Files\MSN Toolbar\Platform\6.0.2156.0\Firefox -- C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\FireFox\Profiles\tzol3vmr.default -- Extensions\bbrs_002@blabbers.com (Browser Companion Helper) Extensions\ffxtlbr@babylon.com (Babylon) Extensions\m3ffxtbr@mywebsearch.com (My Web Search) Extensions\{707db484-2428-402d-afb5-d85b387544c7} (Mario Forever Community Toolbar) Extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} (MyAshampoo Community Toolbar) Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} (DealPly) Extensions\{ecdee021-0d17-467f-a1ff-c7a115230949} (free-downloads.net Community Toolbar) Extensions\{f8e9011a-4c40-4940-9480-a8ac729c8658} (CCV Team Community Toolbar) Searchplugins\MyStart Search.xml (?) Prefs.js - browser.download.lastDir, C:\\Users\\marilaine.marilaine-Mega\\Pictures Prefs.js - browser.search.selectedEngine, Google Prefs.js - browser.startup.homepage, hxxp://www.ccvteam.com/forum/ Prefs.js - browser.startup.homepage_override.buildID, 20111220165912 Prefs.js - browser.startup.homepage_override.mstone, rv:9.0.1 ======================================== **** Internet Explorer Version [8.0.7600.16385] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_URLSearchHooks|{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - "MyAshampoo Toolbar" (C:\Program Files\MyAshampoo\prxtbMyA0.dll) HKCU_URLSearchHooks|{c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} - "Softonic ES Toolbar" (C:\Program Files\Softonic_ES\prxtbSof2.dll) HKCU_URLSearchHooks|{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - "XfireXO Toolbar" (C:\Program Files\XfireXO\prxtbXfir.dll) HKCU_URLSearchHooks|{90eee664-34b1-422a-a782-779af65cdf6d} (x) HKLM_URLSearchHooks|{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - "MyAshampoo Toolbar" (C:\Program Files\MyAshampoo\prxtbMyA0.dll) HKLM_URLSearchHooks|{c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} - "Softonic ES Toolbar" (C:\Program Files\Softonic_ES\prxtbSof2.dll) HKLM_URLSearchHooks|{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - "XfireXO Toolbar" (C:\Program Files\XfireXO\prxtbXfir.dll) HKCU_SearchScopes\{25FA1D60-605A-4CA8-8722-E53756BFFB4B} - "?" (?) HKCU_SearchScopes\{D78FFE11-12CF-4052-92A5-0E81D32232D3} - "Yahoo-Mp3Tube" (hxxp://mp3tubetoolbar.com/?tmp=toolbar_sb_results&prt=pinballtbfour01ie&Keywords...) HKCU_Toolbar\WebBrowser|{A1E75A0E-4397-4BA8-BB50-E19FB66890F4} (C:\Program Files\MyAshampoo\prxtbMyA0.dll) HKCU_Toolbar\WebBrowser|{C2ED826E-8903-4A9D-B0DF-3A8FB8EA918A} (C:\Program Files\Softonic_ES\prxtbSof2.dll) HKCU_Toolbar\WebBrowser|{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} (C:\Program Files\XfireXO\prxtbXfir.dll) HKLM_Toolbar|{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} (C:\Program Files\MyAshampoo\prxtbMyA0.dll) HKLM_Toolbar|{c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} (C:\Program Files\Softonic_ES\prxtbSof2.dll) HKLM_Toolbar|{5e5ab302-7f65-44cd-8211-c1d4caaccea3} (C:\Program Files\XfireXO\prxtbXfir.dll) HKLM_Toolbar|{949A7FED-30B4-433e-9718-23EC99A126B0} (C:\Program Files\leveluptb\levelupdx.dll) HKLM_Toolbar|{8dcb7100-df86-4384-8842-8fa844297b3f} (C:\Program Files\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll) HKLM_Toolbar|{98889811-442D-49dd-99D7-DC866BE87DBC} (x) HKLM_ElevationPolicy\{0319FA91-B533-400B-B8EF-42F59BA7C94D} - C:\Program Files\XfireXO\XfireXOToolbarHelper.exe (?) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x) HKLM_ElevationPolicy\{2CDFC53E-A914-4002-A904-6C387EBD90FC} - C:\Users\marilaine.marilaine-Mega\AppData\Local\Conduit\CT1351364\Softonic_ESAutoUpdaterHelper.exe (x) HKLM_ElevationPolicy\{33095AB9-9134-44F0-964B-73C1DE9B6599} - C:\Users\marilaine.marilaine-Mega\AppData\Local\Conduit\CT2475029\MyAshampooAutoUpdaterHelper.exe (x) HKLM_ElevationPolicy\{3FE7C02D-DACA-4150-94FA-9932EEA86E08} - C:\Program Files\Softonic_ES\Softonic_ESToolbarHelper.exe (?) HKLM_ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2} - C:\Program Files\Orbitdownloader\orbitdm.exe (x) HKLM_ElevationPolicy\{5B3D209B-48FF-4098-9A33-D41DF5C93645} - C:\Program Files\MyAshampoo\MyAshampooToolbarHelper1.exe (?) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{949A7FED-30B4-433e-9718-23EC99A126B0} - C:\Program Files\leveluptb\uninstall.exe (LevelUp) HKLM_ElevationPolicy\{BC3032BC-A258-46D4-BE6A-5D058992D7D4} - C:\Users\marilaine.marilaine-Mega\AppData\Local\Conduit\CT2304157\XfireXOAutoUpdateHelper.exe (x) BHO\{00cbb66b-1d3b-46d3-9577-323a336acb50} - "Browser Companion Helper" (C:\Program Files\BrowserCompanion\jsloader.dll) BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?) BHO\{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - "XfireXO Toolbar" (C:\Program Files\XfireXO\prxtbXfir.dll) BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll) BHO\{9030D464-4C02-4ABF-8ECC-5164760863C6} - "Auxiliar de Conexão do Windows Live" (C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll) BHO\{949A7FED-30B4-433e-9718-23EC99A126B0} - "LevelUp Toolbar" (C:\Program Files\leveluptb\levelupdx.dll) BHO\{963B125B-8B21-49A2-A3A8-E37092276531} - "Browser Companion Helper Verifier" (C:\Program Files\BrowserCompanion\updatebhoWin32.dll) BHO\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - "MyAshampoo Toolbar" (C:\Program Files\MyAshampoo\prxtbMyA0.dll) BHO\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - "DealPly" (C:\Program Files\DealPly\DealPlyIE.dll) BHO\{c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} - "Softonic ES Toolbar" (C:\Program Files\Softonic_ES\prxtbSof2.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 1596 File(s) C:\Program Files\Ad-Remover\Backup: 15 File(s) C:\Ad-Report-CLEAN[1].txt - 26/01/2012 13:57:02 (38058 Byte(s)) End at: 13:58:15, 26/01/2012 ============== E.O.F ============== Novo LOG do HijackThis: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 14:06:01, on 26/01/2012 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16766) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Microsoft Security Essentials\msseces.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Windows Live\Messenger\MsgPlus.exe C:\Program Files\BrowserCompanion\BCHelper.exe C:\Users\marilaine.marilaine-Mega\AppData\Local\Akamai\netsession_win.exe C:\Users\marilaine.marilaine-Mega\AppData\Local\Akamai\netsession_win.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Windows\system32\taskeng.exe C:\HijackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1:9421 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\prxtbMyA0.dll R3 - URLSearchHook: Softonic ES Toolbar - {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} - C:\Program Files\Softonic_ES\prxtbSof2.dll R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\prxtbXfir.dll R3 - URLSearchHook: (no name) - {90eee664-34b1-422a-a782-779af65cdf6d} - (no file) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,"C:\Program Files\Velocidade Do PC\PCSpeedUpNotifier.exe", O2 - BHO: script helper for ie - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files\BrowserCompanion\jsloader.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: XfireXO - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\prxtbXfir.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: LevelUp Toolbar - {949A7FED-30B4-433e-9718-23EC99A126B0} - C:\Program Files\leveluptb\levelupdx.dll O2 - BHO: Update Timer - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files\BrowserCompanion\updatebhoWin32.dll O2 - BHO: MyAshampoo - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\prxtbMyA0.dll O2 - BHO: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll O2 - BHO: Softonic ES - {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} - C:\Program Files\Softonic_ES\prxtbSof2.dll O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\prxtbMyA0.dll O3 - Toolbar: Softonic ES Toolbar - {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} - C:\Program Files\Softonic_ES\prxtbSof2.dll O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\prxtbXfir.dll O3 - Toolbar: LevelUp Toolbar - {949A7FED-30B4-433e-9718-23EC99A126B0} - C:\Program Files\leveluptb\levelupdx.dll O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file) O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [sSDMonitor] C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Windows Live\Messenger\MsgPlus.exe" O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [browser companion helper] C:\Program Files\BrowserCompanion\BCHelper.exe /T=3 /CHI=ibgfbdggapddbjjbopabhlhianklajie O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h O4 - HKCU\..\Run: [Ghost Control] "C:\Program Files\Ghost Control\ghost.exe" -startup O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Windows Live\Messenger\MsgPlus.exe" /WinStart O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\marilaine.marilaine-Mega\AppData\Local\Akamai\netsession_win.exe" O4 - HKCU\..\Run: [EPSON Stylus CX5900 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIBIP.EXE /FU "C:\Windows\TEMP\E_SE3C9.tmp" /EF "HKCU" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE') O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll O18 - Protocol: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll O18 - Protocol: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: PCSpeedUp Service (PCSpeedUpService) - Speedchecker - C:\Program Files\Velocidade Do PC\PCSpeedUpService.exe O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.6\bin\httpd.exe O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.45\bin\mysqld-nt.exe O23 - Service: xsherlock - Wellbia.com Co., Ltd. - C:\Windows\system32\xsherlock.xem -- End of file - 9974 bytes Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Janeiro 26, 2012 Boa Tarde! SmasH |- Baixe: < AdwCleaner > ( ... par Xplode ) |- Clique em Télécharger! < > |- Salve-o no desktop! |- Dê início ao scan,clicando em "Suppression" < > |- Ao concluir,poste o relatório: C:\AdwCleaner[S].txt ////°°°//// |- Baixe: < > ( ...by sUBs ) |- Salve-o no desktop! ( Área de trabalho! ) |- Ps: Desabilite seu antivírus,antispywares e/ou firewall. ( Menos o do Windows! ) |- Feche algum programa/arquivo que esteja aberto. |- Ps: Esteja conectado(a) à Internet. |- Execute ComboFix.exe,com um duplo clique. |- Ps: Lhe será pedido a instalação do "Console de Recuperação". |- Ps: Ficará,portanto,à seu critério optar por sua instalação. |- Ps: Caso aconteça a notificação de: Aplicativo Win32 não-válido,delete a ferramenta e faça,novamente,o download. |- Salve-a no desktop,renomeada como: Kombo.exe |- Nomeie durante o salvamento,e não após salvá-la! |- Surgindo alguma mensagem de erro,rode o ComboFix.exe em Modo de Segurança. |- Ps: Para completar as remoções,talvez haja necessidade da ferramenta reiniciar o computador. |- "ComboFix é uma ferramenta que pode danificar o sistema. Utilize-o,somente,sob supervisão de analistas de segurança." |- Abrir-se-á a janela Auto Scan. |- Aguarde a finalização de todas as Etapas. |- Durante o scan,evite utilizar o mouse ou teclado! |- Concluindo,poste: C:\ComboFix.txt Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
SmasH 0 Denunciar post Postado Janeiro 26, 2012 Log do AdwCleaner: # AdwCleaner v1.407 - Logfile created 01/26/2012 at 17:12:26 # Updated 18/01/2012 by Xplode # Operating system : Windows 7 Starter (32 bits) # User : marilaine - MARILAINE-MEGA (Administrator) # Running from : C:\Users\marilaine.marilaine-Mega\Desktop\adwcleaner.exe # Option [search] ***** [services] ***** ***** [Files / Folders] ***** Folder Found : C:\ProgramData\BasicScan Folder Found : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Babylon Folder Found : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} Folder Found : C:\Users\marilaine.marilaine-Mega\AppData\Local\Babylon Folder Found : C:\Users\marilaine.marilaine-Mega\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly Folder Found : C:\Program Files\BasicScan Folder Found : C:\Program Files\DealPly Folder Found : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\ConduitCommon Folder Found : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} Folder Found : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\extensions\ffxtlbr@babylon.com Folder Found : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\extensions\m3ffxtbr@mywebsearch.com File Found : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml ***** [Registry] ***** Key Found : HKCU\Software\DealPly Key Found : HKLM\SOFTWARE\APN Key Found : HKLM\SOFTWARE\Babylon Key Found : HKLM\SOFTWARE\BasicScan Key Found : HKLM\SOFTWARE\DealPly Key Found : HKLM\SOFTWARE\Iminent Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1 Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1 Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1 Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB} Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Key Found : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484a-89D3-318C928DAC1B} Key Found : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4ccf-834A-2DDA4E29E39E} Key Found : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575} Key Found : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370} Key Found : HKLM\SOFTWARE\Classes\CLSID\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} Key Found : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1} Key Found : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D} Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F} Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599} Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047} Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68} Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020} Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD} Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E} Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997} Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70} Key Found : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8856F961-340A-11D0-A96B-00C04FD705A2} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49dd-99D7-DC866BE87DBC}] Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater] ***** [internet Browsers] ***** -\\ Internet Explorer v8.0.7600.16385 [OK] Registry is clean. -\\ Mozilla Firefox v9.0.1 (pt-BR) Profile : tzol3vmr.default File : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\prefs.js Found : user_pref("CT1098640..clientLogIsEnabled", true); Found : user_pref("CT1098640..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Found : user_pref("CT1098640..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Found : user_pref("CT1098640.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Found : user_pref("CT1098640.AppTrackingLastCheckTime", "Sun Apr 17 2011 16:55:19 GMT-0300 (Hora oficial do [...] Found : user_pref("CT1098640.CT1098640", "CT1098640"); Found : user_pref("CT1098640.CommunitiesChangesLastCheckTime", "Fri Sep 02 2011 19:58:19 GMT-0300 (Hora ofic[...] Found : user_pref("CT1098640.CommunitiesChangesLastUrl", "hxxp://grouping.services.conduit.com/GroupingReque[...] Found : user_pref("CT1098640.CommunityChanged", true); Found : user_pref("CT1098640.CurrentServerDate", "2-9-2011"); Found : user_pref("CT1098640.DialogsAlignMode", "LTR"); Found : user_pref("CT1098640.DialogsGetterLastCheckTime", "Thu Sep 01 2011 19:28:01 GMT-0300 (Hora oficial d[...] Found : user_pref("CT1098640.DownloadDomainsCheckInterval", "168"); Found : user_pref("CT1098640.DownloadDomainsListLastCheckTime", "Tue Aug 30 2011 18:26:43 GMT-0300 (Hora ofi[...] Found : user_pref("CT1098640.DownloadDomainsListLastServerUpdateTime", "1201069983"); Found : user_pref("CT1098640.DownloadReferralCookieData", ""); Found : user_pref("CT1098640.FeedLastCount128295885701037994", 0); Found : user_pref("CT1098640.FeedPollDate128295885701037994", "Fri Sep 02 2011 19:58:21 GMT-0300 (Hora ofici[...] Found : user_pref("CT1098640.FirstServerDate", "10-4-2011"); Found : user_pref("CT1098640.FirstTime", true); Found : user_pref("CT1098640.FirstTimeFF3", true); Found : user_pref("CT1098640.FixPageNotFoundErrors", true); Found : user_pref("CT1098640.GroupingServerCheckInterval", 1440); Found : user_pref("CT1098640.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Found : user_pref("CT1098640.HasUserGlobalKeys", true); Found : user_pref("CT1098640.HomePageProtectorEnabled", false); Found : user_pref("CT1098640.Initialize", true); Found : user_pref("CT1098640.InitializeCommonPrefs", true); Found : user_pref("CT1098640.InstallationAndCookieDataSentCount", 3); Found : user_pref("CT1098640.InstalledDate", "Sun Apr 10 2011 14:19:39 GMT-0300 (Hora oficial do Brasil)"); Found : user_pref("CT1098640.InvalidateCache", false); Found : user_pref("CT1098640.IsAlertDBUpdated", true); Found : user_pref("CT1098640.IsGrouping", false); Found : user_pref("CT1098640.IsMulticommunity", true); Found : user_pref("CT1098640.IsOpenThankYouPage", true); Found : user_pref("CT1098640.IsOpenUninstallPage", true); Found : user_pref("CT1098640.LanguagePackLastCheckTime", "Fri Sep 02 2011 10:56:42 GMT-0300 (Hora oficial do[...] Found : user_pref("CT1098640.LanguagePackReloadIntervalMM", 1440); Found : user_pref("CT1098640.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Found : user_pref("CT1098640.LastLogin_3.3.3.2", "Thu Jul 07 2011 22:07:39 GMT-0300 (Hora oficial do Brasil)[...] Found : user_pref("CT1098640.LastLogin_3.5.0.12", "Sun Jul 31 2011 13:53:00 GMT-0300 (Hora oficial do Brasil[...] Found : user_pref("CT1098640.LastLogin_3.6.0.10", "Fri Sep 02 2011 17:54:43 GMT-0300 (Hora oficial do Brasil[...] Found : user_pref("CT1098640.LatestVersion", "3.5.0.12"); Found : user_pref("CT1098640.Locale", "en-us"); Found : user_pref("CT1098640.MCDetectTooltipHeight", "83"); Found : user_pref("CT1098640.MCDetectTooltipShow", true); Found : user_pref("CT1098640.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Found : user_pref("CT1098640.MCDetectTooltipWidth", "295"); Found : user_pref("CT1098640.MyStuffEnabledAtInstallation", true); Found : user_pref("CT1098640.RadioIsPodcast", false); Found : user_pref("CT1098640.RadioLastCheckTime", "Fri Sep 02 2011 10:56:40 GMT-0300 (Hora oficial do Brasil[...] Found : user_pref("CT1098640.RadioLastUpdateIPServer", "0"); Found : user_pref("CT1098640.RadioLastUpdateServer", "128929877726170000"); Found : user_pref("CT1098640.RadioMediaID", "4817804"); Found : user_pref("CT1098640.RadioMediaType", "Media Player"); Found : user_pref("CT1098640.RadioMenuSelectedID", "EBRadioMenu_CT10986404817804"); Found : user_pref("CT1098640.RadioShrinkedFromSetup", false); Found : user_pref("CT1098640.RadioStationName", "Adult%20Alternative"); Found : user_pref("CT1098640.RadioStationURL", "hxxp://syndication.choiceradio.com/asxplay/asx-music/406.asx[...] Found : user_pref("CT1098640.SavedHomepage", "hxxp://www.ccvteam.com/forum/"); Found : user_pref("CT1098640.SearchBoxWidth", 150); Found : user_pref("CT1098640.SearchEngineBeforeUnload", "Google"); Found : user_pref("CT1098640.SearchFromAddressBarIsInit", true); Found : user_pref("CT1098640.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT109[...] Found : user_pref("CT1098640.SearchInNewTabEnabled", true); Found : user_pref("CT1098640.SearchInNewTabIntervalMM", 1440); Found : user_pref("CT1098640.SearchInNewTabLastCheckTime", "Fri Sep 02 2011 10:56:38 GMT-0300 (Hora oficial [...] Found : user_pref("CT1098640.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Found : user_pref("CT1098640.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Found : user_pref("CT1098640.SearchProtectorEnabled", false); Found : user_pref("CT1098640.SearchProtectorToolbarDisabled", true); Found : user_pref("CT1098640.ServiceMapLastCheckTime", "Fri Sep 02 2011 10:56:39 GMT-0300 (Hora oficial do B[...] Found : user_pref("CT1098640.SettingsLastCheckTime", "Fri Sep 02 2011 19:58:19 GMT-0300 (Hora oficial do Bra[...] Found : user_pref("CT1098640.SettingsLastUpdate", "1314539878"); Found : user_pref("CT1098640.ThirdPartyComponentsInterval", 504); Found : user_pref("CT1098640.ThirdPartyComponentsLastCheck", "Mon Aug 15 2011 12:08:46 GMT-0300 (Hora oficia[...] Found : user_pref("CT1098640.ThirdPartyComponentsLastUpdate", "1246786978"); Found : user_pref("CT1098640.ToolbarDisabled", true); Found : user_pref("CT1098640.ToolbarShrinkedFromSetup", false); Found : user_pref("CT1098640.TrusteLinkUrl", "hxxp://trust.conduit.com/CT1098640"); Found : user_pref("CT1098640.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Found : user_pref("CT1098640.UserID", "UN66086976168766322"); Found : user_pref("CT1098640.ValidationData_Toolbar", 2); Found : user_pref("CT1098640.WeatherNetwork", ""); Found : user_pref("CT1098640.WeatherPollDate", "Fri Sep 02 2011 19:59:41 GMT-0300 (Hora oficial do Brasil)")[...] Found : user_pref("CT1098640.WeatherUnit", "C"); Found : user_pref("CT1098640.alertChannelId", "5747"); Found : user_pref("CT1098640.approveUntrustedApps", true); Found : user_pref("CT1098640.components.1000234", true); Found : user_pref("CT1098640.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Found : user_pref("CT1098640.globalFirstTimeInfoLastCheckTime", "Fri Sep 02 2011 17:54:44 GMT-0300 (Hora ofi[...] Found : user_pref("CT1098640.homepageProtectorEnableByLogin", true); Found : user_pref("CT1098640.initDone", true); Found : user_pref("CT1098640.isAppTrackingManagerOn", true); Found : user_pref("CT1098640.isFirstRadioInstallation", false); Found : user_pref("CT1098640.myStuffEnabled", true); Found : user_pref("CT1098640.myStuffPublihserMinWidth", 400); Found : user_pref("CT1098640.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Found : user_pref("CT1098640.myStuffServiceIntervalMM", 1440); Found : user_pref("CT1098640.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Found : user_pref("CT1098640.oldAppsList", "200,128333897468069547,128295879817444167,111,128295979035569280[...] Found : user_pref("CT1098640.searchProtectorDialogDelayInSec", 10); Found : user_pref("CT1098640.searchProtectorEnableByLogin", true); Found : user_pref("CT1098640.testingCtid", ""); Found : user_pref("CT1098640.toolbarAppMetaDataLastCheckTime", "Fri Sep 02 2011 10:56:42 GMT-0300 (Hora ofic[...] Found : user_pref("CT1098640.toolbarContextMenuLastCheckTime", "Fri Sep 02 2011 17:54:44 GMT-0300 (Hora ofic[...] Found : user_pref("CT1098640.undefined", "Sun Apr 10 2011 14:19:24 GMT-0300 (Hora oficial do Brasil)"); Found : user_pref("CT1098640.usagesFlag", 2); Found : user_pref("CT2247187..clientLogIsEnabled", true); Found : user_pref("CT2247187..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Found : user_pref("CT2247187..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Found : user_pref("CT2247187.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Found : user_pref("CT2247187.AppTrackingLastCheckTime", "Wed Apr 27 2011 13:30:00 GMT-0300 (Hora oficial do [...] Found : user_pref("CT2247187.CT2247187", "CT2247187"); Found : user_pref("CT2247187.Chat.Meebo.ServerLastCheckTime", "Sun Apr 10 2011 17:07:19 GMT-0300 (Hora ofici[...] Found : user_pref("CT2247187.Chat.Meebo.ServerLastResponseTime", "Sun Apr 10 2011 17:07:20 GMT-0300 (Hora of[...] Found : user_pref("CT2247187.Chat.Meebo.rooms.2030of7a78203f", 6); Found : user_pref("CT2247187.Chat.Meebo.rooms.30plus683ec0a3", 22); Found : user_pref("CT2247187.Chat.Meebo.rooms.entertainment3d98c8ee", 0); Found : user_pref("CT2247187.Chat.Meebo.rooms.healthed7eb5ea", 0); Found : user_pref("CT2247187.Chat.Meebo.rooms.marioforevercommunitychatdf56fc21", 6); Found : user_pref("CT2247187.Chat.Meebo.rooms.musicpca565a36", 6); Found : user_pref("CT2247187.Chat.Meebo.rooms.newstu0548025d", 1); Found : user_pref("CT2247187.Chat.Meebo.rooms.recreation2b6006ec", 0); Found : user_pref("CT2247187.Chat.Meebo.rooms.spirituality9440382e", 0); Found : user_pref("CT2247187.Chat.Meebo.rooms.sports84029aeb", 0); Found : user_pref("CT2247187.Chat.Meebo.rooms.technology9fc01102", 0); Found : user_pref("CT2247187.Chat.Meebo.rooms.teenagers60fc8fbc", 39); Found : user_pref("CT2247187.Chat.Meebo.rooms.travel0e02ee8e", 0); Found : user_pref("CT2247187.Chat.Meebo.rooms.videogames58dc7b74", 0); Found : user_pref("CT2247187.Chat.ServerLastCheckTime", "Sun Apr 10 2011 17:07:19 GMT-0300 (Hora oficial do [...] Found : user_pref("CT2247187.CommunitiesChangesLastCheckTime", "Fri Sep 02 2011 19:58:21 GMT-0300 (Hora ofic[...] Found : user_pref("CT2247187.CommunitiesChangesLastUrl", "hxxp://grouping.services.conduit.com/GroupingReque[...] Found : user_pref("CT2247187.CommunityChanged", true); Found : user_pref("CT2247187.CurrentServerDate", "2-9-2011"); Found : user_pref("CT2247187.DialogsAlignMode", "LTR"); Found : user_pref("CT2247187.DialogsGetterLastCheckTime", "Thu Sep 01 2011 19:28:02 GMT-0300 (Hora oficial d[...] Found : user_pref("CT2247187.DownloadDomainsCheckInterval", "168"); Found : user_pref("CT2247187.DownloadDomainsListLastCheckTime", "Tue Aug 30 2011 18:26:45 GMT-0300 (Hora ofi[...] Found : user_pref("CT2247187.DownloadDomainsListLastServerUpdateTime", "1201069983"); Found : user_pref("CT2247187.DownloadReferralCookieData", ""); Found : user_pref("CT2247187.EMailNotifierPollDate", "Fri Sep 02 2011 19:54:39 GMT-0300 (Hora oficial do Bra[...] Found : user_pref("CT2247187.FirstServerDate", "10-4-2011"); Found : user_pref("CT2247187.FirstTime", true); Found : user_pref("CT2247187.FirstTimeFF3", true); Found : user_pref("CT2247187.FixPageNotFoundErrors", true); Found : user_pref("CT2247187.GroupingServerCheckInterval", 1440); Found : user_pref("CT2247187.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Found : user_pref("CT2247187.HasUserGlobalKeys", true); Found : user_pref("CT2247187.HomePageProtectorEnabled", false); Found : user_pref("CT2247187.Initialize", true); Found : user_pref("CT2247187.InitializeCommonPrefs", true); Found : user_pref("CT2247187.InstallationAndCookieDataSentCount", 3); Found : user_pref("CT2247187.InstalledDate", "Sun Apr 10 2011 14:20:23 GMT-0300 (Hora oficial do Brasil)"); Found : user_pref("CT2247187.InvalidateCache", false); Found : user_pref("CT2247187.IsAlertDBUpdated", true); Found : user_pref("CT2247187.IsGrouping", false); Found : user_pref("CT2247187.IsMulticommunity", true); Found : user_pref("CT2247187.IsOpenThankYouPage", true); Found : user_pref("CT2247187.IsOpenUninstallPage", true); Found : user_pref("CT2247187.LanguagePackLastCheckTime", "Fri Sep 02 2011 10:56:43 GMT-0300 (Hora oficial do[...] Found : user_pref("CT2247187.LanguagePackReloadIntervalMM", 1440); Found : user_pref("CT2247187.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Found : user_pref("CT2247187.LastLogin_3.3.3.2", "Tue Aug 16 2011 11:48:58 GMT-0300 (Hora oficial do Brasil)[...] Found : user_pref("CT2247187.LastLogin_3.6.0.10", "Fri Sep 02 2011 17:54:48 GMT-0300 (Hora oficial do Brasil[...] Found : user_pref("CT2247187.LatestVersion", "3.6.0.10"); Found : user_pref("CT2247187.Locale", "en"); Found : user_pref("CT2247187.MCDetectTooltipHeight", "83"); Found : user_pref("CT2247187.MCDetectTooltipShow", true); Found : user_pref("CT2247187.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Found : user_pref("CT2247187.MCDetectTooltipWidth", "295"); Found : user_pref("CT2247187.MyStuffEnabledAtInstallation", true); Found : user_pref("CT2247187.RadioIsPodcast", false); Found : user_pref("CT2247187.RadioLastCheckTime", "Fri Sep 02 2011 10:56:40 GMT-0300 (Hora oficial do Brasil[...] Found : user_pref("CT2247187.RadioLastUpdateIPServer", "3"); Found : user_pref("CT2247187.RadioLastUpdateServer", "128929877726170000"); Found : user_pref("CT2247187.RadioMediaID", "10957728"); Found : user_pref("CT2247187.RadioMediaType", "Media Player"); Found : user_pref("CT2247187.RadioMenuSelectedID", "EBRadioMenu_CT224718710957728"); Found : user_pref("CT2247187.RadioShrinkedFromSetup", false); Found : user_pref("CT2247187.RadioStationName", "Rap%20(Uncensored)"); Found : user_pref("CT2247187.RadioStationURL", "hxxp://www.1club.fm/go/tunein.aspx?station=raw"); Found : user_pref("CT2247187.SavedHomepage", "hxxp://search.conduit.com/?ctid=CT1098640&SearchSource=13"); Found : user_pref("CT2247187.SearchEngineBeforeUnload", "Google"); Found : user_pref("CT2247187.SearchFromAddressBarIsInit", true); Found : user_pref("CT2247187.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT224[...] Found : user_pref("CT2247187.SearchInNewTabEnabled", true); Found : user_pref("CT2247187.SearchInNewTabIntervalMM", 1440); Found : user_pref("CT2247187.SearchInNewTabLastCheckTime", "Fri Sep 02 2011 10:56:40 GMT-0300 (Hora oficial [...] Found : user_pref("CT2247187.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Found : user_pref("CT2247187.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Found : user_pref("CT2247187.SearchProtectorEnabled", false); Found : user_pref("CT2247187.SearchProtectorToolbarDisabled", true); Found : user_pref("CT2247187.ServiceMapLastCheckTime", "Fri Sep 02 2011 10:56:42 GMT-0300 (Hora oficial do B[...] Found : user_pref("CT2247187.SettingsLastCheckTime", "Fri Sep 02 2011 19:58:21 GMT-0300 (Hora oficial do Bra[...] Found : user_pref("CT2247187.SettingsLastUpdate", "1313595310"); Found : user_pref("CT2247187.ThirdPartyComponentsInterval", 504); Found : user_pref("CT2247187.ThirdPartyComponentsLastCheck", "Mon Aug 15 2011 12:08:43 GMT-0300 (Hora oficia[...] Found : user_pref("CT2247187.ThirdPartyComponentsLastUpdate", "1246786978"); Found : user_pref("CT2247187.ToolbarDisabled", true); Found : user_pref("CT2247187.ToolbarShrinkedFromSetup", false); Found : user_pref("CT2247187.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2247187"); Found : user_pref("CT2247187.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Found : user_pref("CT2247187.UserID", "UN09690826801131414"); Found : user_pref("CT2247187.ValidationData_Search", 0); Found : user_pref("CT2247187.ValidationData_Toolbar", 2); Found : user_pref("CT2247187.WeatherNetwork", ""); Found : user_pref("CT2247187.WeatherPollDate", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora oficial do Brasil)")[...] Found : user_pref("CT2247187.WeatherUnit", "C"); Found : user_pref("CT2247187.alertChannelId", "644679"); Found : user_pref("CT2247187.approveUntrustedApps", true); Found : user_pref("CT2247187.backendstorage._fb_dailyactivity", "31333032343535393837393039"); Found : user_pref("CT2247187.backendstorage._fb_lifetimesent", "54525545"); Found : user_pref("CT2247187.backendstorage.facebook_ctid_connect_send", "73656E646564"); Found : user_pref("CT2247187.backendstorage.fb_dailyactivity", "31333033373635343932303838"); Found : user_pref("CT2247187.backendstorage.fb_lifetimesent", "54525545"); Found : user_pref("CT2247187.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E"); Found : user_pref("CT2247187.components.1000034", true); Found : user_pref("CT2247187.components.1000234", true); Found : user_pref("CT2247187.components.1010001", false); Found : user_pref("CT2247187.components.128840198243206305", false); Found : user_pref("CT2247187.components.128847263891375953", false); Found : user_pref("CT2247187.components.129066416652342809", false); Found : user_pref("CT2247187.components.129143810623275080", false); Found : user_pref("CT2247187.components.129466481521850704", false); Found : user_pref("CT2247187.components.8376440747724315881", false); Found : user_pref("CT2247187.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Found : user_pref("CT2247187.globalFirstTimeInfoLastCheckTime", "Fri Sep 02 2011 17:54:50 GMT-0300 (Hora ofi[...] Found : user_pref("CT2247187.homepageProtectorEnableByLogin", true); Found : user_pref("CT2247187.initDone", true); Found : user_pref("CT2247187.isAppTrackingManagerOn", true); Found : user_pref("CT2247187.isFirstRadioInstallation", false); Found : user_pref("CT2247187.myStuffEnabled", true); Found : user_pref("CT2247187.myStuffPublihserMinWidth", 400); Found : user_pref("CT2247187.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Found : user_pref("CT2247187.myStuffServiceIntervalMM", 1440); Found : user_pref("CT2247187.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Found : user_pref("CT2247187.oldAppsList", "200,128834881989343894,128834881989343895,111,129415741154562666[...] Found : user_pref("CT2247187.searchProtectorDialogDelayInSec", 10); Found : user_pref("CT2247187.searchProtectorEnableByLogin", true); Found : user_pref("CT2247187.testingCtid", ""); Found : user_pref("CT2247187.toolbarAppMetaDataLastCheckTime", "Fri Sep 02 2011 10:56:44 GMT-0300 (Hora ofic[...] Found : user_pref("CT2247187.toolbarContextMenuLastCheckTime", "Tue Aug 30 2011 14:12:59 GMT-0300 (Hora ofic[...] Found : user_pref("CT2247187.usagesFlag", 2); Found : user_pref("CT2304157..clientLogIsEnabled", false); Found : user_pref("CT2304157..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Found : user_pref("CT2304157..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Found : user_pref("CT2304157.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Found : user_pref("CT2304157.BrowserCompStateIsOpen_1000515", true); Found : user_pref("CT2304157.CT2304157", "CT2304157"); Found : user_pref("CT2304157.CurrentServerDate", "8-10-2011"); Found : user_pref("CT2304157.DialogsAlignMode", "LTR"); Found : user_pref("CT2304157.DialogsGetterLastCheckTime", "Sat Oct 08 2011 12:25:33 GMT-0300 (Hora oficial d[...] Found : user_pref("CT2304157.DownloadReferralCookieData", ""); Found : user_pref("CT2304157.FeedLastCount129078895246717929", 20); Found : user_pref("CT2304157.FeedLastCount129095439763593837", 36); Found : user_pref("CT2304157.FeedPollDate129078895250311712", "Sat Oct 08 2011 18:25:33 GMT-0300 (Hora ofici[...] Found : user_pref("CT2304157.FeedPollDate129095439763593837", "Sat Oct 08 2011 18:25:32 GMT-0300 (Hora ofici[...] Found : user_pref("CT2304157.FeedTTL129078895250311712", 40); Found : user_pref("CT2304157.FirstServerDate", "2-7-2011"); Found : user_pref("CT2304157.FirstTime", true); Found : user_pref("CT2304157.FirstTimeFF3", true); Found : user_pref("CT2304157.FixPageNotFoundErrors", true); Found : user_pref("CT2304157.GroupingServerCheckInterval", 1440); Found : user_pref("CT2304157.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Found : user_pref("CT2304157.HasUserGlobalKeys", true); Found : user_pref("CT2304157.HomePageProtectorEnabled", false); Found : user_pref("CT2304157.Initialize", true); Found : user_pref("CT2304157.InitializeCommonPrefs", true); Found : user_pref("CT2304157.InstallationAndCookieDataSentCount", 3); Found : user_pref("CT2304157.InstalledDate", "Sat Jul 02 2011 10:27:42 GMT-0300 (Hora oficial do Brasil)"); Found : user_pref("CT2304157.IsAlertDBUpdated", true); Found : user_pref("CT2304157.IsGrouping", false); Found : user_pref("CT2304157.IsInitSetupIni", true); Found : user_pref("CT2304157.IsMulticommunity", false); Found : user_pref("CT2304157.IsOpenThankYouPage", true); Found : user_pref("CT2304157.IsOpenUninstallPage", true); Found : user_pref("CT2304157.IsProtectorsInit", true); Found : user_pref("CT2304157.LanguagePackLastCheckTime", "Sat Oct 08 2011 12:25:33 GMT-0300 (Hora oficial do[...] Found : user_pref("CT2304157.LanguagePackReloadIntervalMM", 1440); Found : user_pref("CT2304157.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Found : user_pref("CT2304157.LastLogin_3.5.0.12", "Fri Sep 02 2011 17:54:42 GMT-0300 (Hora oficial do Brasil[...] Found : user_pref("CT2304157.LastLogin_3.6.0.10", "Sat Oct 08 2011 16:25:32 GMT-0300 (Hora oficial do Brasil[...] Found : user_pref("CT2304157.LatestVersion", "3.7.0.6"); Found : user_pref("CT2304157.Locale", "en"); Found : user_pref("CT2304157.MCDetectTooltipHeight", "83"); Found : user_pref("CT2304157.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Found : user_pref("CT2304157.MCDetectTooltipWidth", "295"); Found : user_pref("CT2304157.MyStuffEnabledAtInstallation", true); Found : user_pref("CT2304157.OriginalFirstVersion", "3.5.0.12"); Found : user_pref("CT2304157.SavedHomepage", "hxxp://www.ccvteam.com/forum/"); Found : user_pref("CT2304157.SearchBoxWidth", 150); Found : user_pref("CT2304157.SearchEngineBeforeUnload", "Google"); Found : user_pref("CT2304157.SearchFromAddressBarIsInit", true); Found : user_pref("CT2304157.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT230[...] Found : user_pref("CT2304157.SearchInNewTabEnabled", true); Found : user_pref("CT2304157.SearchInNewTabIntervalMM", 1440); Found : user_pref("CT2304157.SearchInNewTabLastCheckTime", "Sat Oct 08 2011 12:25:32 GMT-0300 (Hora oficial [...] Found : user_pref("CT2304157.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Found : user_pref("CT2304157.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...] Found : user_pref("CT2304157.SearchProtectorEnabled", false); Found : user_pref("CT2304157.SearchProtectorToolbarDisabled", true); Found : user_pref("CT2304157.ServiceMapLastCheckTime", "Sat Oct 08 2011 12:25:32 GMT-0300 (Hora oficial do B[...] Found : user_pref("CT2304157.SettingsLastCheckTime", "Sat Oct 08 2011 12:25:32 GMT-0300 (Hora oficial do Bra[...] Found : user_pref("CT2304157.SettingsLastUpdate", "1317627084"); Found : user_pref("CT2304157.ThirdPartyComponentsInterval", 504); Found : user_pref("CT2304157.ThirdPartyComponentsLastCheck", "Sat Oct 08 2011 12:25:31 GMT-0300 (Hora oficia[...] Found : user_pref("CT2304157.ThirdPartyComponentsLastUpdate", "1312887586"); Found : user_pref("CT2304157.ToolbarDisabled", false); Found : user_pref("CT2304157.ToolbarShrinkedFromSetup", false); Found : user_pref("CT2304157.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2304157"); Found : user_pref("CT2304157.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Found : user_pref("CT2304157.Uninstall", true); Found : user_pref("CT2304157.UserID", "UN78475189431696673"); Found : user_pref("CT2304157.ValidationData_Toolbar", 2); Found : user_pref("CT2304157.alertChannelId", "700614"); Found : user_pref("CT2304157.backendstorage.facebook_mode", "32"); Found : user_pref("CT2304157.backendstorage.facebook_user_locale", "7074"); Found : user_pref("CT2304157.components.1000515", true); Found : user_pref("CT2304157.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Found : user_pref("CT2304157.globalFirstTimeInfoLastCheckTime", "Sat Oct 08 2011 16:25:33 GMT-0300 (Hora ofi[...] Found : user_pref("CT2304157.homepageProtectorEnableByLogin", true); Found : user_pref("CT2304157.initDone", true); Found : user_pref("CT2304157.isAppTrackingManagerOn", true); Found : user_pref("CT2304157.myStuffEnabled", true); Found : user_pref("CT2304157.myStuffPublihserMinWidth", 400); Found : user_pref("CT2304157.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Found : user_pref("CT2304157.myStuffServiceIntervalMM", 1440); Found : user_pref("CT2304157.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Found : user_pref("CT2304157.oldAppsList", "128883653123969059,128883653123969060,111,128883659132094175,129[...] Found : user_pref("CT2304157.searchProtectorDialogDelayInSec", 10); Found : user_pref("CT2304157.searchProtectorEnableByLogin", true); Found : user_pref("CT2304157.testingCtid", ""); Found : user_pref("CT2304157.toolbarAppMetaDataLastCheckTime", "Sat Oct 08 2011 12:25:33 GMT-0300 (Hora ofic[...] Found : user_pref("CT2304157.toolbarContextMenuLastCheckTime", "Sat Oct 08 2011 12:25:33 GMT-0300 (Hora ofic[...] Found : user_pref("CT2304157.undefined", "Mon Jul 18 2011 12:03:00 GMT-0300 (Hora oficial do Brasil)"); Found : user_pref("CT2304157.usagesFlag", 2); Found : user_pref("CT2324177..clientLogIsEnabled", true); Found : user_pref("CT2324177..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Found : user_pref("CT2324177..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Found : user_pref("CT2324177.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); Found : user_pref("CT2324177.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Found : user_pref("CT2324177.AppTrackingLastCheckTime", "Sat Dec 24 2011 21:31:56 GMT-0200"); Found : user_pref("CT2324177.CTID", "CT2324177"); Found : user_pref("CT2324177.CurrentServerDate", "29-12-2011"); Found : user_pref("CT2324177.DialogsAlignMode", "LTR"); Found : user_pref("CT2324177.DialogsGetterLastCheckTime", "Mon Dec 26 2011 17:11:29 GMT-0200"); Found : user_pref("CT2324177.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...] Found : user_pref("CT2324177.FirstServerDate", "2-1-2011"); Found : user_pref("CT2324177.FirstTime", true); Found : user_pref("CT2324177.FirstTimeFF3", true); Found : user_pref("CT2324177.FixPageNotFoundErrors", true); Found : user_pref("CT2324177.GroupingServerCheckInterval", 1440); Found : user_pref("CT2324177.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Found : user_pref("CT2324177.HasUserGlobalKeys", true); Found : user_pref("CT2324177.HomePageProtectorEnabled", false); Found : user_pref("CT2324177.Initialize", true); Found : user_pref("CT2324177.InitializeCommonPrefs", true); Found : user_pref("CT2324177.InstallationAndCookieDataSentCount", 3); Found : user_pref("CT2324177.InstalledDate", "Sat Jan 01 2011 19:41:24 GMT-0200"); Found : user_pref("CT2324177.InvalidateCache", false); Found : user_pref("CT2324177.IsAlertDBUpdated", true); Found : user_pref("CT2324177.IsGrouping", false); Found : user_pref("CT2324177.IsMulticommunity", false); Found : user_pref("CT2324177.IsOpenThankYouPage", true); Found : user_pref("CT2324177.IsOpenUninstallPage", true); Found : user_pref("CT2324177.LanguagePackLastCheckTime", "Wed Dec 28 2011 14:20:02 GMT-0200"); Found : user_pref("CT2324177.LanguagePackReloadIntervalMM", 1440); Found : user_pref("CT2324177.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Found : user_pref("CT2324177.LastLogin_3.2.5.2", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora oficial do Brasil)[...] Found : user_pref("CT2324177.LastLogin_3.3.3.2", "Fri Jul 08 2011 18:53:08 GMT-0300 (Hora oficial do Brasil)[...] Found : user_pref("CT2324177.LastLogin_3.5.0.12", "Mon Aug 01 2011 12:42:25 GMT-0300 (Hora oficial do Brasil[...] Found : user_pref("CT2324177.LastLogin_3.6.0.10", "Tue Oct 11 2011 13:27:23 GMT-0300 (Hora oficial do Brasil[...] Found : user_pref("CT2324177.LastLogin_3.7.0.6", "Mon Oct 10 2011 10:02:22 GMT-0300 (Hora oficial do Brasil)[...] Found : user_pref("CT2324177.LastLogin_3.8.0.8", "Tue Dec 06 2011 23:28:01 GMT-0200"); Found : user_pref("CT2324177.LastLogin_3.8.1.0", "Thu Dec 29 2011 09:41:28 GMT-0200"); Found : user_pref("CT2324177.LatestVersion", "3.8.1.0"); Found : user_pref("CT2324177.Locale", "pt"); Found : user_pref("CT2324177.MCDetectTooltipHeight", "83"); Found : user_pref("CT2324177.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Found : user_pref("CT2324177.MCDetectTooltipWidth", "295"); Found : user_pref("CT2324177.MyStuffEnabledAtInstallation", true); Found : user_pref("CT2324177.RadioIsPodcast", false); Found : user_pref("CT2324177.RadioLastCheckTime", "Wed Dec 28 2011 14:20:00 GMT-0200"); Found : user_pref("CT2324177.RadioLastUpdateIPServer", "3"); Found : user_pref("CT2324177.RadioLastUpdateServer", "129176584656270000"); Found : user_pref("CT2324177.RadioMediaID", "20572458"); Found : user_pref("CT2324177.RadioMediaType", "Media Player"); Found : user_pref("CT2324177.RadioMenuSelectedID", "EBRadioMenu_CT2324177_RECENT20572458"); Found : user_pref("CT2324177.RadioShrinked", "expanded"); Found : user_pref("CT2324177.RadioShrinkedFromSetup", false); Found : user_pref("CT2324177.RadioStationName", "Radio%20CCV"); Found : user_pref("CT2324177.RadioStationURL", "hxxp://streaming10.brlogic.com:8192"); Found : user_pref("CT2324177.SHRINK_TOOLBAR", 1); Found : user_pref("CT2324177.SearchBoxWidth", 150); Found : user_pref("CT2324177.SearchEngineBeforeUnload", "Google"); Found : user_pref("CT2324177.SearchFromAddressBarIsInit", true); Found : user_pref("CT2324177.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT232[...] Found : user_pref("CT2324177.SearchInNewTabEnabled", true); Found : user_pref("CT2324177.SearchInNewTabIntervalMM", 1440); Found : user_pref("CT2324177.SearchInNewTabLastCheckTime", "Wed Dec 28 2011 14:20:00 GMT-0200"); Found : user_pref("CT2324177.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Found : user_pref("CT2324177.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...] Found : user_pref("CT2324177.SearchProtectorEnabled", false); Found : user_pref("CT2324177.SearchProtectorToolbarDisabled", false); Found : user_pref("CT2324177.ServiceMapLastCheckTime", "Wed Dec 28 2011 14:20:01 GMT-0200"); Found : user_pref("CT2324177.SettingsLastCheckTime", "Thu Dec 29 2011 09:41:24 GMT-0200"); Found : user_pref("CT2324177.SettingsLastUpdate", "1321973073"); Found : user_pref("CT2324177.ThirdPartyComponentsInterval", 504); Found : user_pref("CT2324177.ThirdPartyComponentsLastCheck", "Sun Dec 11 2011 10:35:38 GMT-0200"); Found : user_pref("CT2324177.ThirdPartyComponentsLastUpdate", "1311768090"); Found : user_pref("CT2324177.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2324177"); Found : user_pref("CT2324177.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Found : user_pref("CT2324177.UserID", "UN08259591684570688"); Found : user_pref("CT2324177.ValidationData_Search", 2); Found : user_pref("CT2324177.ValidationData_Toolbar", 2); Found : user_pref("CT2324177.WeatherNetwork", ""); Found : user_pref("CT2324177.WeatherPollDate", "Thu Dec 29 2011 11:38:51 GMT-0200"); Found : user_pref("CT2324177.WeatherUnit", "C"); Found : user_pref("CT2324177.alertChannelId", "720205"); Found : user_pref("CT2324177.approveUntrustedApps", false); Found : user_pref("CT2324177.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Found : user_pref("CT2324177.globalFirstTimeInfoLastCheckTime", "Thu Dec 29 2011 09:41:24 GMT-0200"); Found : user_pref("CT2324177.homepageProtectorEnableByLogin", true); Found : user_pref("CT2324177.initDone", true); Found : user_pref("CT2324177.isAppTrackingManagerOn", true); Found : user_pref("CT2324177.myStuffEnabled", true); Found : user_pref("CT2324177.myStuffPublihserMinWidth", 400); Found : user_pref("CT2324177.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Found : user_pref("CT2324177.myStuffServiceIntervalMM", 1440); Found : user_pref("CT2324177.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Found : user_pref("CT2324177.oldAppsList", "128902006170863078,128902006170863079,111,1000082,12890207916184[...] Found : user_pref("CT2324177.revertSettingsEnabled", true); Found : user_pref("CT2324177.searchProtectorDialogDelayInSec", 10); Found : user_pref("CT2324177.searchProtectorEnableByLogin", true); Found : user_pref("CT2324177.testingCtid", ""); Found : user_pref("CT2324177.toolbarAppMetaDataLastCheckTime", "Wed Dec 28 2011 14:20:01 GMT-0200"); Found : user_pref("CT2324177.toolbarContextMenuLastCheckTime", "Sat Dec 24 2011 19:12:48 GMT-0200"); Found : user_pref("CT2324177.usagesFlag", 2); Found : user_pref("CT2475029..clientLogIsEnabled", false); Found : user_pref("CT2475029..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Found : user_pref("CT2475029..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Found : user_pref("CT2475029.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Found : user_pref("CT2475029.AppTrackingLastCheckTime", "Wed Apr 27 2011 13:30:00 GMT-0300 (Hora oficial do [...] Found : user_pref("CT2475029.BrowserCompStateIsOpen_129464711670611991", true); Found : user_pref("CT2475029.CT2481020.CommunityChanged", true); Found : user_pref("CT2475029.CT2481020.alertChannelId", "874426"); Found : user_pref("CT2475029.CT2481024.CommunityChanged", true); Found : user_pref("CT2475029.CT2481024.alertChannelId", "874430"); Found : user_pref("CT2475029.CT2481025.CommunityChanged", true); Found : user_pref("CT2475029.CT2481025.alertChannelId", "874431"); Found : user_pref("CT2475029.CT2481029.CommunityChanged", true); Found : user_pref("CT2475029.CT2481029.alertChannelId", "874435"); Found : user_pref("CT2475029.CT2481031.CommunityChanged", true); Found : user_pref("CT2475029.CT2481031.alertChannelId", "874437"); Found : user_pref("CT2475029.CT2481032.CommunityChanged", true); Found : user_pref("CT2475029.CT2481032.alertChannelId", "874438"); Found : user_pref("CT2475029.CT2481033.CommunityChanged", true); Found : user_pref("CT2475029.CT2481033.alertChannelId", "874439"); Found : user_pref("CT2475029.CT2481034.CommunityChanged", true); Found : user_pref("CT2475029.CT2481034.alertChannelId", "874440"); Found : user_pref("CT2475029.CT2481035.CommunityChanged", true); Found : user_pref("CT2475029.CT2481035.alertChannelId", "874441"); Found : user_pref("CT2475029.CT2481037.CommunityChanged", true); Found : user_pref("CT2475029.CT2481037.alertChannelId", "874443"); Found : user_pref("CT2475029.CTID", "CT2475029"); Found : user_pref("CT2475029.CommunitiesChangesLastCheckTime", "Fri Sep 02 2011 19:58:21 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.CommunitiesChangesLastUrl", "hxxp://grouping.services.conduit.com/GroupingReque[...] Found : user_pref("CT2475029.CommunityChanged", true); Found : user_pref("CT2475029.CurrentServerDate", "2-9-2011"); Found : user_pref("CT2475029.DialogsAlignMode", "LTR"); Found : user_pref("CT2475029.DialogsGetterLastCheckTime", "Wed Aug 31 2011 13:34:22 GMT-0300 (Hora oficial d[...] Found : user_pref("CT2475029.DownloadDomainsCheckInterval", "168"); Found : user_pref("CT2475029.DownloadDomainsListLastCheckTime", "Mon Aug 29 2011 19:32:15 GMT-0300 (Hora ofi[...] Found : user_pref("CT2475029.DownloadDomainsListLastServerUpdateTime", "1201069983"); Found : user_pref("CT2475029.DownloadReferralCookieData", ""); Found : user_pref("CT2475029.EMailNotifierPollDate", "Fri Sep 02 2011 19:59:39 GMT-0300 (Hora oficial do Bra[...] Found : user_pref("CT2475029.FeedLastCount129133095456874337", 400); Found : user_pref("CT2475029.FeedLastCount6244576562585401993", 100); Found : user_pref("CT2475029.FeedPollDate129132307482029379", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129132307482029381", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129132307482029382", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129133095459686870", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129133095459686871", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129137437659687146", "Fri Sep 02 2011 19:29:39 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129137437659687147", "Fri Sep 02 2011 19:29:39 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129137437659687148", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214602500", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214602506", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214602512", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214602518", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214602524", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214602530", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603404", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603410", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603416", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603422", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603428", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603434", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603440", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603446", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603452", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603458", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603464", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603470", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603476", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603482", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603488", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214603494", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758786", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758792", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758798", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758804", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758810", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758816", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758822", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758828", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758834", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758840", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758846", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758852", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758858", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758864", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758870", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758876", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758882", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758888", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758894", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758900", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758906", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758912", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758918", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758924", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758930", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758936", "Sat Apr 09 2011 09:36:42 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758942", "Sat Apr 09 2011 09:36:42 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758948", "Sat Apr 09 2011 09:36:42 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758954", "Sat Apr 09 2011 09:36:42 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate129255180214758960", "Sat Apr 09 2011 09:36:42 GMT-0300 (Hora ofici[...] Found : user_pref("CT2475029.FeedPollDate5609757377779301063", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757377961554609", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757377979947076", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757378132259586", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757378265651739", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757378449145277", "Mon Apr 11 2011 08:56:55 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757378705873295", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757378902522699", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757378968484097", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379044202234", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379219112080", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379310186023", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379320546978", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379400531926", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379497083274", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379497148810", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379497279882", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379644150784", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379646262407", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379767858421", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379797989042", "Sun Apr 10 2011 14:19:32 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757379883299006", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757380108070872", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757380344955611", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757380390189978", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757380412472059", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757380467866928", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757380521772385", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757380616362201", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757380727291645", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757380767393172", "Sun Apr 10 2011 14:19:33 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757380868375745", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381043554700", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381080219037", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381151343676", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381247526121", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381247591657", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381372042911", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381453742514", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381520490197", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381582880127", "Mon Apr 11 2011 08:56:55 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381641974229", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381669771831", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381670861676", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381749396397", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381869347434", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381908324302", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381919420428", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381932420313", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381975368474", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381979169315", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedPollDate5609757381989950054", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.FeedTTL129132307482029379", 40); Found : user_pref("CT2475029.FeedTTL129132307482029381", 40); Found : user_pref("CT2475029.FeedTTL129132307482029382", 40); Found : user_pref("CT2475029.FeedTTL129133095459686870", 40); Found : user_pref("CT2475029.FeedTTL129133095459686871", 40); Found : user_pref("CT2475029.FeedTTL129137437659687146", 40); Found : user_pref("CT2475029.FeedTTL129137437659687147", 40); Found : user_pref("CT2475029.FeedTTL129137437659687148", 40); Found : user_pref("CT2475029.FeedTTL129255180214602500", 15); Found : user_pref("CT2475029.FeedTTL129255180214602512", 2); Found : user_pref("CT2475029.FeedTTL129255180214602518", 5); Found : user_pref("CT2475029.FeedTTL129255180214602524", 5); Found : user_pref("CT2475029.FeedTTL129255180214603416", 15); Found : user_pref("CT2475029.FeedTTL129255180214603428", 60); Found : user_pref("CT2475029.FeedTTL129255180214603434", 10); Found : user_pref("CT2475029.FeedTTL129255180214603482", 60); Found : user_pref("CT2475029.FeedTTL129255180214603488", 15); Found : user_pref("CT2475029.FeedTTL129255180214603494", 2); Found : user_pref("CT2475029.FeedTTL129255180214758786", 5); Found : user_pref("CT2475029.FeedTTL129255180214758798", 30); Found : user_pref("CT2475029.FeedTTL129255180214758804", 30); Found : user_pref("CT2475029.FeedTTL129255180214758810", 2); Found : user_pref("CT2475029.FeedTTL129255180214758828", 15); Found : user_pref("CT2475029.FeedTTL129255180214758840", 15); Found : user_pref("CT2475029.FeedTTL129255180214758846", 15); Found : user_pref("CT2475029.FeedTTL129255180214758852", 15); Found : user_pref("CT2475029.FeedTTL129255180214758870", 1440); Found : user_pref("CT2475029.FeedTTL129255180214758900", 10); Found : user_pref("CT2475029.FeedTTL129255180214758918", 5); Found : user_pref("CT2475029.FeedTTL5609757377779301063", 15); Found : user_pref("CT2475029.FeedTTL5609757377979947076", 15); Found : user_pref("CT2475029.FeedTTL5609757378132259586", 10); Found : user_pref("CT2475029.FeedTTL5609757378265651739", 30); Found : user_pref("CT2475029.FeedTTL5609757378705873295", 15); Found : user_pref("CT2475029.FeedTTL5609757379310186023", 5); Found : user_pref("CT2475029.FeedTTL5609757379320546978", 2); Found : user_pref("CT2475029.FeedTTL5609757379400531926", 5); Found : user_pref("CT2475029.FeedTTL5609757380108070872", 5); Found : user_pref("CT2475029.FeedTTL5609757380412472059", 15); Found : user_pref("CT2475029.FeedTTL5609757380467866928", 60); Found : user_pref("CT2475029.FeedTTL5609757380521772385", 2); Found : user_pref("CT2475029.FeedTTL5609757380727291645", 5); Found : user_pref("CT2475029.FeedTTL5609757380767393172", 1440); Found : user_pref("CT2475029.FeedTTL5609757381043554700", 2); Found : user_pref("CT2475029.FeedTTL5609757381247526121", 15); Found : user_pref("CT2475029.FeedTTL5609757381372042911", 60); Found : user_pref("CT2475029.FeedTTL5609757381453742514", 15); Found : user_pref("CT2475029.FeedTTL5609757381908324302", 30); Found : user_pref("CT2475029.FeedTTL5609757381932420313", 10); Found : user_pref("CT2475029.FeedTTL5609757381979169315", 15); Found : user_pref("CT2475029.FirstServerDate", "12-3-2011"); Found : user_pref("CT2475029.FirstTime", true); Found : user_pref("CT2475029.FirstTimeFF3", true); Found : user_pref("CT2475029.FixPageNotFoundErrors", true); Found : user_pref("CT2475029.GroupingLastCheckTime", "Fri Sep 02 2011 10:56:39 GMT-0300 (Hora oficial do Bra[...] Found : user_pref("CT2475029.GroupingLastErrorCode", ""); Found : user_pref("CT2475029.GroupingLastResponse", true); Found : user_pref("CT2475029.GroupingLastServerUpdateTime", "129594308200000000"); Found : user_pref("CT2475029.GroupingServerCheckInterval", 1440); Found : user_pref("CT2475029.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Found : user_pref("CT2475029.HasUserGlobalKeys", true); Found : user_pref("CT2475029.HomePageProtectorEnabled", false); Found : user_pref("CT2475029.Initialize", true); Found : user_pref("CT2475029.InitializeCommonPrefs", true); Found : user_pref("CT2475029.InstallationAndCookieDataSentCount", 3); Found : user_pref("CT2475029.InstallationId", "MyAshampoo.exe"); Found : user_pref("CT2475029.InstallationType", "ConduitIntegration"); Found : user_pref("CT2475029.InstalledDate", "Fri Mar 11 2011 23:34:23 GMT-0300 (Hora oficial do Brasil)"); Found : user_pref("CT2475029.InvalidateCache", false); Found : user_pref("CT2475029.IsAlertDBUpdated", true); Found : user_pref("CT2475029.IsGrouping", true); Found : user_pref("CT2475029.IsMulticommunity", true); Found : user_pref("CT2475029.IsOpenThankYouPage", true); Found : user_pref("CT2475029.IsOpenUninstallPage", true); Found : user_pref("CT2475029.LanguagePackLastCheckTime", "Fri Sep 02 2011 10:56:41 GMT-0300 (Hora oficial do[...] Found : user_pref("CT2475029.LanguagePackReloadIntervalMM", 1440); Found : user_pref("CT2475029.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Found : user_pref("CT2475029.LastLogin_3.2.5.2", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora oficial do Brasil)[...] Found : user_pref("CT2475029.LastLogin_3.3.3.2", "Mon Aug 15 2011 12:08:46 GMT-0300 (Hora oficial do Brasil)[...] Found : user_pref("CT2475029.LastLogin_3.6.0.10", "Fri Sep 02 2011 17:54:46 GMT-0300 (Hora oficial do Brasil[...] Found : user_pref("CT2475029.LatestVersion", "3.6.0.10"); Found : user_pref("CT2475029.Locale", "en"); Found : user_pref("CT2475029.MCDetectTooltipHeight", "83"); Found : user_pref("CT2475029.MCDetectTooltipShow", true); Found : user_pref("CT2475029.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Found : user_pref("CT2475029.MCDetectTooltipWidth", "295"); Found : user_pref("CT2475029.MyStuffEnabledAtInstallation", true); Found : user_pref("CT2475029.RadioIsPodcast", false); Found : user_pref("CT2475029.RadioLastCheckTime", "Fri Sep 02 2011 10:56:40 GMT-0300 (Hora oficial do Brasil[...] Found : user_pref("CT2475029.RadioLastUpdateIPServer", "3"); Found : user_pref("CT2475029.RadioLastUpdateServer", "129054397178370000"); Found : user_pref("CT2475029.RadioMediaID", "13098944"); Found : user_pref("CT2475029.RadioMediaType", "Media Player"); Found : user_pref("CT2475029.RadioMenuSelectedID", "EBRadioMenu_CT247502913098944"); Found : user_pref("CT2475029.RadioShrinkedFromSetup", false); Found : user_pref("CT2475029.RadioStationName", "Mellesleg%20-%20Rapp"); Found : user_pref("CT2475029.RadioStationURL", "hxxp://195.228.254.168:8060/"); Found : user_pref("CT2475029.SavedHomepage", "hxxp://www.ccvteam.com/forum/"); Found : user_pref("CT2475029.SearchBoxWidth", 150); Found : user_pref("CT2475029.SearchEngineBeforeUnload", "Ask.com"); Found : user_pref("CT2475029.SearchFromAddressBarIsInit", true); Found : user_pref("CT2475029.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT247[...] Found : user_pref("CT2475029.SearchInNewTabEnabled", true); Found : user_pref("CT2475029.SearchInNewTabIntervalMM", 1440); Found : user_pref("CT2475029.SearchInNewTabLastCheckTime", "Fri Sep 02 2011 10:56:39 GMT-0300 (Hora oficial [...] Found : user_pref("CT2475029.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Found : user_pref("CT2475029.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Found : user_pref("CT2475029.SearchProtectorEnabled", false); Found : user_pref("CT2475029.SearchProtectorToolbarDisabled", true); Found : user_pref("CT2475029.ServiceMapLastCheckTime", "Fri Sep 02 2011 10:56:40 GMT-0300 (Hora oficial do B[...] Found : user_pref("CT2475029.SettingsLastCheckTime", "Fri Sep 02 2011 19:58:21 GMT-0300 (Hora oficial do Bra[...] Found : user_pref("CT2475029.SettingsLastUpdate", "1314946420"); Found : user_pref("CT2475029.ThirdPartyComponentsInterval", 504); Found : user_pref("CT2475029.ThirdPartyComponentsLastCheck", "Sun Aug 28 2011 10:47:55 GMT-0300 (Hora oficia[...] Found : user_pref("CT2475029.ThirdPartyComponentsLastUpdate", "1312887586"); Found : user_pref("CT2475029.ToolbarDisabled", true); Found : user_pref("CT2475029.ToolbarShrinkedFromSetup", false); Found : user_pref("CT2475029.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2475029"); Found : user_pref("CT2475029.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Found : user_pref("CT2475029.UserID", "UN88619375903553255"); Found : user_pref("CT2475029.ValidationData_Toolbar", 2); Found : user_pref("CT2475029.WeatherNetwork", ""); Found : user_pref("CT2475029.WeatherPollDate", "Fri Sep 02 2011 19:59:41 GMT-0300 (Hora oficial do Brasil)")[...] Found : user_pref("CT2475029.WeatherUnit", "C"); Found : user_pref("CT2475029.alertChannelId", "868510"); Found : user_pref("CT2475029.backendstorage._fb_dailyactivity", "31333032343535393837373635"); Found : user_pref("CT2475029.backendstorage._fb_lifetimesent", "54525545"); Found : user_pref("CT2475029.backendstorage.facebook_ctid_connect_send", "73656E646564"); Found : user_pref("CT2475029.backendstorage.fb_dailyactivity", "31333033373635343932313939"); Found : user_pref("CT2475029.backendstorage.fb_lifetimesent", "54525545"); Found : user_pref("CT2475029.components.1000034", true); Found : user_pref("CT2475029.components.1000234", true); Found : user_pref("CT2475029.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Found : user_pref("CT2475029.globalFirstTimeInfoLastCheckTime", "Fri Sep 02 2011 17:54:49 GMT-0300 (Hora ofi[...] Found : user_pref("CT2475029.homepageProtectorEnableByLogin", true); Found : user_pref("CT2475029.initDone", true); Found : user_pref("CT2475029.isAppTrackingManagerOn", true); Found : user_pref("CT2475029.isFirstRadioInstallation", false); Found : user_pref("CT2475029.myStuffEnabled", true); Found : user_pref("CT2475029.myStuffPublihserMinWidth", 400); Found : user_pref("CT2475029.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Found : user_pref("CT2475029.myStuffServiceIntervalMM", 1440); Found : user_pref("CT2475029.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Found : user_pref("CT2475029.oldAppsList", "200,129053524177369346,129053524177525597,111,129584873345514033[...] Found : user_pref("CT2475029.searchProtectorDialogDelayInSec", 10); Found : user_pref("CT2475029.searchProtectorEnableByLogin", true); Found : user_pref("CT2475029.testingCtid", ""); Found : user_pref("CT2475029.toolbarAppMetaDataLastCheckTime", "Fri Sep 02 2011 10:56:41 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.toolbarContextMenuLastCheckTime", "Mon Aug 29 2011 19:32:22 GMT-0300 (Hora ofic[...] Found : user_pref("CT2475029.usagesFlag", 2); Found : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2475029,CT2247187,CT1098640"); Found : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2304157&Search[...] Found : user_pref("CommunityToolbar.ConduitSearchList", "XfireXO Customized Web Search"); Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2324177/CT2324177[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/5747/5719/BR", "\"0\""); Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/644679/640541/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/700614/696475/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/720205/716065/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/868510/864310/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874426/870225/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874430/870228/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874431/870229/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874435/870233/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874437/870235/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874438/870236/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874439/870237/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874440/870238/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874441/870239/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874443/870241/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/BR", "\"0\"")[...] Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT1098640", [...] Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2247187", [...] Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2304157", [...] Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2324177", [...] Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", [...] Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2878731", [...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...] Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...] Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...] Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...] Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...] Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.[...] Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...] Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...] Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT1098640",[...] Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2247187",[...] Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2304157",[...] Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2324177",[...] Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2475029",[...] Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2878731",[...] Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/20[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT1098640&octid=[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2247187&octid=[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2304157&octid=[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2324177&octid=[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2475029&octid=[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2878731&octid=[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT1098640/CT1098640[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2247187/CT2247187[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2304157/CT2304157[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2324177/CT2324177[...] Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2475029/CT2475029[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equaliz[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimiz[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gi[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gi[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/maxi.gif",[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/minimize.g[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/play.gif",[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/play_mini.[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/stop.gif",[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/stopped.GI[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/vol.gif", [...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/equalizer_de[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/minimize.gif[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/play.gif", "[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/stop.gif", "[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/vol.gif", "\[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/equalize[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/minimize[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/play.gif[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/stop.gif[...] Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/vol.gif"[...] Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...] Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...] Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"[...] Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=pt", "\"c3c[...] Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"059d4725a5ba97b3bb9b[...] Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"60fab9e7a0fb88a67cb[...] Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml", "\"8fb32822fe16bfe8574[...] Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"6dffbbf3249b308fac1[...] Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/21817319.xml", "\"534cbd3b554fa659e87[...] Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"b1e096e882a1a25110c[...] Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"8ba53819612e914cb7a[...] Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"3b81d79ab7ee921001c7f[...] Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"74e433e4aba6f3b6a8e90[...] Found : user_pref("CommunityToolbar.EngineOwner", ""); Found : user_pref("CommunityToolbar.EngineOwnerGuid", "{f8e9011a-4c40-4940-9480-a8ac729c8658}"); Found : user_pref("CommunityToolbar.EngineOwnerToolbarId", "ccv_team"); Found : user_pref("CommunityToolbar.IsEngineShown", true); Found : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\marilaine.marilaine-Mega\\AppData\\[...] Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.8.1.0"); Found : user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.labpixies.com/campaigns/tv/tv.html", [...] Found : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://virusscan.ashampoo.com/", "580x484"); Found : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2324177"); Found : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{f8e9011a-4c40-4940-9480-a8ac729c8658}"); Found : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "ccv_team"); Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://websearch.ask.com/redirect?client[...] Found : user_pref("CommunityToolbar.ToolbarsList", "CT2324177,CT2475029,CT1098640,CT2247187,CT2304157"); Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2324177,CT2475029,CT1098640,CT2247187,CT2304157"); Found : user_pref("CommunityToolbar.ToolbarsList4", "CT2304157"); Found : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Wed Jul 13 2011 22:37:39 GMT-03[...] Found : user_pref("CommunityToolbar.alert.alertEnabled", true); Found : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); Found : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Jul 03 2011 10:38:39 GMT-0300 (Hora [...] Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Found : user_pref("CommunityToolbar.alert.locale", "en"); Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Aug 16 2011 13:18:32 GMT-0300 (Hora ofic[...] Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611"); Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Found : user_pref("CommunityToolbar.alert.showTrayIcon", false); Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Found : user_pref("CommunityToolbar.alert.userId", "d5d05cff-5486-488a-803f-88df484756b0"); Found : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Oct 08 2011 11:59:01 GMT-0300 (Hor[...] Found : user_pref("CommunityToolbar.globalUserId", "59ae5db3-7693-4c72-9eed-4b882dd25faf"); Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Found : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2304157"); Found : user_pref("CommunityToolbar.killedEngine", true); Found : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Dec 25 2011 22:24:5[...] Found : user_pref("CommunityToolbar.notifications.alertEnabled", true); Found : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440); Found : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Wed Dec 28 2011 14:20:09 GMT-020[...] Found : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com"); Found : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true); Found : user_pref("CommunityToolbar.notifications.locale", "en"); Found : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); Found : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Dec 28 2011 14:20:01 GMT-0200"); Found : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); Found : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); Found : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com"); Found : user_pref("CommunityToolbar.notifications.showTrayIcon", false); Found : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); Found : user_pref("CommunityToolbar.notifications.userId", "fd1dd1fc-4231-4564-a1a1-ad96272537c1"); Found : user_pref("CommunityToolbar.originalHomepage", "hxxp://mystart.incredimail.com/mb59?u=92823115015413[...] Found : user_pref("CommunityToolbar.originalSearchEngine", "Google"); Found : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300 [...] Found : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300[...] Found : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300[...] Found : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300[...] Found : user_pref("CommunityToolbar.twitter.user_21817319.LastCheckTime", "Sat Oct 08 2011 18:25:46 GMT-0300[...] Found : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300[...] Found : user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300[...] Found : user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300 ([...] Found : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300 ([...] Found : user_pref("CommunityToolbar.undefined", ""); Found : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com"); Found : user_pref("browser.search.defaultengine", "Ask.com"); Found : user_pref("browser.search.defaultenginename", "Ask.com"); Found : user_pref("browser.search.defaultthis.engineName", "XfireXO Customized Web Search"); Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2304157&Sea[...] Found : user_pref("browser.search.order.1", "Ask.com"); Found : user_pref("extensions.BabylonToolbar.admin", false); Found : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Found : user_pref("extensions.BabylonToolbar.babExt", ""); Found : user_pref("extensions.BabylonToolbar.babTrack", "affID=101365"); Found : user_pref("extensions.BabylonToolbar.bbDpng", 26); Found : user_pref("extensions.BabylonToolbar.dfltSrch", false); Found : user_pref("extensions.BabylonToolbar.hmpg", false); Found : user_pref("extensions.BabylonToolbar.id", "128c0892000000000000002511b32bf6"); Found : user_pref("extensions.BabylonToolbar.instlDay", "15354"); Found : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Found : user_pref("extensions.BabylonToolbar.lastDP", 26); Found : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1717:58:45"); Found : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "9.0"); Found : user_pref("extensions.BabylonToolbar.newTab", true); Found : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb"); Found : user_pref("extensions.BabylonToolbar.noFFXTlbr", false); Found : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Found : user_pref("extensions.BabylonToolbar.propectorlck", 66153302); Found : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Found : user_pref("extensions.BabylonToolbar.ptch_0717", true); Found : user_pref("extensions.BabylonToolbar.smplGrp", "none"); Found : user_pref("extensions.BabylonToolbar.srcExt", "ss"); Found : user_pref("extensions.BabylonToolbar.tlbrId", "base"); Found : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17"); Found : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1717:58:45"); Found : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17"); Found : user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); Found : user_pref("extensions.BabylonToolbar_i.babExt", ""); Found : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=101365"); Found : user_pref("extensions.BabylonToolbar_i.hardId", "128c0892000000000000002511b32bf6"); Found : user_pref("extensions.BabylonToolbar_i.id", "128c0892000000000000002511b32bf6"); Found : user_pref("extensions.BabylonToolbar_i.instlDay", "15354"); Found : user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); Found : user_pref("extensions.BabylonToolbar_i.newTab", false); Found : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); Found : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); Found : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Found : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Found : user_pref("extensions.BabylonToolbar_i.tlbrId", "base"); Found : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); Found : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1717:58:45"); Found : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); Found : user_pref("extensions.asktb.abar-war-timeout", "4000"); Found : user_pref("extensions.asktb.autofill-competitor-query-enabled", true); Found : user_pref("extensions.asktb.autofill-text-highlight-enabled", true); Found : user_pref("extensions.asktb.cbid", "VY"); Found : user_pref("extensions.asktb.config-updated", true); Found : user_pref("extensions.asktb.crumb", "2010.11.14+12.54.40-toolbar001iad-BR-UmlvIEdyYW5kZSxCcmF6aWw%3D[...] Found : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://br.ask.com/web?q={query}&qsrc={qsrc}&[...] Found : user_pref("extensions.asktb.displaybehavior", ""); Found : user_pref("extensions.asktb.displaytext", ""); Found : user_pref("extensions.asktb.dtid", "YYYYYYYYBR"); Found : user_pref("extensions.asktb.dyn-weather-do-locid-lookup-weatherWidget", true); Found : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.mywebsearch.com/mywebsearch/GGm[...] Found : user_pref("extensions.asktb.fresh-install", false); Found : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com[...] Found : user_pref("extensions.asktb.l", "dis"); Found : user_pref("extensions.asktb.last-config-req", "1318029967317"); Found : user_pref("extensions.asktb.last-search-timestamp", "1311970320012"); Found : user_pref("extensions.asktb.last-v", "3.12.2.100006"); Found : user_pref("extensions.asktb.locale", "pt_BR"); Found : user_pref("extensions.asktb.lstation", ""); Found : user_pref("extensions.asktb.o", "14782"); Found : user_pref("extensions.asktb.options-lang", "pt"); Found : user_pref("extensions.asktb.options-locale", "UK"); Found : user_pref("extensions.asktb.overlay-reloaded-using-restart", true); Found : user_pref("extensions.asktb.pstate", ""); Found : user_pref("extensions.asktb.qsrc", "2871"); Found : user_pref("extensions.asktb.r", "3"); Found : user_pref("extensions.asktb.search-history-queries", "orkut||translema||E||Foto Extra Online E[...] Found : user_pref("extensions.asktb.search-suggestions-enabled", true); Found : user_pref("extensions.asktb.silent-upgrade", true); Found : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", true); Found : user_pref("extensions.asktb.socialmini-first", true); Found : user_pref("extensions.asktb.socialmini-interval", "1200000"); Found : user_pref("extensions.asktb.socialmini-max-char-ticker", "33"); Found : user_pref("extensions.asktb.socialmini-max-items", "30"); Found : user_pref("extensions.asktb.socialmini-native-on", true); Found : user_pref("extensions.asktb.socialmini-speed", "5000"); Found : user_pref("extensions.asktb.socialmini-transition-first-open", false); Found : user_pref("extensions.asktb.volume", ""); Found : user_pref("extensions.enabledAddons", "m3ffxtbr@mywebsearch.com:1.1,{33e0daa6-3af3-d8b5-6752-10e949c[...] Found : user_pref("extensions.enabledItems", "toolbar@ask.com:3.11.3.15590,firebug@software.joehewitt.com:1.[...] Found : user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea[...] Found : user_pref("extensions.mywebsearch.prevKwdEnabled", true); Found : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&t[...] Found : user_pref("keyword.URL", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZNxmk936YYBR&ptn[...] -\\ Google Chrome v [unable to get version] File : C:\Users\marilaine.marilaine-Mega\AppData\Local\Google\Chrome\User Data\Default\Preferences Found : "keyword": "basicscan.com", Found : "name": "BasicScan", Found : "search_url": "hxxp://www.basicscan.com/?tmp=redir_bho_bing&dist=0&prt=BscscnPB&keywords={sear[...] Found : "host_referral_list": [ 2, [ "hxxp://adlsoft.net/", [ "hxxp://adlsoft.net/", 10.11656727241656[...] Found : "name": "My Web Search Plugin Stub", Found : "path": "C:\\Program Files\\MyWebSearch\\bar\\2.bin\\NPMyWebS.dll", Found : "path": "C:\\Users\\marilaine.marilaine-Mega\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\[...] Found : "name": "My Web Search Plugin Stub" ************************* AdwCleaner[R1].txt - [92094 octets] - [26/01/2012 17:12:26] ########## EOF - C:\AdwCleaner[R1].txt - [92223 octets] ########## Log do ComboFix: ComboFix 12-01-26.02 - marilaine 26/01/2012 17:17:56.1.2 - x86 Microsoft Windows 7 Starter 6.1.7600.0.1252.55.1046.18.2038.1271 [GMT -2:00] Executando de: c:\users\marilaine.marilaine-Mega\Desktop\ComboFix.exe AV: Microsoft Security Essentials *Enabled/Updated* {BF5CEBDC-F2D3-7540-343C-F0CE11FD6E66} SP: Microsoft Security Essentials *Enabled/Updated* {043D0A38-D4E9-7ACE-0E8C-CBBC6A7A24DB} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((( Outras Exclusões ))))))))))))))))))))))))))))))))))))))))))))))))))) . . C:\CFLog c:\cflog\CrashLog_20110702.txt c:\cflog\CrashLog_20110703.txt c:\cflog\CrashLog_20110704.txt c:\cflog\CrashLog_20110705.txt c:\cflog\CrashLog_20110706.txt c:\cflog\CrashLog_20110729.txt c:\cflog\CrashLog_20110918.txt c:\cflog\CrashLog_20110919.txt c:\cflog\CrashLog_20111010.txt c:\program files\BasicScan c:\program files\BasicScan\uninstall.exe c:\programdata\BasicScan c:\users\marilaine.marilaine-Mega\AppData\Roaming\app c:\users\marilaine.marilaine-Mega\AppData\Roaming\app\Jerakine_lang.dat c:\users\marilaine.marilaine-Mega\AppData\Roaming\app\Jerakine_lang_vesrion.dat c:\users\marilaine.marilaine-Mega\AppData\Roaming\Microsoft\Windows\Recent\DDTank (2).url c:\users\marilaine.marilaine-Mega\AppData\Roaming\Microsoft\Windows\Recent\DDTank.url c:\windows\system32\nspupdt.dll.tmp . . (((((((((((((((( Arquivos/Ficheiros criados de 2011-12-26 to 2012-01-26 )))))))))))))))))))))))))))) . . 2012-01-26 19:26 . 2012-01-26 19:26 -------- d-----w- c:\users\marilaine.marilaine-Mega\AppData\Local\temp 2012-01-26 19:26 . 2012-01-26 19:26 -------- d-----w- c:\users\MARILAINE\AppData\Local\temp 2012-01-26 15:59 . 2012-01-26 15:59 56200 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7123371F-A3EE-4678-952D-554DF54BDFA3}\offreg.dll 2012-01-26 15:56 . 2012-01-26 15:56 -------- d-----w- c:\program files\Ad-Remover 2012-01-26 15:33 . 2012-01-06 04:19 6557240 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7123371F-A3EE-4678-952D-554DF54BDFA3}\mpengine.dll 2012-01-26 15:32 . 2012-01-26 15:32 -------- d-----w- c:\users\marilaine.marilaine-Mega\AppData\Roaming\Malwarebytes 2012-01-26 15:32 . 2012-01-26 15:32 -------- d-----w- c:\programdata\Malwarebytes 2012-01-26 15:32 . 2012-01-26 15:32 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-01-26 15:32 . 2011-12-10 17:24 20464 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-01-26 01:48 . 2012-01-26 16:06 -------- d-----w- C:\HijackThis 2012-01-25 22:30 . 2012-01-25 22:30 -------- d-----w- c:\users\marilaine.marilaine-Mega\AppData\Roaming\BabylonToolbar 2012-01-24 00:17 . 2012-01-24 00:17 -------- d-----w- c:\program files\Microsoft XNA 2012-01-15 19:58 . 2012-01-15 19:58 237 ----a-w- C:\user.js 2012-01-15 19:58 . 2012-01-15 19:58 -------- d-----w- c:\program files\BrowserCompanion 2012-01-08 16:55 . 2012-01-26 16:56 -------- d-----w- c:\program files\DealPly 2012-01-08 16:50 . 2012-01-08 16:50 -------- d-----w- c:\program files\PricePeep 2012-01-03 10:22 . 2012-01-03 10:22 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll 2012-01-02 19:37 . 2012-01-02 19:37 626688 ----a-w- c:\program files\Mozilla Firefox\msvcr80.dll 2012-01-02 19:37 . 2012-01-02 19:37 548864 ----a-w- c:\program files\Mozilla Firefox\msvcp80.dll 2012-01-02 19:37 . 2012-01-02 19:37 479232 ----a-w- c:\program files\Mozilla Firefox\msvcm80.dll 2012-01-02 19:37 . 2012-01-02 19:37 43992 ----a-w- c:\program files\Mozilla Firefox\mozutils.dll . . . ((((((((((((((((((((((((((((((((((((( Relatório Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-01-12 18:47 . 2011-08-09 23:33 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-01-06 04:19 . 2010-10-29 18:35 6557240 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2012-01-04 09:26 . 2010-05-18 12:34 236576 ------w- c:\windows\system32\MpSigStub.exe 2011-12-26 01:57 . 2011-11-30 16:26 665616 ----a-w- c:\windows\system32\xsherlock.xem 2010-10-16 14:50 . 2010-11-07 14:08 3056008 ----a-w- c:\program files\Common Files\AskToolbarInstaller.exe 2010-01-26 13:11 . 2010-11-07 14:08 444283 ----a-w- c:\program files\Common Files\WinPcapNmap.exe 2012-01-02 19:37 . 2011-04-09 13:34 121816 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . (((((((((((((((((((((((((( Pontos de Carregamento do Registro ))))))))))))))))))))))))))))))))))))))) . . *Nota* entradas vazias e legítimas por padrão não são apresentadas. REGEDIT4 . [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}"= "c:\program files\MyAshampoo\prxtbMyA0.dll" [2011-01-17 175912] "{c2ed826e-8903-4a9d-b0df-3a8fb8ea918a}"= "c:\program files\Softonic_ES\prxtbSof2.dll" [2011-05-09 176936] "{5e5ab302-7f65-44cd-8211-c1d4caaccea3}"= "c:\program files\XfireXO\prxtbXfir.dll" [2011-01-17 175912] . [HKEY_CLASSES_ROOT\clsid\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}] . [HKEY_CLASSES_ROOT\clsid\{c2ed826e-8903-4a9d-b0df-3a8fb8ea918a}] . [HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}] . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{00cbb66b-1d3b-46d3-9577-323a336acb50}] 2011-10-27 09:24 225584 ----a-w- c:\program files\BrowserCompanion\jsloader.dll . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}] 2011-01-17 19:54 175912 ----a-w- c:\program files\XfireXO\prxtbXfir.dll . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{949A7FED-30B4-433e-9718-23EC99A126B0}] 2011-04-20 18:53 81920 ----a-w- c:\program files\leveluptb\levelupdx.dll . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}] 2011-10-27 09:24 141104 ----a-w- c:\program files\BrowserCompanion\updatebhoWin32.dll . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}] 2011-01-17 14:54 175912 ----a-w- c:\program files\MyAshampoo\prxtbMyA0.dll . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{c2ed826e-8903-4a9d-b0df-3a8fb8ea918a}] 2011-05-09 09:49 176936 ----a-w- c:\program files\Softonic_ES\prxtbSof2.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}"= "c:\program files\MyAshampoo\prxtbMyA0.dll" [2011-01-17 175912] "{c2ed826e-8903-4a9d-b0df-3a8fb8ea918a}"= "c:\program files\Softonic_ES\prxtbSof2.dll" [2011-05-09 176936] "{5e5ab302-7f65-44cd-8211-c1d4caaccea3}"= "c:\program files\XfireXO\prxtbXfir.dll" [2011-01-17 175912] "{949A7FED-30B4-433e-9718-23EC99A126B0}"= "c:\program files\leveluptb\levelupdx.dll" [2011-04-20 81920] . [HKEY_CLASSES_ROOT\clsid\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}] . [HKEY_CLASSES_ROOT\clsid\{c2ed826e-8903-4a9d-b0df-3a8fb8ea918a}] . [HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}] . [HKEY_CLASSES_ROOT\clsid\{949a7fed-30b4-433e-9718-23ec99a126b0}] . [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}"= "c:\program files\MyAshampoo\prxtbMyA0.dll" [2011-01-17 175912] "{C2ED826E-8903-4A9D-B0DF-3A8FB8EA918A}"= "c:\program files\Softonic_ES\prxtbSof2.dll" [2011-05-09 176936] "{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3}"= "c:\program files\XfireXO\prxtbXfir.dll" [2011-01-17 175912] . [HKEY_CLASSES_ROOT\clsid\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}] . [HKEY_CLASSES_ROOT\clsid\{c2ed826e-8903-4a9d-b0df-3a8fb8ea918a}] . [HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" [2010-08-20 33120] "ares"="c:\program files\Ares\Ares.exe" [2010-10-27 1015808] "Ghost Control"="c:\program files\Ghost Control\ghost.exe" [2010-10-27 1991616] "MessengerPlus3"="c:\program files\Windows Live\Messenger\MsgPlus.exe" [2011-10-10 190024] "Akamai NetSession Interface"="c:\users\marilaine.marilaine-Mega\AppData\Local\Akamai\netsession_win.exe" [2011-12-23 3334432] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-10-28 39408] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-09-15 1094224] "HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2009-07-15 1474560] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-23 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 173592] "Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-23 150552] "SSDMonitor"="c:\program files\Common Files\PC Tools\sMonitor\SSDMonitor.exe" [2010-08-05 104408] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696] "MessengerPlus3"="c:\program files\Windows Live\Messenger\MsgPlus.exe" [2011-10-10 190024] "LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2011-08-15 1955208] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-04 37296] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712] "Browser companion helper"="c:\program files\BrowserCompanion\BCHelper.exe" [2011-11-29 182576] . c:\users\marilaine.marilaine-Mega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . R1 davtizzd;davtizzd;c:\windows\system32\drivers\davtizzd.sys [x] R1 MpKsl00ff4c1b;MpKsl00ff4c1b;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B9A23BFC-2C92-46D7-9452-09964E1F007D}\MpKsl00ff4c1b.sys [x] R1 MpKsl0133f6fd;MpKsl0133f6fd;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E99A2C2F-ED68-4BFC-9651-4053D481A8D9}\MpKsl0133f6fd.sys [x] R1 MpKsl06270223;MpKsl06270223;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CDEB7FCC-2102-47E2-B739-EDF8ED6A1903}\MpKsl06270223.sys [x] R1 MpKsl0765b0b0;MpKsl0765b0b0;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9837313B-0D9C-4CDB-854D-79231CE23BA1}\MpKsl0765b0b0.sys [x] R1 MpKsl090ce9d4;MpKsl090ce9d4;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2669F14E-8890-407F-9579-D88B0453D9C7}\MpKsl090ce9d4.sys [x] R1 MpKsl0edbfa8c;MpKsl0edbfa8c;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{ABE68900-BF0C-4FF7-8855-D7DE526B1544}\MpKsl0edbfa8c.sys [x] R1 MpKsl106ee7b2;MpKsl106ee7b2;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{96D96419-C094-446E-B6F5-4780017A1166}\MpKsl106ee7b2.sys [x] R1 MpKsl12c1c607;MpKsl12c1c607;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A4E1403B-B5D5-4CEC-AE4C-7A56020687CF}\MpKsl12c1c607.sys [x] R1 MpKsl13d7f9dd;MpKsl13d7f9dd;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D33DAD43-15D6-466D-A722-E745A42133E6}\MpKsl13d7f9dd.sys [x] R1 MpKsl166d2d17;MpKsl166d2d17;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6B0D0FE3-3098-4ECE-BA1D-5B057978A0AE}\MpKsl166d2d17.sys [x] R1 MpKsl18914510;MpKsl18914510;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7802C00E-6442-473E-AD5D-C35E54C3C28D}\MpKsl18914510.sys [x] R1 MpKsl1c4cba26;MpKsl1c4cba26;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{79FE9AE0-898E-41B1-BFC7-E78F5684881E}\MpKsl1c4cba26.sys [x] R1 MpKsl1dae71a2;MpKsl1dae71a2;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{65229338-BD98-4EBF-A38D-6648F408D432}\MpKsl1dae71a2.sys [x] R1 MpKsl2307f20a;MpKsl2307f20a;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2DE33328-6D6E-47C4-BA20-AA0546DB916C}\MpKsl2307f20a.sys [x] R1 MpKsl23b93d89;MpKsl23b93d89;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5F6B8DED-5FBC-45F9-AA05-8CD006B3BAE1}\MpKsl23b93d89.sys [x] R1 MpKsl26427b48;MpKsl26427b48;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{473E8586-7BFD-4AC1-9808-FC2449D8DE97}\MpKsl26427b48.sys [x] R1 MpKsl2670c000;MpKsl2670c000;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C685B4FC-4E05-4D12-9973-348A06035959}\MpKsl2670c000.sys [x] R1 MpKsl282c6e9e;MpKsl282c6e9e;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{645B7F98-D311-49A7-BF2E-596C07F96614}\MpKsl282c6e9e.sys [x] R1 MpKsl28e3837d;MpKsl28e3837d;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DB34CECA-F346-41B8-8045-926093C097F6}\MpKsl28e3837d.sys [x] R1 MpKsl2994230a;MpKsl2994230a;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1EFAD213-CBE9-4255-B09D-38BF95C8F30B}\MpKsl2994230a.sys [x] R1 MpKsl2a72d2a5;MpKsl2a72d2a5;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6C03F404-2F0D-403B-B25E-4498D3DBDC59}\MpKsl2a72d2a5.sys [x] R1 MpKsl2a7d26a5;MpKsl2a7d26a5;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1AFD82E4-BBD0-4CA7-BA1B-DA934F655BEF}\MpKsl2a7d26a5.sys [x] R1 MpKsl317478f7;MpKsl317478f7;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B7A4753E-A8AE-4730-8473-3E223C60CCCA}\MpKsl317478f7.sys [x] R1 MpKsl32c9a9b1;MpKsl32c9a9b1;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{40139259-283D-47E2-BD8C-2454A2FE36AA}\MpKsl32c9a9b1.sys [x] R1 MpKsl37474b4a;MpKsl37474b4a;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A4398DC9-4AD8-42F9-AA9F-3FD243215C6B}\MpKsl37474b4a.sys [x] R1 MpKsl3873fa53;MpKsl3873fa53;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{40139259-283D-47E2-BD8C-2454A2FE36AA}\MpKsl3873fa53.sys [x] R1 MpKsl397ae880;MpKsl397ae880;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D413F188-4FEC-40D7-B18D-76C1742891C9}\MpKsl397ae880.sys [x] R1 MpKsl3ad0b4d5;MpKsl3ad0b4d5;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C9E7D0C4-40D7-4D13-99AF-4944C0050FC2}\MpKsl3ad0b4d5.sys [x] R1 MpKsl3b087dc5;MpKsl3b087dc5;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E5CC49E8-31D6-4E31-A868-79354832CA28}\MpKsl3b087dc5.sys [x] R1 MpKsl3d6e01f7;MpKsl3d6e01f7;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7BF53441-3899-4AA9-9AA4-CFDA1BDC3B7D}\MpKsl3d6e01f7.sys [x] R1 MpKsl40902d48;MpKsl40902d48;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{59E8F434-56F8-4222-B758-053E62007478}\MpKsl40902d48.sys [x] R1 MpKsl44a41626;MpKsl44a41626;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{817DFA1A-B065-44FD-93FF-C12D23BB8F05}\MpKsl44a41626.sys [x] R1 MpKsl45eff0f3;MpKsl45eff0f3;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C09E4B8C-ED5E-4FAD-B596-B92B2C206BCA}\MpKsl45eff0f3.sys [x] R1 MpKsl477bb251;MpKsl477bb251;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{79FE9AE0-898E-41B1-BFC7-E78F5684881E}\MpKsl477bb251.sys [x] R1 MpKsl4858bbcf;MpKsl4858bbcf;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D33DAD43-15D6-466D-A722-E745A42133E6}\MpKsl4858bbcf.sys [x] R1 MpKsl4ab4a193;MpKsl4ab4a193;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E4E0B67B-E1D4-423A-8C45-16BEE295E358}\MpKsl4ab4a193.sys [x] R1 MpKsl4c34edec;MpKsl4c34edec;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{486126E9-BC2D-4301-96E5-69BE58FD0226}\MpKsl4c34edec.sys [x] R1 MpKsl4c669833;MpKsl4c669833;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CE271109-B908-4DC8-85CD-DCBD264E58BF}\MpKsl4c669833.sys [x] R1 MpKsl4dc0aa17;MpKsl4dc0aa17;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E38B7579-62E7-4CC7-A279-2A87E012FDCD}\MpKsl4dc0aa17.sys [x] R1 MpKsl51bfedae;MpKsl51bfedae;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6AD1218E-C953-4EBE-BF18-065F6DD9E61E}\MpKsl51bfedae.sys [x] R1 MpKsl548d4a23;MpKsl548d4a23;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{96ACE7AF-6498-4EA1-9C1A-8D3BF95723E7}\MpKsl548d4a23.sys [x] R1 MpKsl5859a9c7;MpKsl5859a9c7;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2206EB36-32A9-4986-A4A5-F6E00EF34EE3}\MpKsl5859a9c7.sys [x] R1 MpKsl5ae5bb6b;MpKsl5ae5bb6b;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7BF53441-3899-4AA9-9AA4-CFDA1BDC3B7D}\MpKsl5ae5bb6b.sys [x] R1 MpKsl5b9a55bf;MpKsl5b9a55bf;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B7A4753E-A8AE-4730-8473-3E223C60CCCA}\MpKsl5b9a55bf.sys [x] R1 MpKsl5ddad0fb;MpKsl5ddad0fb;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DA9083CF-F430-450B-BA78-F20928556219}\MpKsl5ddad0fb.sys [x] R1 MpKsl5e3d96e7;MpKsl5e3d96e7;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{12E86C09-409A-4A52-A4D5-E59B9D147826}\MpKsl5e3d96e7.sys [x] R1 MpKsl5e6b4dea;MpKsl5e6b4dea;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2669F14E-8890-407F-9579-D88B0453D9C7}\MpKsl5e6b4dea.sys [x] R1 MpKsl5eaf972c;MpKsl5eaf972c;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{963F5B68-EF7C-4FC6-91B0-89575A2B861F}\MpKsl5eaf972c.sys [x] R1 MpKsl5ed4f12b;MpKsl5ed4f12b;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7BA5AAEC-96E6-4EC6-B8F6-37912F983E0A}\MpKsl5ed4f12b.sys [x] R1 MpKsl612a9c20;MpKsl612a9c20;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9837313B-0D9C-4CDB-854D-79231CE23BA1}\MpKsl612a9c20.sys [x] R1 MpKsl6602b1bf;MpKsl6602b1bf;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{614B8F03-EA06-4555-8EF3-E78B4F83EFCC}\MpKsl6602b1bf.sys [x] R1 MpKsl66b3f10a;MpKsl66b3f10a;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CE271109-B908-4DC8-85CD-DCBD264E58BF}\MpKsl66b3f10a.sys [x] R1 MpKsl6b5ecaf7;MpKsl6b5ecaf7;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5AA3EF4B-75BE-40FD-8C56-A92911274789}\MpKsl6b5ecaf7.sys [x] R1 MpKsl6da32c52;MpKsl6da32c52;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{58494A36-EEE1-4144-B7A9-7F6FB014DC77}\MpKsl6da32c52.sys [x] R1 MpKsl70291294;MpKsl70291294;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D33DAD43-15D6-466D-A722-E745A42133E6}\MpKsl70291294.sys [x] R1 MpKsl7711ed47;MpKsl7711ed47;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{12E86C09-409A-4A52-A4D5-E59B9D147826}\MpKsl7711ed47.sys [x] R1 MpKsl79424e96;MpKsl79424e96;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2162ED1F-5434-4093-9E1F-40FA74B2C3D4}\MpKsl79424e96.sys [x] R1 MpKsl7c09f11e;MpKsl7c09f11e;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{EDFE20EF-4410-4370-B52B-747B3226C6B8}\MpKsl7c09f11e.sys [x] R1 MpKsl7e7fbc3e;MpKsl7e7fbc3e;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7BA5AAEC-96E6-4EC6-B8F6-37912F983E0A}\MpKsl7e7fbc3e.sys [x] R1 MpKsl808e8aa0;MpKsl808e8aa0;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{706E7412-FD55-4D7A-AE3F-302636441FA9}\MpKsl808e8aa0.sys [x] R1 MpKsl8152ef58;MpKsl8152ef58;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E5CC49E8-31D6-4E31-A868-79354832CA28}\MpKsl8152ef58.sys [x] R1 MpKsl826f2048;MpKsl826f2048;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6FA8DBFD-8222-4E41-A6F0-3600FF35656F}\MpKsl826f2048.sys [x] R1 MpKsl830eecc2;MpKsl830eecc2;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{48148279-7BB6-418C-AED0-34DCBB0C56DE}\MpKsl830eecc2.sys [x] R1 MpKsl83f50237;MpKsl83f50237;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{76970994-69A3-46D7-9580-ADD5CA24B082}\MpKsl83f50237.sys [x] R1 MpKsl88904493;MpKsl88904493;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2669F14E-8890-407F-9579-D88B0453D9C7}\MpKsl88904493.sys [x] R1 MpKsl8a463019;MpKsl8a463019;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AE806E7C-51F1-4B75-8575-4B16115BFA67}\MpKsl8a463019.sys [x] R1 MpKsl8bb243ad;MpKsl8bb243ad;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C7B4E732-9C58-4E99-B6A4-8D85F39D31B1}\MpKsl8bb243ad.sys [x] R1 MpKsl8ce5cb28;MpKsl8ce5cb28;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C5F6B4E2-5E63-40B1-9C5C-07236CD5F37E}\MpKsl8ce5cb28.sys [x] R1 MpKsl8d33fb94;MpKsl8d33fb94;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{338D1203-D2B3-4857-86F6-26BB0BE5E593}\MpKsl8d33fb94.sys [x] R1 MpKsl8e36fe66;MpKsl8e36fe66;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{30C79DF3-C666-41D9-A0F4-B86EF1F1AAFC}\MpKsl8e36fe66.sys [x] R1 MpKsl8f1f5268;MpKsl8f1f5268;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{4FC9BB4F-D3BE-46EF-830F-06E546E5F4B2}\MpKsl8f1f5268.sys [x] R1 MpKsl90aa8997;MpKsl90aa8997;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{56611F99-06B0-4DEC-A5CF-49C05CDBC589}\MpKsl90aa8997.sys [x] R1 MpKsl91c62237;MpKsl91c62237;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{642E562B-16A4-4206-A5BF-3B831924E820}\MpKsl91c62237.sys [x] R1 MpKsl933cff2c;MpKsl933cff2c;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B7492ECA-46AB-419E-9A14-F5BBD7F88B29}\MpKsl933cff2c.sys [x] R1 MpKsl9366eb3e;MpKsl9366eb3e;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{96ACE7AF-6498-4EA1-9C1A-8D3BF95723E7}\MpKsl9366eb3e.sys [x] R1 MpKsl93697895;MpKsl93697895;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6FA8DBFD-8222-4E41-A6F0-3600FF35656F}\MpKsl93697895.sys [x] R1 MpKsl953cffa5;MpKsl953cffa5;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6595F491-757C-4120-B472-2AFC750542BD}\MpKsl953cffa5.sys [x] R1 MpKsl95539409;MpKsl95539409;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{14F2D2CC-0764-406F-875D-876C93792322}\MpKsl95539409.sys [x] R1 MpKsl95ccb96c;MpKsl95ccb96c;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C0FE9F5D-D3F6-4BB2-8E17-6B3FAD02DC08}\MpKsl95ccb96c.sys [x] R1 MpKsl97f28518;MpKsl97f28518;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D413F188-4FEC-40D7-B18D-76C1742891C9}\MpKsl97f28518.sys [x] R1 MpKsl980897f5;MpKsl980897f5;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{39DF726E-0767-46FC-A4F7-7A58C1D121FB}\MpKsl980897f5.sys [x] R1 MpKsl9ec16ffc;MpKsl9ec16ffc;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8ADC522D-404B-4BED-A27C-9D1B3A48A78B}\MpKsl9ec16ffc.sys [x] R1 MpKsla0bd84b2;MpKsla0bd84b2;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7BA5AAEC-96E6-4EC6-B8F6-37912F983E0A}\MpKsla0bd84b2.sys [x] R1 MpKsla284e3e0;MpKsla284e3e0;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{10485A91-F1CC-46D1-9F1E-E6457F471324}\MpKsla284e3e0.sys [x] R1 MpKsla447399d;MpKsla447399d;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{265C65F1-0A77-47C9-AFAD-C51FD832AE0F}\MpKsla447399d.sys [x] R1 MpKsla52648aa;MpKsla52648aa;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{52367EF2-8926-4D23-A889-B0BD16338970}\MpKsla52648aa.sys [x] R1 MpKslaaf498f4;MpKslaaf498f4;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{473E8586-7BFD-4AC1-9808-FC2449D8DE97}\MpKslaaf498f4.sys [x] R1 MpKslae212552;MpKslae212552;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{706E7412-FD55-4D7A-AE3F-302636441FA9}\MpKslae212552.sys [x] R1 MpKslae2731dd;MpKslae2731dd;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{39DF726E-0767-46FC-A4F7-7A58C1D121FB}\MpKslae2731dd.sys [x] R1 MpKslaf0b3a9f;MpKslaf0b3a9f;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{951E781B-DF78-4AEA-8AB9-38025032A606}\MpKslaf0b3a9f.sys [x] R1 MpKslb0c77ee1;MpKslb0c77ee1;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7BA5AAEC-96E6-4EC6-B8F6-37912F983E0A}\MpKslb0c77ee1.sys [x] R1 MpKslb1fe9c33;MpKslb1fe9c33;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5A7B4EC0-9519-4754-B80D-9FC9D7AAB7C4}\MpKslb1fe9c33.sys [x] R1 MpKslb27c5944;MpKslb27c5944;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CC21EB9F-F27B-4620-99F4-90264C8DC6D8}\MpKslb27c5944.sys [x] R1 MpKslb3b86d84;MpKslb3b86d84;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DA259E49-5F48-419E-846E-9B51566B0162}\MpKslb3b86d84.sys [x] R1 MpKslb551fdc8;MpKslb551fdc8;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{80C3D03F-2826-4B8A-8106-32C672D7BC20}\MpKslb551fdc8.sys [x] R1 MpKslb67cc503;MpKslb67cc503;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B7A4753E-A8AE-4730-8473-3E223C60CCCA}\MpKslb67cc503.sys [x] R1 MpKslb8386851;MpKslb8386851;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{40139259-283D-47E2-BD8C-2454A2FE36AA}\MpKslb8386851.sys [x] R1 MpKslb8415549;MpKslb8415549;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{14F2D2CC-0764-406F-875D-876C93792322}\MpKslb8415549.sys [x] R1 MpKslba821d18;MpKslba821d18;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{48148279-7BB6-418C-AED0-34DCBB0C56DE}\MpKslba821d18.sys [x] R1 MpKslbd196803;MpKslbd196803;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8ADC522D-404B-4BED-A27C-9D1B3A48A78B}\MpKslbd196803.sys [x] R1 MpKslbe27e904;MpKslbe27e904;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D8157A4D-ADD8-469F-B7E6-E69614979ADC}\MpKslbe27e904.sys [x] R1 MpKslbe4403d2;MpKslbe4403d2;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{17C85D5F-72C0-4DD3-900B-4CA2E75205BD}\MpKslbe4403d2.sys [x] R1 MpKslc7a76084;MpKslc7a76084;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D33DAD43-15D6-466D-A722-E745A42133E6}\MpKslc7a76084.sys [x] R1 MpKslc7b01bd5;MpKslc7b01bd5;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{12B2B57E-8993-4976-A612-D03B67F922C9}\MpKslc7b01bd5.sys [x] R1 MpKslc7ef1356;MpKslc7ef1356;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{436E8997-AC40-4B0A-A89B-533BBCB381DF}\MpKslc7ef1356.sys [x] R1 MpKslc973710f;MpKslc973710f;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{84F5741C-C490-4227-BBD1-D6179A118B32}\MpKslc973710f.sys [x] R1 MpKslca33b5cc;MpKslca33b5cc;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6C03F404-2F0D-403B-B25E-4498D3DBDC59}\MpKslca33b5cc.sys [x] R1 MpKslca79f34b;MpKslca79f34b;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2E32E05C-E181-4B6E-9B92-BFF083E42F0A}\MpKslca79f34b.sys [x] R1 MpKslcb1a857b;MpKslcb1a857b;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CE271109-B908-4DC8-85CD-DCBD264E58BF}\MpKslcb1a857b.sys [x] R1 MpKslcb411a84;MpKslcb411a84;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{231871FF-53D0-4F8F-BA12-571A944843CC}\MpKslcb411a84.sys [x] R1 MpKslcbf991c6;MpKslcbf991c6;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{33591E17-8C21-4392-AD59-B87BC4ECCDF1}\MpKslcbf991c6.sys [x] R1 MpKslcc925976;MpKslcc925976;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E0885BA3-E69D-47F0-AF24-543717BDDA4D}\MpKslcc925976.sys [x] R1 MpKslcd78fe50;MpKslcd78fe50;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CE271109-B908-4DC8-85CD-DCBD264E58BF}\MpKslcd78fe50.sys [x] R1 MpKslcd907521;MpKslcd907521;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{46FFAE96-BFB1-4DBA-9E5D-8ECFD222A2C6}\MpKslcd907521.sys [x] R1 MpKslcf741de5;MpKslcf741de5;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{59BA1F00-BD76-4A79-80E3-C2B668AD838A}\MpKslcf741de5.sys [x] R1 MpKsld1501c4b;MpKsld1501c4b;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D3F227FA-1526-4592-BB5F-BED57C5B1B7A}\MpKsld1501c4b.sys [x] R1 MpKsld43a970d;MpKsld43a970d;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CC21EB9F-F27B-4620-99F4-90264C8DC6D8}\MpKsld43a970d.sys [x] R1 MpKsld4425a6f;MpKsld4425a6f;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BEEE588C-702C-4ADC-BF25-8A981CCF82A3}\MpKsld4425a6f.sys [x] R1 MpKsld4b14462;MpKsld4b14462;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{80E0EC11-C61A-4142-A209-2E20993D3899}\MpKsld4b14462.sys [x] R1 MpKsld4d129ac;MpKsld4d129ac;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{77B8804B-7B1C-4F43-9B2E-2E452B706844}\MpKsld4d129ac.sys [x] R1 MpKsld520a689;MpKsld520a689;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E5CC49E8-31D6-4E31-A868-79354832CA28}\MpKsld520a689.sys [x] R1 MpKsld527c56f;MpKsld527c56f;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{45AF17E3-4EA3-46C9-BE92-AF4345C0952B}\MpKsld527c56f.sys [x] R1 MpKsld59faada;MpKsld59faada;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B4798C37-33D2-4C74-8AA0-E85F95CB2A23}\MpKsld59faada.sys [x] R1 MpKsld6d377da;MpKsld6d377da;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7802C00E-6442-473E-AD5D-C35E54C3C28D}\MpKsld6d377da.sys [x] R1 MpKsld7bb71cb;MpKsld7bb71cb;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D8157A4D-ADD8-469F-B7E6-E69614979ADC}\MpKsld7bb71cb.sys [x] R1 MpKsld936ddda;MpKsld936ddda;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7BA5AAEC-96E6-4EC6-B8F6-37912F983E0A}\MpKsld936ddda.sys [x] R1 MpKsld9ddc087;MpKsld9ddc087;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{231871FF-53D0-4F8F-BA12-571A944843CC}\MpKsld9ddc087.sys [x] R1 MpKslda64f763;MpKslda64f763;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9F8A4343-016D-406C-9718-1E90F1D84BAF}\MpKslda64f763.sys [x] R1 MpKsldb55aab7;MpKsldb55aab7;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{05C55EA9-1712-48F4-952B-A717FE74C3AC}\MpKsldb55aab7.sys [x] R1 MpKsldb5e3bf6;MpKsldb5e3bf6;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{96ACE7AF-6498-4EA1-9C1A-8D3BF95723E7}\MpKsldb5e3bf6.sys [x] R1 MpKsldbbc5e58;MpKsldbbc5e58;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D381DD7A-DA87-43B7-8130-2C1021F5C188}\MpKsldbbc5e58.sys [x] R1 MpKsldd06b276;MpKsldd06b276;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5A7B4EC0-9519-4754-B80D-9FC9D7AAB7C4}\MpKsldd06b276.sys [x] R1 MpKslddb99e51;MpKslddb99e51;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CAD597D0-7F18-488A-93A5-DDE864E00BB8}\MpKslddb99e51.sys [x] R1 MpKsldfb8fc85;MpKsldfb8fc85;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{46FFAE96-BFB1-4DBA-9E5D-8ECFD222A2C6}\MpKsldfb8fc85.sys [x] R1 MpKsle00da7dc;MpKsle00da7dc;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{59BA1F00-BD76-4A79-80E3-C2B668AD838A}\MpKsle00da7dc.sys [x] R1 MpKsle48b0853;MpKsle48b0853;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{131967B7-6F87-41B0-AB47-3AD794164ACA}\MpKsle48b0853.sys [x] R1 MpKsle4f66408;MpKsle4f66408;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{84F5741C-C490-4227-BBD1-D6179A118B32}\MpKsle4f66408.sys [x] R1 MpKsle8d82247;MpKsle8d82247;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{473E8586-7BFD-4AC1-9808-FC2449D8DE97}\MpKsle8d82247.sys [x] R1 MpKsle9758f80;MpKsle9758f80;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DA259E49-5F48-419E-846E-9B51566B0162}\MpKsle9758f80.sys [x] R1 MpKslea174970;MpKslea174970;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C94DBE47-A191-407E-8A38-7357437476BA}\MpKslea174970.sys [x] R1 MpKsleaa13c9d;MpKsleaa13c9d;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A8B7B894-A521-460B-878F-460F2503F554}\MpKsleaa13c9d.sys [x] R1 MpKslf02bc285;MpKslf02bc285;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E99A2C2F-ED68-4BFC-9651-4053D481A8D9}\MpKslf02bc285.sys [x] R1 MpKslf18005ab;MpKslf18005ab;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D7C22975-2A39-49AB-ACC9-AA3488DC5F46}\MpKslf18005ab.sys [x] R1 MpKslf1f5512a;MpKslf1f5512a;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{131967B7-6F87-41B0-AB47-3AD794164ACA}\MpKslf1f5512a.sys [x] R1 MpKslf242cb55;MpKslf242cb55;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C685B4FC-4E05-4D12-9973-348A06035959}\MpKslf242cb55.sys [x] R1 MpKslf428c679;MpKslf428c679;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DA9083CF-F430-450B-BA78-F20928556219}\MpKslf428c679.sys [x] R1 MpKslf9f181cc;MpKslf9f181cc;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6B0D0FE3-3098-4ECE-BA1D-5B057978A0AE}\MpKslf9f181cc.sys [x] R1 MpKslfcbc734b;MpKslfcbc734b;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{436E8997-AC40-4B0A-A89B-533BBCB381DF}\MpKslfcbc734b.sys [x] R1 MpKslfda2e566;MpKslfda2e566;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F1F8D59C-3CAE-4792-9C19-6C427F2280B4}\MpKslfda2e566.sys [x] R1 MpKslfdcc41c3;MpKslfdcc41c3;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{59BA1F00-BD76-4A79-80E3-C2B668AD838A}\MpKslfdcc41c3.sys [x] R1 MpKslfeb64ac0;MpKslfeb64ac0;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9F5843A4-DC38-40FF-940F-1FE6FF6B34AB}\MpKslfeb64ac0.sys [x] R1 TKFWFV;nProtect Firewall Core Driver ;c:\windows\system32\TKFWFV.sys [x] R1 tvgqhgiq;tvgqhgiq;c:\windows\system32\drivers\tvgqhgiq.sys [x] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-10-28 136176] R2 PCSpeedUpService;PCSpeedUp Service;c:\program files\Velocidade Do PC\PCSpeedUpService.exe [2011-04-29 37600] R3 apf001;apf001;c:\game\SoftnyxGame\GunBoundPS\apf001.sys [2011-05-27 10872] R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x] R3 GGSAFERDriver;GGSAFER Driver;c:\program files\Garena\safedrv.sys [x] R3 gupdatem;Serviço do Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-10-28 136176] R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232] R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368] R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2011-06-19 4122968] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000] R3 TKCtrl;TKCtrl;c:\windows\system32\TKCtrl2k.sys [x] R3 TKFsAvM;TKFsAvM;c:\windows\system32\TKFsAv.sys [x] R3 TkFsFtM;MiniFilter Driver;c:\windows\system32\TKFsFt.sys [x] R3 TKFWVT;TKFWVT;c:\windows\system32\TKFWVT.sys [x] R3 TkIdsVt;TkIdsVt;c:\windows\system32\TkIdsVt.sys [x] R3 TKPcFt;TKPcFt;c:\windows\system32\TKPcFtCb.sys [x] R3 vtany;vtany;c:\windows\vtany.sys [x] R3 XDva374;XDva374;c:\windows\system32\XDva374.sys [x] R3 XDva377;XDva377;c:\windows\system32\XDva377.sys [x] R3 XDva379;XDva379;c:\windows\system32\XDva379.sys [x] R3 XDva382;XDva382;c:\windows\system32\XDva382.sys [x] R3 XDva383;XDva383;c:\windows\system32\XDva383.sys [x] R3 XDva385;XDva385;c:\windows\system32\XDva385.sys [x] R3 XDva386;XDva386;c:\windows\system32\XDva386.sys [x] R3 XDva387;XDva387;c:\windows\system32\XDva387.sys [x] R3 XDva388;XDva388;c:\windows\system32\XDva388.sys [x] R3 XDva389;XDva389;c:\windows\system32\XDva389.sys [x] R3 XDva390;XDva390;c:\windows\system32\XDva390.sys [x] R3 XDva391;XDva391;c:\windows\system32\XDva391.sys [x] R3 xhunter1;xhunter1;c:\windows\xhunter1.sys [x] R3 xsherlock;xsherlock;c:\windows\system32\xsherlock.xem [2011-12-26 665616] R3 xspirit;xspirit;c:\windows\xspirit.sys [x] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-07-04 436792] S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 20992] S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [2010-11-09 21992] S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 1361288] S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files\Common Files\PC Tools\sMonitor\StartManSvc.exe [2010-08-05 583640] S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-04-24 483688] S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2010-12-07 2228008] S3 Atc002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller;c:\windows\system32\DRIVERS\l260x86.sys [2009-07-13 29184] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-24 550760] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-24 195944] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-24 21864] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-24 19304] S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-24 209768] S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2009-07-10 1067008] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc Akamai REG_MULTI_SZ Akamai . Conteúdo da pasta 'Tarefas Agendadas' . 2012-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-10-28 22:58] . 2012-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-10-28 22:58] . 2012-01-21 c:\windows\Tasks\Norton Security Scan for marilaine.job - c:\progra~1\NORTON~2\Engine\351~1.8\Nss.exe [2011-10-19 02:02] . 2012-01-25 c:\windows\Tasks\RMSchedule.job - c:\program files\Registry Mechanic\RegMech.exe [2011-01-28 10:46] . . ------- Scan Suplementar ------- . uStart Page = hxxp://google.fr uInternet Settings,ProxyOverride = 127.0.0.1:9421 IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 Handler: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - c:\program files\BrowserCompanion\tdataprotocol.dll Handler: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - c:\program files\BrowserCompanion\tdataprotocol.dll Handler: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - c:\program files\BrowserCompanion\tdataprotocol.dll FF - ProfilePath - c:\users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2304157&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.ccvteam.com/forum/ FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZNxmk936YYBR&ptnrS=ZNxmk936YYBR&si=41245&ptb=wukfbkdLVx._ZIW216fZYg&ind=2011030109&n=77dde25d&psa=&st=kwd&searchfor= FF - prefs.js: network.proxy.type - 0 FF - user.js: extensions.BabylonToolbar_i.id - 128c0892000000000000002511b32bf6 FF - user.js: extensions.BabylonToolbar_i.hardId - 128c0892000000000000002511b32bf6 FF - user.js: extensions.BabylonToolbar_i.instlDay - 15354 FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1717:58 FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar_i.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar_i.tlbrId - base FF - user.js: extensions.BabylonToolbar_i.newTab - false FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=101365 FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar_i.instlRef - sst . - - - - ORFÃOS REMOVIDOS - - - - . URLSearchHooks-{90eee664-34b1-422a-a782-779af65cdf6d} - (no file) Toolbar-Locked - (no file) HKLM-Run-ApnUpdater - c:\program files\Ask.com\Updater\Updater.exe AddRemove-Amazing Adventures: The Lost Tomb_is1 - c:\program files\PopCap Games\Amazing Adventures\unins000.exe AddRemove-BabylonToolbar - c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\uninstall.exe AddRemove-Bejeweled 2 Deluxe_is1 - c:\program files\PopCap Games\Bejeweled 2 Deluxe\unins000.exe AddRemove-Bejeweled Deluxe_is1 - c:\program files\PopCap Games\Bejeweled Deluxe\unins000.exe AddRemove-Big Money Deluxe_is1 - c:\program files\PopCap Games\Big Money Deluxe\unins000.exe AddRemove-Cross Fire_is1 - c:\program files\Z8Games\CrossFire\unins000.exe AddRemove-Feeding Frenzy 2 Deluxe_is1 - c:\program files\PopCap Games\Feeding Frenzy 2 Deluxe\unins000.exe AddRemove-{4FFBB818-B13C-11E0-931D-B2664824019B}_is1 - c:\program files\Complitly\unins000.exe AddRemove-Kos (usa) - c:\kos\Uninstall.exe . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\Akamai] "ServiceDll"="c:\program files\common files\akamai/netsession_win_b427739.dll" . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\xsherlock] "ImagePath"="c:\windows\system32\xsherlock.xem" . --------------------- CHAVES DO REGISTRO BLOQUEADAS --------------------- . [HKEY_USERS\S-1-5-21-3481824857-3955233913-349915734-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:000000b5 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Tempo para conclusão: 2012-01-26 17:28:05 ComboFix-quarantined-files.txt 2012-01-26 19:28 . Pré-execução: 129.449.357.312 bytes disponíveis Pós execução: 129.803.448.320 bytes disponíveis . - - End Of File - - 107F026B4AC417F0660FD5C2535E9177 Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Janeiro 26, 2012 Boa Tarde! SmasH |- Por gentileza,lance AdwCleaner na opção "Suppression". |- Poste o relatório! Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
SmasH 0 Denunciar post Postado Janeiro 26, 2012 # AdwCleaner v1.407 - Logfile created 01/26/2012 at 18:07:26 # Updated 18/01/2012 by Xplode # Operating system : Windows 7 Starter (32 bits) # User : marilaine - MARILAINE-MEGA (Administrator) # Running from : C:\Users\marilaine.marilaine-Mega\Desktop\Giovanne\Anti Malwares\adwcleaner.exe # Option [Delete] ***** [services] ***** ***** [Files / Folders] ***** Folder Deleted : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Babylon Folder Deleted : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} Folder Deleted : C:\Users\marilaine.marilaine-Mega\AppData\Local\Babylon Folder Deleted : C:\Users\marilaine.marilaine-Mega\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly Folder Deleted : C:\Program Files\DealPly Folder Deleted : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\ConduitCommon Folder Deleted : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} Folder Deleted : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\extensions\ffxtlbr@babylon.com Folder Deleted : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\extensions\m3ffxtbr@mywebsearch.com File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml ***** [Registry] ***** Key Deleted : HKCU\Software\DealPly Key Deleted : HKLM\SOFTWARE\APN Key Deleted : HKLM\SOFTWARE\Babylon Key Deleted : HKLM\SOFTWARE\BasicScan Key Deleted : HKLM\SOFTWARE\DealPly Key Deleted : HKLM\SOFTWARE\Iminent Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1 Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1 Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1 Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484a-89D3-318C928DAC1B} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4ccf-834A-2DDA4E29E39E} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1} Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF Key Deleted : HKLM\SOFTWARE\Microsoft\RFC1156Agent Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70} Key Deleted : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8856F961-340A-11D0-A96B-00C04FD705A2} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49dd-99D7-DC866BE87DBC}] ***** [internet Browsers] ***** -\\ Internet Explorer v8.0.7600.16385 [OK] Registry is clean. -\\ Mozilla Firefox v9.0.1 (pt-BR) Profile : tzol3vmr.default File : C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\prefs.js C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Mozilla\Firefox\Profiles\tzol3vmr.default\user.js ... Deleted ! Deleted : user_pref("CT1098640..clientLogIsEnabled", true); Deleted : user_pref("CT1098640..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Deleted : user_pref("CT1098640..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Deleted : user_pref("CT1098640.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Deleted : user_pref("CT1098640.AppTrackingLastCheckTime", "Sun Apr 17 2011 16:55:19 GMT-0300 (Hora oficial do [...] Deleted : user_pref("CT1098640.CT1098640", "CT1098640"); Deleted : user_pref("CT1098640.CommunitiesChangesLastCheckTime", "Fri Sep 02 2011 19:58:19 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT1098640.CommunitiesChangesLastUrl", "hxxp://grouping.services.conduit.com/GroupingReque[...] Deleted : user_pref("CT1098640.CommunityChanged", true); Deleted : user_pref("CT1098640.CurrentServerDate", "2-9-2011"); Deleted : user_pref("CT1098640.DialogsAlignMode", "LTR"); Deleted : user_pref("CT1098640.DialogsGetterLastCheckTime", "Thu Sep 01 2011 19:28:01 GMT-0300 (Hora oficial d[...] Deleted : user_pref("CT1098640.DownloadDomainsCheckInterval", "168"); Deleted : user_pref("CT1098640.DownloadDomainsListLastCheckTime", "Tue Aug 30 2011 18:26:43 GMT-0300 (Hora ofi[...] Deleted : user_pref("CT1098640.DownloadDomainsListLastServerUpdateTime", "1201069983"); Deleted : user_pref("CT1098640.DownloadReferralCookieData", ""); Deleted : user_pref("CT1098640.FeedLastCount128295885701037994", 0); Deleted : user_pref("CT1098640.FeedPollDate128295885701037994", "Fri Sep 02 2011 19:58:21 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT1098640.FirstServerDate", "10-4-2011"); Deleted : user_pref("CT1098640.FirstTime", true); Deleted : user_pref("CT1098640.FirstTimeFF3", true); Deleted : user_pref("CT1098640.FixPageNotFoundErrors", true); Deleted : user_pref("CT1098640.GroupingServerCheckInterval", 1440); Deleted : user_pref("CT1098640.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Deleted : user_pref("CT1098640.HasUserGlobalKeys", true); Deleted : user_pref("CT1098640.HomePageProtectorEnabled", false); Deleted : user_pref("CT1098640.Initialize", true); Deleted : user_pref("CT1098640.InitializeCommonPrefs", true); Deleted : user_pref("CT1098640.InstallationAndCookieDataSentCount", 3); Deleted : user_pref("CT1098640.InstalledDate", "Sun Apr 10 2011 14:19:39 GMT-0300 (Hora oficial do Brasil)"); Deleted : user_pref("CT1098640.InvalidateCache", false); Deleted : user_pref("CT1098640.IsAlertDBUpdated", true); Deleted : user_pref("CT1098640.IsGrouping", false); Deleted : user_pref("CT1098640.IsMulticommunity", true); Deleted : user_pref("CT1098640.IsOpenThankYouPage", true); Deleted : user_pref("CT1098640.IsOpenUninstallPage", true); Deleted : user_pref("CT1098640.LanguagePackLastCheckTime", "Fri Sep 02 2011 10:56:42 GMT-0300 (Hora oficial do[...] Deleted : user_pref("CT1098640.LanguagePackReloadIntervalMM", 1440); Deleted : user_pref("CT1098640.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Deleted : user_pref("CT1098640.LastLogin_3.3.3.2", "Thu Jul 07 2011 22:07:39 GMT-0300 (Hora oficial do Brasil)[...] Deleted : user_pref("CT1098640.LastLogin_3.5.0.12", "Sun Jul 31 2011 13:53:00 GMT-0300 (Hora oficial do Brasil[...] Deleted : user_pref("CT1098640.LastLogin_3.6.0.10", "Fri Sep 02 2011 17:54:43 GMT-0300 (Hora oficial do Brasil[...] Deleted : user_pref("CT1098640.LatestVersion", "3.5.0.12"); Deleted : user_pref("CT1098640.Locale", "en-us"); Deleted : user_pref("CT1098640.MCDetectTooltipHeight", "83"); Deleted : user_pref("CT1098640.MCDetectTooltipShow", true); Deleted : user_pref("CT1098640.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Deleted : user_pref("CT1098640.MCDetectTooltipWidth", "295"); Deleted : user_pref("CT1098640.MyStuffEnabledAtInstallation", true); Deleted : user_pref("CT1098640.RadioIsPodcast", false); Deleted : user_pref("CT1098640.RadioLastCheckTime", "Fri Sep 02 2011 10:56:40 GMT-0300 (Hora oficial do Brasil[...] Deleted : user_pref("CT1098640.RadioLastUpdateIPServer", "0"); Deleted : user_pref("CT1098640.RadioLastUpdateServer", "128929877726170000"); Deleted : user_pref("CT1098640.RadioMediaID", "4817804"); Deleted : user_pref("CT1098640.RadioMediaType", "Media Player"); Deleted : user_pref("CT1098640.RadioMenuSelectedID", "EBRadioMenu_CT10986404817804"); Deleted : user_pref("CT1098640.RadioShrinkedFromSetup", false); Deleted : user_pref("CT1098640.RadioStationName", "Adult%20Alternative"); Deleted : user_pref("CT1098640.RadioStationURL", "hxxp://syndication.choiceradio.com/asxplay/asx-music/406.asx[...] Deleted : user_pref("CT1098640.SavedHomepage", "hxxp://www.ccvteam.com/forum/"); Deleted : user_pref("CT1098640.SearchBoxWidth", 150); Deleted : user_pref("CT1098640.SearchEngineBeforeUnload", "Google"); Deleted : user_pref("CT1098640.SearchFromAddressBarIsInit", true); Deleted : user_pref("CT1098640.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT109[...] Deleted : user_pref("CT1098640.SearchInNewTabEnabled", true); Deleted : user_pref("CT1098640.SearchInNewTabIntervalMM", 1440); Deleted : user_pref("CT1098640.SearchInNewTabLastCheckTime", "Fri Sep 02 2011 10:56:38 GMT-0300 (Hora oficial [...] Deleted : user_pref("CT1098640.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Deleted : user_pref("CT1098640.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Deleted : user_pref("CT1098640.SearchProtectorEnabled", false); Deleted : user_pref("CT1098640.SearchProtectorToolbarDisabled", true); Deleted : user_pref("CT1098640.ServiceMapLastCheckTime", "Fri Sep 02 2011 10:56:39 GMT-0300 (Hora oficial do B[...] Deleted : user_pref("CT1098640.SettingsLastCheckTime", "Fri Sep 02 2011 19:58:19 GMT-0300 (Hora oficial do Bra[...] Deleted : user_pref("CT1098640.SettingsLastUpdate", "1314539878"); Deleted : user_pref("CT1098640.ThirdPartyComponentsInterval", 504); Deleted : user_pref("CT1098640.ThirdPartyComponentsLastCheck", "Mon Aug 15 2011 12:08:46 GMT-0300 (Hora oficia[...] Deleted : user_pref("CT1098640.ThirdPartyComponentsLastUpdate", "1246786978"); Deleted : user_pref("CT1098640.ToolbarDisabled", true); Deleted : user_pref("CT1098640.ToolbarShrinkedFromSetup", false); Deleted : user_pref("CT1098640.TrusteLinkUrl", "hxxp://trust.conduit.com/CT1098640"); Deleted : user_pref("CT1098640.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Deleted : user_pref("CT1098640.UserID", "UN66086976168766322"); Deleted : user_pref("CT1098640.ValidationData_Toolbar", 2); Deleted : user_pref("CT1098640.WeatherNetwork", ""); Deleted : user_pref("CT1098640.WeatherPollDate", "Fri Sep 02 2011 19:59:41 GMT-0300 (Hora oficial do Brasil)")[...] Deleted : user_pref("CT1098640.WeatherUnit", "C"); Deleted : user_pref("CT1098640.alertChannelId", "5747"); Deleted : user_pref("CT1098640.approveUntrustedApps", true); Deleted : user_pref("CT1098640.components.1000234", true); Deleted : user_pref("CT1098640.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Deleted : user_pref("CT1098640.globalFirstTimeInfoLastCheckTime", "Fri Sep 02 2011 17:54:44 GMT-0300 (Hora ofi[...] Deleted : user_pref("CT1098640.homepageProtectorEnableByLogin", true); Deleted : user_pref("CT1098640.initDone", true); Deleted : user_pref("CT1098640.isAppTrackingManagerOn", true); Deleted : user_pref("CT1098640.isFirstRadioInstallation", false); Deleted : user_pref("CT1098640.myStuffEnabled", true); Deleted : user_pref("CT1098640.myStuffPublihserMinWidth", 400); Deleted : user_pref("CT1098640.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Deleted : user_pref("CT1098640.myStuffServiceIntervalMM", 1440); Deleted : user_pref("CT1098640.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Deleted : user_pref("CT1098640.oldAppsList", "200,128333897468069547,128295879817444167,111,128295979035569280[...] Deleted : user_pref("CT1098640.searchProtectorDialogDelayInSec", 10); Deleted : user_pref("CT1098640.searchProtectorEnableByLogin", true); Deleted : user_pref("CT1098640.testingCtid", ""); Deleted : user_pref("CT1098640.toolbarAppMetaDataLastCheckTime", "Fri Sep 02 2011 10:56:42 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT1098640.toolbarContextMenuLastCheckTime", "Fri Sep 02 2011 17:54:44 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT1098640.undefined", "Sun Apr 10 2011 14:19:24 GMT-0300 (Hora oficial do Brasil)"); Deleted : user_pref("CT1098640.usagesFlag", 2); Deleted : user_pref("CT2247187..clientLogIsEnabled", true); Deleted : user_pref("CT2247187..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Deleted : user_pref("CT2247187..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Deleted : user_pref("CT2247187.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Deleted : user_pref("CT2247187.AppTrackingLastCheckTime", "Wed Apr 27 2011 13:30:00 GMT-0300 (Hora oficial do [...] Deleted : user_pref("CT2247187.CT2247187", "CT2247187"); Deleted : user_pref("CT2247187.Chat.Meebo.ServerLastCheckTime", "Sun Apr 10 2011 17:07:19 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2247187.Chat.Meebo.ServerLastResponseTime", "Sun Apr 10 2011 17:07:20 GMT-0300 (Hora of[...] Deleted : user_pref("CT2247187.Chat.Meebo.rooms.2030of7a78203f", 6); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.30plus683ec0a3", 22); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.entertainment3d98c8ee", 0); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.healthed7eb5ea", 0); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.marioforevercommunitychatdf56fc21", 6); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.musicpca565a36", 6); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.newstu0548025d", 1); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.recreation2b6006ec", 0); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.spirituality9440382e", 0); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.sports84029aeb", 0); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.technology9fc01102", 0); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.teenagers60fc8fbc", 39); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.travel0e02ee8e", 0); Deleted : user_pref("CT2247187.Chat.Meebo.rooms.videogames58dc7b74", 0); Deleted : user_pref("CT2247187.Chat.ServerLastCheckTime", "Sun Apr 10 2011 17:07:19 GMT-0300 (Hora oficial do [...] Deleted : user_pref("CT2247187.CommunitiesChangesLastCheckTime", "Fri Sep 02 2011 19:58:21 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2247187.CommunitiesChangesLastUrl", "hxxp://grouping.services.conduit.com/GroupingReque[...] Deleted : user_pref("CT2247187.CommunityChanged", true); Deleted : user_pref("CT2247187.CurrentServerDate", "2-9-2011"); Deleted : user_pref("CT2247187.DialogsAlignMode", "LTR"); Deleted : user_pref("CT2247187.DialogsGetterLastCheckTime", "Thu Sep 01 2011 19:28:02 GMT-0300 (Hora oficial d[...] Deleted : user_pref("CT2247187.DownloadDomainsCheckInterval", "168"); Deleted : user_pref("CT2247187.DownloadDomainsListLastCheckTime", "Tue Aug 30 2011 18:26:45 GMT-0300 (Hora ofi[...] Deleted : user_pref("CT2247187.DownloadDomainsListLastServerUpdateTime", "1201069983"); Deleted : user_pref("CT2247187.DownloadReferralCookieData", ""); Deleted : user_pref("CT2247187.EMailNotifierPollDate", "Fri Sep 02 2011 19:54:39 GMT-0300 (Hora oficial do Bra[...] Deleted : user_pref("CT2247187.FirstServerDate", "10-4-2011"); Deleted : user_pref("CT2247187.FirstTime", true); Deleted : user_pref("CT2247187.FirstTimeFF3", true); Deleted : user_pref("CT2247187.FixPageNotFoundErrors", true); Deleted : user_pref("CT2247187.GroupingServerCheckInterval", 1440); Deleted : user_pref("CT2247187.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Deleted : user_pref("CT2247187.HasUserGlobalKeys", true); Deleted : user_pref("CT2247187.HomePageProtectorEnabled", false); Deleted : user_pref("CT2247187.Initialize", true); Deleted : user_pref("CT2247187.InitializeCommonPrefs", true); Deleted : user_pref("CT2247187.InstallationAndCookieDataSentCount", 3); Deleted : user_pref("CT2247187.InstalledDate", "Sun Apr 10 2011 14:20:23 GMT-0300 (Hora oficial do Brasil)"); Deleted : user_pref("CT2247187.InvalidateCache", false); Deleted : user_pref("CT2247187.IsAlertDBUpdated", true); Deleted : user_pref("CT2247187.IsGrouping", false); Deleted : user_pref("CT2247187.IsMulticommunity", true); Deleted : user_pref("CT2247187.IsOpenThankYouPage", true); Deleted : user_pref("CT2247187.IsOpenUninstallPage", true); Deleted : user_pref("CT2247187.LanguagePackLastCheckTime", "Fri Sep 02 2011 10:56:43 GMT-0300 (Hora oficial do[...] Deleted : user_pref("CT2247187.LanguagePackReloadIntervalMM", 1440); Deleted : user_pref("CT2247187.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Deleted : user_pref("CT2247187.LastLogin_3.3.3.2", "Tue Aug 16 2011 11:48:58 GMT-0300 (Hora oficial do Brasil)[...] Deleted : user_pref("CT2247187.LastLogin_3.6.0.10", "Fri Sep 02 2011 17:54:48 GMT-0300 (Hora oficial do Brasil[...] Deleted : user_pref("CT2247187.LatestVersion", "3.6.0.10"); Deleted : user_pref("CT2247187.Locale", "en"); Deleted : user_pref("CT2247187.MCDetectTooltipHeight", "83"); Deleted : user_pref("CT2247187.MCDetectTooltipShow", true); Deleted : user_pref("CT2247187.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Deleted : user_pref("CT2247187.MCDetectTooltipWidth", "295"); Deleted : user_pref("CT2247187.MyStuffEnabledAtInstallation", true); Deleted : user_pref("CT2247187.RadioIsPodcast", false); Deleted : user_pref("CT2247187.RadioLastCheckTime", "Fri Sep 02 2011 10:56:40 GMT-0300 (Hora oficial do Brasil[...] Deleted : user_pref("CT2247187.RadioLastUpdateIPServer", "3"); Deleted : user_pref("CT2247187.RadioLastUpdateServer", "128929877726170000"); Deleted : user_pref("CT2247187.RadioMediaID", "10957728"); Deleted : user_pref("CT2247187.RadioMediaType", "Media Player"); Deleted : user_pref("CT2247187.RadioMenuSelectedID", "EBRadioMenu_CT224718710957728"); Deleted : user_pref("CT2247187.RadioShrinkedFromSetup", false); Deleted : user_pref("CT2247187.RadioStationName", "Rap%20(Uncensored)"); Deleted : user_pref("CT2247187.RadioStationURL", "hxxp://www.1club.fm/go/tunein.aspx?station=raw"); Deleted : user_pref("CT2247187.SavedHomepage", "hxxp://search.conduit.com/?ctid=CT1098640&SearchSource=13"); Deleted : user_pref("CT2247187.SearchEngineBeforeUnload", "Google"); Deleted : user_pref("CT2247187.SearchFromAddressBarIsInit", true); Deleted : user_pref("CT2247187.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT224[...] Deleted : user_pref("CT2247187.SearchInNewTabEnabled", true); Deleted : user_pref("CT2247187.SearchInNewTabIntervalMM", 1440); Deleted : user_pref("CT2247187.SearchInNewTabLastCheckTime", "Fri Sep 02 2011 10:56:40 GMT-0300 (Hora oficial [...] Deleted : user_pref("CT2247187.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Deleted : user_pref("CT2247187.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Deleted : user_pref("CT2247187.SearchProtectorEnabled", false); Deleted : user_pref("CT2247187.SearchProtectorToolbarDisabled", true); Deleted : user_pref("CT2247187.ServiceMapLastCheckTime", "Fri Sep 02 2011 10:56:42 GMT-0300 (Hora oficial do B[...] Deleted : user_pref("CT2247187.SettingsLastCheckTime", "Fri Sep 02 2011 19:58:21 GMT-0300 (Hora oficial do Bra[...] Deleted : user_pref("CT2247187.SettingsLastUpdate", "1313595310"); Deleted : user_pref("CT2247187.ThirdPartyComponentsInterval", 504); Deleted : user_pref("CT2247187.ThirdPartyComponentsLastCheck", "Mon Aug 15 2011 12:08:43 GMT-0300 (Hora oficia[...] Deleted : user_pref("CT2247187.ThirdPartyComponentsLastUpdate", "1246786978"); Deleted : user_pref("CT2247187.ToolbarDisabled", true); Deleted : user_pref("CT2247187.ToolbarShrinkedFromSetup", false); Deleted : user_pref("CT2247187.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2247187"); Deleted : user_pref("CT2247187.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Deleted : user_pref("CT2247187.UserID", "UN09690826801131414"); Deleted : user_pref("CT2247187.ValidationData_Search", 0); Deleted : user_pref("CT2247187.ValidationData_Toolbar", 2); Deleted : user_pref("CT2247187.WeatherNetwork", ""); Deleted : user_pref("CT2247187.WeatherPollDate", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora oficial do Brasil)")[...] Deleted : user_pref("CT2247187.WeatherUnit", "C"); Deleted : user_pref("CT2247187.alertChannelId", "644679"); Deleted : user_pref("CT2247187.approveUntrustedApps", true); Deleted : user_pref("CT2247187.backendstorage._fb_dailyactivity", "31333032343535393837393039"); Deleted : user_pref("CT2247187.backendstorage._fb_lifetimesent", "54525545"); Deleted : user_pref("CT2247187.backendstorage.facebook_ctid_connect_send", "73656E646564"); Deleted : user_pref("CT2247187.backendstorage.fb_dailyactivity", "31333033373635343932303838"); Deleted : user_pref("CT2247187.backendstorage.fb_lifetimesent", "54525545"); Deleted : user_pref("CT2247187.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E"); Deleted : user_pref("CT2247187.components.1000034", true); Deleted : user_pref("CT2247187.components.1000234", true); Deleted : user_pref("CT2247187.components.1010001", false); Deleted : user_pref("CT2247187.components.128840198243206305", false); Deleted : user_pref("CT2247187.components.128847263891375953", false); Deleted : user_pref("CT2247187.components.129066416652342809", false); Deleted : user_pref("CT2247187.components.129143810623275080", false); Deleted : user_pref("CT2247187.components.129466481521850704", false); Deleted : user_pref("CT2247187.components.8376440747724315881", false); Deleted : user_pref("CT2247187.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Deleted : user_pref("CT2247187.globalFirstTimeInfoLastCheckTime", "Fri Sep 02 2011 17:54:50 GMT-0300 (Hora ofi[...] Deleted : user_pref("CT2247187.homepageProtectorEnableByLogin", true); Deleted : user_pref("CT2247187.initDone", true); Deleted : user_pref("CT2247187.isAppTrackingManagerOn", true); Deleted : user_pref("CT2247187.isFirstRadioInstallation", false); Deleted : user_pref("CT2247187.myStuffEnabled", true); Deleted : user_pref("CT2247187.myStuffPublihserMinWidth", 400); Deleted : user_pref("CT2247187.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Deleted : user_pref("CT2247187.myStuffServiceIntervalMM", 1440); Deleted : user_pref("CT2247187.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Deleted : user_pref("CT2247187.oldAppsList", "200,128834881989343894,128834881989343895,111,129415741154562666[...] Deleted : user_pref("CT2247187.searchProtectorDialogDelayInSec", 10); Deleted : user_pref("CT2247187.searchProtectorEnableByLogin", true); Deleted : user_pref("CT2247187.testingCtid", ""); Deleted : user_pref("CT2247187.toolbarAppMetaDataLastCheckTime", "Fri Sep 02 2011 10:56:44 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2247187.toolbarContextMenuLastCheckTime", "Tue Aug 30 2011 14:12:59 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2247187.usagesFlag", 2); Deleted : user_pref("CT2304157..clientLogIsEnabled", false); Deleted : user_pref("CT2304157..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Deleted : user_pref("CT2304157..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Deleted : user_pref("CT2304157.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Deleted : user_pref("CT2304157.BrowserCompStateIsOpen_1000515", true); Deleted : user_pref("CT2304157.CT2304157", "CT2304157"); Deleted : user_pref("CT2304157.CurrentServerDate", "8-10-2011"); Deleted : user_pref("CT2304157.DialogsAlignMode", "LTR"); Deleted : user_pref("CT2304157.DialogsGetterLastCheckTime", "Sat Oct 08 2011 12:25:33 GMT-0300 (Hora oficial d[...] Deleted : user_pref("CT2304157.DownloadReferralCookieData", ""); Deleted : user_pref("CT2304157.FeedLastCount129078895246717929", 20); Deleted : user_pref("CT2304157.FeedLastCount129095439763593837", 36); Deleted : user_pref("CT2304157.FeedPollDate129078895250311712", "Sat Oct 08 2011 18:25:33 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2304157.FeedPollDate129095439763593837", "Sat Oct 08 2011 18:25:32 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2304157.FeedTTL129078895250311712", 40); Deleted : user_pref("CT2304157.FirstServerDate", "2-7-2011"); Deleted : user_pref("CT2304157.FirstTime", true); Deleted : user_pref("CT2304157.FirstTimeFF3", true); Deleted : user_pref("CT2304157.FixPageNotFoundErrors", true); Deleted : user_pref("CT2304157.GroupingServerCheckInterval", 1440); Deleted : user_pref("CT2304157.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Deleted : user_pref("CT2304157.HasUserGlobalKeys", true); Deleted : user_pref("CT2304157.HomePageProtectorEnabled", false); Deleted : user_pref("CT2304157.Initialize", true); Deleted : user_pref("CT2304157.InitializeCommonPrefs", true); Deleted : user_pref("CT2304157.InstallationAndCookieDataSentCount", 3); Deleted : user_pref("CT2304157.InstalledDate", "Sat Jul 02 2011 10:27:42 GMT-0300 (Hora oficial do Brasil)"); Deleted : user_pref("CT2304157.IsAlertDBUpdated", true); Deleted : user_pref("CT2304157.IsGrouping", false); Deleted : user_pref("CT2304157.IsInitSetupIni", true); Deleted : user_pref("CT2304157.IsMulticommunity", false); Deleted : user_pref("CT2304157.IsOpenThankYouPage", true); Deleted : user_pref("CT2304157.IsOpenUninstallPage", true); Deleted : user_pref("CT2304157.IsProtectorsInit", true); Deleted : user_pref("CT2304157.LanguagePackLastCheckTime", "Sat Oct 08 2011 12:25:33 GMT-0300 (Hora oficial do[...] Deleted : user_pref("CT2304157.LanguagePackReloadIntervalMM", 1440); Deleted : user_pref("CT2304157.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Deleted : user_pref("CT2304157.LastLogin_3.5.0.12", "Fri Sep 02 2011 17:54:42 GMT-0300 (Hora oficial do Brasil[...] Deleted : user_pref("CT2304157.LastLogin_3.6.0.10", "Sat Oct 08 2011 16:25:32 GMT-0300 (Hora oficial do Brasil[...] Deleted : user_pref("CT2304157.LatestVersion", "3.7.0.6"); Deleted : user_pref("CT2304157.Locale", "en"); Deleted : user_pref("CT2304157.MCDetectTooltipHeight", "83"); Deleted : user_pref("CT2304157.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Deleted : user_pref("CT2304157.MCDetectTooltipWidth", "295"); Deleted : user_pref("CT2304157.MyStuffEnabledAtInstallation", true); Deleted : user_pref("CT2304157.OriginalFirstVersion", "3.5.0.12"); Deleted : user_pref("CT2304157.SavedHomepage", "hxxp://www.ccvteam.com/forum/"); Deleted : user_pref("CT2304157.SearchBoxWidth", 150); Deleted : user_pref("CT2304157.SearchEngineBeforeUnload", "Google"); Deleted : user_pref("CT2304157.SearchFromAddressBarIsInit", true); Deleted : user_pref("CT2304157.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT230[...] Deleted : user_pref("CT2304157.SearchInNewTabEnabled", true); Deleted : user_pref("CT2304157.SearchInNewTabIntervalMM", 1440); Deleted : user_pref("CT2304157.SearchInNewTabLastCheckTime", "Sat Oct 08 2011 12:25:32 GMT-0300 (Hora oficial [...] Deleted : user_pref("CT2304157.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Deleted : user_pref("CT2304157.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...] Deleted : user_pref("CT2304157.SearchProtectorEnabled", false); Deleted : user_pref("CT2304157.SearchProtectorToolbarDisabled", true); Deleted : user_pref("CT2304157.ServiceMapLastCheckTime", "Sat Oct 08 2011 12:25:32 GMT-0300 (Hora oficial do B[...] Deleted : user_pref("CT2304157.SettingsLastCheckTime", "Sat Oct 08 2011 12:25:32 GMT-0300 (Hora oficial do Bra[...] Deleted : user_pref("CT2304157.SettingsLastUpdate", "1317627084"); Deleted : user_pref("CT2304157.ThirdPartyComponentsInterval", 504); Deleted : user_pref("CT2304157.ThirdPartyComponentsLastCheck", "Sat Oct 08 2011 12:25:31 GMT-0300 (Hora oficia[...] Deleted : user_pref("CT2304157.ThirdPartyComponentsLastUpdate", "1312887586"); Deleted : user_pref("CT2304157.ToolbarDisabled", false); Deleted : user_pref("CT2304157.ToolbarShrinkedFromSetup", false); Deleted : user_pref("CT2304157.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2304157"); Deleted : user_pref("CT2304157.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Deleted : user_pref("CT2304157.Uninstall", true); Deleted : user_pref("CT2304157.UserID", "UN78475189431696673"); Deleted : user_pref("CT2304157.ValidationData_Toolbar", 2); Deleted : user_pref("CT2304157.alertChannelId", "700614"); Deleted : user_pref("CT2304157.backendstorage.facebook_mode", "32"); Deleted : user_pref("CT2304157.backendstorage.facebook_user_locale", "7074"); Deleted : user_pref("CT2304157.components.1000515", true); Deleted : user_pref("CT2304157.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Deleted : user_pref("CT2304157.globalFirstTimeInfoLastCheckTime", "Sat Oct 08 2011 16:25:33 GMT-0300 (Hora ofi[...] Deleted : user_pref("CT2304157.homepageProtectorEnableByLogin", true); Deleted : user_pref("CT2304157.initDone", true); Deleted : user_pref("CT2304157.isAppTrackingManagerOn", true); Deleted : user_pref("CT2304157.myStuffEnabled", true); Deleted : user_pref("CT2304157.myStuffPublihserMinWidth", 400); Deleted : user_pref("CT2304157.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Deleted : user_pref("CT2304157.myStuffServiceIntervalMM", 1440); Deleted : user_pref("CT2304157.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Deleted : user_pref("CT2304157.oldAppsList", "128883653123969059,128883653123969060,111,128883659132094175,129[...] Deleted : user_pref("CT2304157.searchProtectorDialogDelayInSec", 10); Deleted : user_pref("CT2304157.searchProtectorEnableByLogin", true); Deleted : user_pref("CT2304157.testingCtid", ""); Deleted : user_pref("CT2304157.toolbarAppMetaDataLastCheckTime", "Sat Oct 08 2011 12:25:33 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2304157.toolbarContextMenuLastCheckTime", "Sat Oct 08 2011 12:25:33 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2304157.undefined", "Mon Jul 18 2011 12:03:00 GMT-0300 (Hora oficial do Brasil)"); Deleted : user_pref("CT2304157.usagesFlag", 2); Deleted : user_pref("CT2324177..clientLogIsEnabled", true); Deleted : user_pref("CT2324177..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Deleted : user_pref("CT2324177..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Deleted : user_pref("CT2324177.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); Deleted : user_pref("CT2324177.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Deleted : user_pref("CT2324177.AppTrackingLastCheckTime", "Sat Dec 24 2011 21:31:56 GMT-0200"); Deleted : user_pref("CT2324177.CTID", "CT2324177"); Deleted : user_pref("CT2324177.CurrentServerDate", "29-12-2011"); Deleted : user_pref("CT2324177.DialogsAlignMode", "LTR"); Deleted : user_pref("CT2324177.DialogsGetterLastCheckTime", "Mon Dec 26 2011 17:11:29 GMT-0200"); Deleted : user_pref("CT2324177.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...] Deleted : user_pref("CT2324177.FirstServerDate", "2-1-2011"); Deleted : user_pref("CT2324177.FirstTime", true); Deleted : user_pref("CT2324177.FirstTimeFF3", true); Deleted : user_pref("CT2324177.FixPageNotFoundErrors", true); Deleted : user_pref("CT2324177.GroupingServerCheckInterval", 1440); Deleted : user_pref("CT2324177.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Deleted : user_pref("CT2324177.HasUserGlobalKeys", true); Deleted : user_pref("CT2324177.HomePageProtectorEnabled", false); Deleted : user_pref("CT2324177.Initialize", true); Deleted : user_pref("CT2324177.InitializeCommonPrefs", true); Deleted : user_pref("CT2324177.InstallationAndCookieDataSentCount", 3); Deleted : user_pref("CT2324177.InstalledDate", "Sat Jan 01 2011 19:41:24 GMT-0200"); Deleted : user_pref("CT2324177.InvalidateCache", false); Deleted : user_pref("CT2324177.IsAlertDBUpdated", true); Deleted : user_pref("CT2324177.IsGrouping", false); Deleted : user_pref("CT2324177.IsMulticommunity", false); Deleted : user_pref("CT2324177.IsOpenThankYouPage", true); Deleted : user_pref("CT2324177.IsOpenUninstallPage", true); Deleted : user_pref("CT2324177.LanguagePackLastCheckTime", "Wed Dec 28 2011 14:20:02 GMT-0200"); Deleted : user_pref("CT2324177.LanguagePackReloadIntervalMM", 1440); Deleted : user_pref("CT2324177.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Deleted : user_pref("CT2324177.LastLogin_3.2.5.2", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora oficial do Brasil)[...] Deleted : user_pref("CT2324177.LastLogin_3.3.3.2", "Fri Jul 08 2011 18:53:08 GMT-0300 (Hora oficial do Brasil)[...] Deleted : user_pref("CT2324177.LastLogin_3.5.0.12", "Mon Aug 01 2011 12:42:25 GMT-0300 (Hora oficial do Brasil[...] Deleted : user_pref("CT2324177.LastLogin_3.6.0.10", "Tue Oct 11 2011 13:27:23 GMT-0300 (Hora oficial do Brasil[...] Deleted : user_pref("CT2324177.LastLogin_3.7.0.6", "Mon Oct 10 2011 10:02:22 GMT-0300 (Hora oficial do Brasil)[...] Deleted : user_pref("CT2324177.LastLogin_3.8.0.8", "Tue Dec 06 2011 23:28:01 GMT-0200"); Deleted : user_pref("CT2324177.LastLogin_3.8.1.0", "Thu Dec 29 2011 09:41:28 GMT-0200"); Deleted : user_pref("CT2324177.LatestVersion", "3.8.1.0"); Deleted : user_pref("CT2324177.Locale", "pt"); Deleted : user_pref("CT2324177.MCDetectTooltipHeight", "83"); Deleted : user_pref("CT2324177.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Deleted : user_pref("CT2324177.MCDetectTooltipWidth", "295"); Deleted : user_pref("CT2324177.MyStuffEnabledAtInstallation", true); Deleted : user_pref("CT2324177.RadioIsPodcast", false); Deleted : user_pref("CT2324177.RadioLastCheckTime", "Wed Dec 28 2011 14:20:00 GMT-0200"); Deleted : user_pref("CT2324177.RadioLastUpdateIPServer", "3"); Deleted : user_pref("CT2324177.RadioLastUpdateServer", "129176584656270000"); Deleted : user_pref("CT2324177.RadioMediaID", "20572458"); Deleted : user_pref("CT2324177.RadioMediaType", "Media Player"); Deleted : user_pref("CT2324177.RadioMenuSelectedID", "EBRadioMenu_CT2324177_RECENT20572458"); Deleted : user_pref("CT2324177.RadioShrinked", "expanded"); Deleted : user_pref("CT2324177.RadioShrinkedFromSetup", false); Deleted : user_pref("CT2324177.RadioStationName", "Radio%20CCV"); Deleted : user_pref("CT2324177.RadioStationURL", "hxxp://streaming10.brlogic.com:8192"); Deleted : user_pref("CT2324177.SHRINK_TOOLBAR", 1); Deleted : user_pref("CT2324177.SearchBoxWidth", 150); Deleted : user_pref("CT2324177.SearchEngineBeforeUnload", "Google"); Deleted : user_pref("CT2324177.SearchFromAddressBarIsInit", true); Deleted : user_pref("CT2324177.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT232[...] Deleted : user_pref("CT2324177.SearchInNewTabEnabled", true); Deleted : user_pref("CT2324177.SearchInNewTabIntervalMM", 1440); Deleted : user_pref("CT2324177.SearchInNewTabLastCheckTime", "Wed Dec 28 2011 14:20:00 GMT-0200"); Deleted : user_pref("CT2324177.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Deleted : user_pref("CT2324177.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...] Deleted : user_pref("CT2324177.SearchProtectorEnabled", false); Deleted : user_pref("CT2324177.SearchProtectorToolbarDisabled", false); Deleted : user_pref("CT2324177.ServiceMapLastCheckTime", "Wed Dec 28 2011 14:20:01 GMT-0200"); Deleted : user_pref("CT2324177.SettingsLastCheckTime", "Thu Dec 29 2011 09:41:24 GMT-0200"); Deleted : user_pref("CT2324177.SettingsLastUpdate", "1321973073"); Deleted : user_pref("CT2324177.ThirdPartyComponentsInterval", 504); Deleted : user_pref("CT2324177.ThirdPartyComponentsLastCheck", "Sun Dec 11 2011 10:35:38 GMT-0200"); Deleted : user_pref("CT2324177.ThirdPartyComponentsLastUpdate", "1311768090"); Deleted : user_pref("CT2324177.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2324177"); Deleted : user_pref("CT2324177.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Deleted : user_pref("CT2324177.UserID", "UN08259591684570688"); Deleted : user_pref("CT2324177.ValidationData_Search", 2); Deleted : user_pref("CT2324177.ValidationData_Toolbar", 2); Deleted : user_pref("CT2324177.WeatherNetwork", ""); Deleted : user_pref("CT2324177.WeatherPollDate", "Thu Dec 29 2011 11:38:51 GMT-0200"); Deleted : user_pref("CT2324177.WeatherUnit", "C"); Deleted : user_pref("CT2324177.alertChannelId", "720205"); Deleted : user_pref("CT2324177.approveUntrustedApps", false); Deleted : user_pref("CT2324177.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Deleted : user_pref("CT2324177.globalFirstTimeInfoLastCheckTime", "Thu Dec 29 2011 09:41:24 GMT-0200"); Deleted : user_pref("CT2324177.homepageProtectorEnableByLogin", true); Deleted : user_pref("CT2324177.initDone", true); Deleted : user_pref("CT2324177.isAppTrackingManagerOn", true); Deleted : user_pref("CT2324177.myStuffEnabled", true); Deleted : user_pref("CT2324177.myStuffPublihserMinWidth", 400); Deleted : user_pref("CT2324177.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Deleted : user_pref("CT2324177.myStuffServiceIntervalMM", 1440); Deleted : user_pref("CT2324177.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Deleted : user_pref("CT2324177.oldAppsList", "128902006170863078,128902006170863079,111,1000082,12890207916184[...] Deleted : user_pref("CT2324177.revertSettingsEnabled", true); Deleted : user_pref("CT2324177.searchProtectorDialogDelayInSec", 10); Deleted : user_pref("CT2324177.searchProtectorEnableByLogin", true); Deleted : user_pref("CT2324177.testingCtid", ""); Deleted : user_pref("CT2324177.toolbarAppMetaDataLastCheckTime", "Wed Dec 28 2011 14:20:01 GMT-0200"); Deleted : user_pref("CT2324177.toolbarContextMenuLastCheckTime", "Sat Dec 24 2011 19:12:48 GMT-0200"); Deleted : user_pref("CT2324177.usagesFlag", 2); Deleted : user_pref("CT2475029..clientLogIsEnabled", false); Deleted : user_pref("CT2475029..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Deleted : user_pref("CT2475029..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Deleted : user_pref("CT2475029.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Deleted : user_pref("CT2475029.AppTrackingLastCheckTime", "Wed Apr 27 2011 13:30:00 GMT-0300 (Hora oficial do [...] Deleted : user_pref("CT2475029.BrowserCompStateIsOpen_129464711670611991", true); Deleted : user_pref("CT2475029.CT2481020.CommunityChanged", true); Deleted : user_pref("CT2475029.CT2481020.alertChannelId", "874426"); Deleted : user_pref("CT2475029.CT2481024.CommunityChanged", true); Deleted : user_pref("CT2475029.CT2481024.alertChannelId", "874430"); Deleted : user_pref("CT2475029.CT2481025.CommunityChanged", true); Deleted : user_pref("CT2475029.CT2481025.alertChannelId", "874431"); Deleted : user_pref("CT2475029.CT2481029.CommunityChanged", true); Deleted : user_pref("CT2475029.CT2481029.alertChannelId", "874435"); Deleted : user_pref("CT2475029.CT2481031.CommunityChanged", true); Deleted : user_pref("CT2475029.CT2481031.alertChannelId", "874437"); Deleted : user_pref("CT2475029.CT2481032.CommunityChanged", true); Deleted : user_pref("CT2475029.CT2481032.alertChannelId", "874438"); Deleted : user_pref("CT2475029.CT2481033.CommunityChanged", true); Deleted : user_pref("CT2475029.CT2481033.alertChannelId", "874439"); Deleted : user_pref("CT2475029.CT2481034.CommunityChanged", true); Deleted : user_pref("CT2475029.CT2481034.alertChannelId", "874440"); Deleted : user_pref("CT2475029.CT2481035.CommunityChanged", true); Deleted : user_pref("CT2475029.CT2481035.alertChannelId", "874441"); Deleted : user_pref("CT2475029.CT2481037.CommunityChanged", true); Deleted : user_pref("CT2475029.CT2481037.alertChannelId", "874443"); Deleted : user_pref("CT2475029.CTID", "CT2475029"); Deleted : user_pref("CT2475029.CommunitiesChangesLastCheckTime", "Fri Sep 02 2011 19:58:21 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.CommunitiesChangesLastUrl", "hxxp://grouping.services.conduit.com/GroupingReque[...] Deleted : user_pref("CT2475029.CommunityChanged", true); Deleted : user_pref("CT2475029.CurrentServerDate", "2-9-2011"); Deleted : user_pref("CT2475029.DialogsAlignMode", "LTR"); Deleted : user_pref("CT2475029.DialogsGetterLastCheckTime", "Wed Aug 31 2011 13:34:22 GMT-0300 (Hora oficial d[...] Deleted : user_pref("CT2475029.DownloadDomainsCheckInterval", "168"); Deleted : user_pref("CT2475029.DownloadDomainsListLastCheckTime", "Mon Aug 29 2011 19:32:15 GMT-0300 (Hora ofi[...] Deleted : user_pref("CT2475029.DownloadDomainsListLastServerUpdateTime", "1201069983"); Deleted : user_pref("CT2475029.DownloadReferralCookieData", ""); Deleted : user_pref("CT2475029.EMailNotifierPollDate", "Fri Sep 02 2011 19:59:39 GMT-0300 (Hora oficial do Bra[...] Deleted : user_pref("CT2475029.FeedLastCount129133095456874337", 400); Deleted : user_pref("CT2475029.FeedLastCount6244576562585401993", 100); Deleted : user_pref("CT2475029.FeedPollDate129132307482029379", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129132307482029381", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129132307482029382", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129133095459686870", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129133095459686871", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129137437659687146", "Fri Sep 02 2011 19:29:39 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129137437659687147", "Fri Sep 02 2011 19:29:39 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129137437659687148", "Fri Sep 02 2011 19:29:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214602500", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214602506", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214602512", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214602518", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214602524", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214602530", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603404", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603410", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603416", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603422", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603428", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603434", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603440", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603446", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603452", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603458", "Sat Apr 09 2011 09:36:37 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603464", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603470", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603476", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603482", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603488", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214603494", "Sat Apr 09 2011 09:36:38 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758786", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758792", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758798", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758804", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758810", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758816", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758822", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758828", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758834", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758840", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758846", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758852", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758858", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758864", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758870", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758876", "Sat Apr 09 2011 09:36:40 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758882", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758888", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758894", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758900", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758906", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758912", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758918", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758924", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758930", "Sat Apr 09 2011 09:36:41 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758936", "Sat Apr 09 2011 09:36:42 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758942", "Sat Apr 09 2011 09:36:42 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758948", "Sat Apr 09 2011 09:36:42 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758954", "Sat Apr 09 2011 09:36:42 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate129255180214758960", "Sat Apr 09 2011 09:36:42 GMT-0300 (Hora ofici[...] Deleted : user_pref("CT2475029.FeedPollDate5609757377779301063", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757377961554609", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757377979947076", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757378132259586", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757378265651739", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757378449145277", "Mon Apr 11 2011 08:56:55 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757378705873295", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757378902522699", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757378968484097", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379044202234", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379219112080", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379310186023", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379320546978", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379400531926", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379497083274", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379497148810", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379497279882", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379644150784", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379646262407", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379767858421", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379797989042", "Sun Apr 10 2011 14:19:32 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757379883299006", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757380108070872", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757380344955611", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757380390189978", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757380412472059", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757380467866928", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757380521772385", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757380616362201", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757380727291645", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757380767393172", "Sun Apr 10 2011 14:19:33 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757380868375745", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381043554700", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381080219037", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381151343676", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381247526121", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381247591657", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381372042911", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381453742514", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381520490197", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381582880127", "Mon Apr 11 2011 08:56:55 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381641974229", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381669771831", "Mon Apr 11 2011 08:56:56 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381670861676", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381749396397", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381869347434", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381908324302", "Mon Apr 11 2011 08:56:58 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381919420428", "Mon Apr 11 2011 08:57:00 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381932420313", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381975368474", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381979169315", "Mon Apr 11 2011 08:56:57 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedPollDate5609757381989950054", "Mon Apr 11 2011 08:56:59 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.FeedTTL129132307482029379", 40); Deleted : user_pref("CT2475029.FeedTTL129132307482029381", 40); Deleted : user_pref("CT2475029.FeedTTL129132307482029382", 40); Deleted : user_pref("CT2475029.FeedTTL129133095459686870", 40); Deleted : user_pref("CT2475029.FeedTTL129133095459686871", 40); Deleted : user_pref("CT2475029.FeedTTL129137437659687146", 40); Deleted : user_pref("CT2475029.FeedTTL129137437659687147", 40); Deleted : user_pref("CT2475029.FeedTTL129137437659687148", 40); Deleted : user_pref("CT2475029.FeedTTL129255180214602500", 15); Deleted : user_pref("CT2475029.FeedTTL129255180214602512", 2); Deleted : user_pref("CT2475029.FeedTTL129255180214602518", 5); Deleted : user_pref("CT2475029.FeedTTL129255180214602524", 5); Deleted : user_pref("CT2475029.FeedTTL129255180214603416", 15); Deleted : user_pref("CT2475029.FeedTTL129255180214603428", 60); Deleted : user_pref("CT2475029.FeedTTL129255180214603434", 10); Deleted : user_pref("CT2475029.FeedTTL129255180214603482", 60); Deleted : user_pref("CT2475029.FeedTTL129255180214603488", 15); Deleted : user_pref("CT2475029.FeedTTL129255180214603494", 2); Deleted : user_pref("CT2475029.FeedTTL129255180214758786", 5); Deleted : user_pref("CT2475029.FeedTTL129255180214758798", 30); Deleted : user_pref("CT2475029.FeedTTL129255180214758804", 30); Deleted : user_pref("CT2475029.FeedTTL129255180214758810", 2); Deleted : user_pref("CT2475029.FeedTTL129255180214758828", 15); Deleted : user_pref("CT2475029.FeedTTL129255180214758840", 15); Deleted : user_pref("CT2475029.FeedTTL129255180214758846", 15); Deleted : user_pref("CT2475029.FeedTTL129255180214758852", 15); Deleted : user_pref("CT2475029.FeedTTL129255180214758870", 1440); Deleted : user_pref("CT2475029.FeedTTL129255180214758900", 10); Deleted : user_pref("CT2475029.FeedTTL129255180214758918", 5); Deleted : user_pref("CT2475029.FeedTTL5609757377779301063", 15); Deleted : user_pref("CT2475029.FeedTTL5609757377979947076", 15); Deleted : user_pref("CT2475029.FeedTTL5609757378132259586", 10); Deleted : user_pref("CT2475029.FeedTTL5609757378265651739", 30); Deleted : user_pref("CT2475029.FeedTTL5609757378705873295", 15); Deleted : user_pref("CT2475029.FeedTTL5609757379310186023", 5); Deleted : user_pref("CT2475029.FeedTTL5609757379320546978", 2); Deleted : user_pref("CT2475029.FeedTTL5609757379400531926", 5); Deleted : user_pref("CT2475029.FeedTTL5609757380108070872", 5); Deleted : user_pref("CT2475029.FeedTTL5609757380412472059", 15); Deleted : user_pref("CT2475029.FeedTTL5609757380467866928", 60); Deleted : user_pref("CT2475029.FeedTTL5609757380521772385", 2); Deleted : user_pref("CT2475029.FeedTTL5609757380727291645", 5); Deleted : user_pref("CT2475029.FeedTTL5609757380767393172", 1440); Deleted : user_pref("CT2475029.FeedTTL5609757381043554700", 2); Deleted : user_pref("CT2475029.FeedTTL5609757381247526121", 15); Deleted : user_pref("CT2475029.FeedTTL5609757381372042911", 60); Deleted : user_pref("CT2475029.FeedTTL5609757381453742514", 15); Deleted : user_pref("CT2475029.FeedTTL5609757381908324302", 30); Deleted : user_pref("CT2475029.FeedTTL5609757381932420313", 10); Deleted : user_pref("CT2475029.FeedTTL5609757381979169315", 15); Deleted : user_pref("CT2475029.FirstServerDate", "12-3-2011"); Deleted : user_pref("CT2475029.FirstTime", true); Deleted : user_pref("CT2475029.FirstTimeFF3", true); Deleted : user_pref("CT2475029.FixPageNotFoundErrors", true); Deleted : user_pref("CT2475029.GroupingLastCheckTime", "Fri Sep 02 2011 10:56:39 GMT-0300 (Hora oficial do Bra[...] Deleted : user_pref("CT2475029.GroupingLastErrorCode", ""); Deleted : user_pref("CT2475029.GroupingLastResponse", true); Deleted : user_pref("CT2475029.GroupingLastServerUpdateTime", "129594308200000000"); Deleted : user_pref("CT2475029.GroupingServerCheckInterval", 1440); Deleted : user_pref("CT2475029.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Deleted : user_pref("CT2475029.HasUserGlobalKeys", true); Deleted : user_pref("CT2475029.HomePageProtectorEnabled", false); Deleted : user_pref("CT2475029.Initialize", true); Deleted : user_pref("CT2475029.InitializeCommonPrefs", true); Deleted : user_pref("CT2475029.InstallationAndCookieDataSentCount", 3); Deleted : user_pref("CT2475029.InstallationId", "MyAshampoo.exe"); Deleted : user_pref("CT2475029.InstallationType", "ConduitIntegration"); Deleted : user_pref("CT2475029.InstalledDate", "Fri Mar 11 2011 23:34:23 GMT-0300 (Hora oficial do Brasil)"); Deleted : user_pref("CT2475029.InvalidateCache", false); Deleted : user_pref("CT2475029.IsAlertDBUpdated", true); Deleted : user_pref("CT2475029.IsGrouping", true); Deleted : user_pref("CT2475029.IsMulticommunity", true); Deleted : user_pref("CT2475029.IsOpenThankYouPage", true); Deleted : user_pref("CT2475029.IsOpenUninstallPage", true); Deleted : user_pref("CT2475029.LanguagePackLastCheckTime", "Fri Sep 02 2011 10:56:41 GMT-0300 (Hora oficial do[...] Deleted : user_pref("CT2475029.LanguagePackReloadIntervalMM", 1440); Deleted : user_pref("CT2475029.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Deleted : user_pref("CT2475029.LastLogin_3.2.5.2", "Sat Apr 09 2011 09:36:39 GMT-0300 (Hora oficial do Brasil)[...] Deleted : user_pref("CT2475029.LastLogin_3.3.3.2", "Mon Aug 15 2011 12:08:46 GMT-0300 (Hora oficial do Brasil)[...] Deleted : user_pref("CT2475029.LastLogin_3.6.0.10", "Fri Sep 02 2011 17:54:46 GMT-0300 (Hora oficial do Brasil[...] Deleted : user_pref("CT2475029.LatestVersion", "3.6.0.10"); Deleted : user_pref("CT2475029.Locale", "en"); Deleted : user_pref("CT2475029.MCDetectTooltipHeight", "83"); Deleted : user_pref("CT2475029.MCDetectTooltipShow", true); Deleted : user_pref("CT2475029.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Deleted : user_pref("CT2475029.MCDetectTooltipWidth", "295"); Deleted : user_pref("CT2475029.MyStuffEnabledAtInstallation", true); Deleted : user_pref("CT2475029.RadioIsPodcast", false); Deleted : user_pref("CT2475029.RadioLastCheckTime", "Fri Sep 02 2011 10:56:40 GMT-0300 (Hora oficial do Brasil[...] Deleted : user_pref("CT2475029.RadioLastUpdateIPServer", "3"); Deleted : user_pref("CT2475029.RadioLastUpdateServer", "129054397178370000"); Deleted : user_pref("CT2475029.RadioMediaID", "13098944"); Deleted : user_pref("CT2475029.RadioMediaType", "Media Player"); Deleted : user_pref("CT2475029.RadioMenuSelectedID", "EBRadioMenu_CT247502913098944"); Deleted : user_pref("CT2475029.RadioShrinkedFromSetup", false); Deleted : user_pref("CT2475029.RadioStationName", "Mellesleg%20-%20Rapp"); Deleted : user_pref("CT2475029.RadioStationURL", "hxxp://195.228.254.168:8060/"); Deleted : user_pref("CT2475029.SavedHomepage", "hxxp://www.ccvteam.com/forum/"); Deleted : user_pref("CT2475029.SearchBoxWidth", 150); Deleted : user_pref("CT2475029.SearchEngineBeforeUnload", "Ask.com"); Deleted : user_pref("CT2475029.SearchFromAddressBarIsInit", true); Deleted : user_pref("CT2475029.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT247[...] Deleted : user_pref("CT2475029.SearchInNewTabEnabled", true); Deleted : user_pref("CT2475029.SearchInNewTabIntervalMM", 1440); Deleted : user_pref("CT2475029.SearchInNewTabLastCheckTime", "Fri Sep 02 2011 10:56:39 GMT-0300 (Hora oficial [...] Deleted : user_pref("CT2475029.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Deleted : user_pref("CT2475029.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Deleted : user_pref("CT2475029.SearchProtectorEnabled", false); Deleted : user_pref("CT2475029.SearchProtectorToolbarDisabled", true); Deleted : user_pref("CT2475029.ServiceMapLastCheckTime", "Fri Sep 02 2011 10:56:40 GMT-0300 (Hora oficial do B[...] Deleted : user_pref("CT2475029.SettingsLastCheckTime", "Fri Sep 02 2011 19:58:21 GMT-0300 (Hora oficial do Bra[...] Deleted : user_pref("CT2475029.SettingsLastUpdate", "1314946420"); Deleted : user_pref("CT2475029.ThirdPartyComponentsInterval", 504); Deleted : user_pref("CT2475029.ThirdPartyComponentsLastCheck", "Sun Aug 28 2011 10:47:55 GMT-0300 (Hora oficia[...] Deleted : user_pref("CT2475029.ThirdPartyComponentsLastUpdate", "1312887586"); Deleted : user_pref("CT2475029.ToolbarDisabled", true); Deleted : user_pref("CT2475029.ToolbarShrinkedFromSetup", false); Deleted : user_pref("CT2475029.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2475029"); Deleted : user_pref("CT2475029.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Deleted : user_pref("CT2475029.UserID", "UN88619375903553255"); Deleted : user_pref("CT2475029.ValidationData_Toolbar", 2); Deleted : user_pref("CT2475029.WeatherNetwork", ""); Deleted : user_pref("CT2475029.WeatherPollDate", "Fri Sep 02 2011 19:59:41 GMT-0300 (Hora oficial do Brasil)")[...] Deleted : user_pref("CT2475029.WeatherUnit", "C"); Deleted : user_pref("CT2475029.alertChannelId", "868510"); Deleted : user_pref("CT2475029.backendstorage._fb_dailyactivity", "31333032343535393837373635"); Deleted : user_pref("CT2475029.backendstorage._fb_lifetimesent", "54525545"); Deleted : user_pref("CT2475029.backendstorage.facebook_ctid_connect_send", "73656E646564"); Deleted : user_pref("CT2475029.backendstorage.fb_dailyactivity", "31333033373635343932313939"); Deleted : user_pref("CT2475029.backendstorage.fb_lifetimesent", "54525545"); Deleted : user_pref("CT2475029.components.1000034", true); Deleted : user_pref("CT2475029.components.1000234", true); Deleted : user_pref("CT2475029.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Deleted : user_pref("CT2475029.globalFirstTimeInfoLastCheckTime", "Fri Sep 02 2011 17:54:49 GMT-0300 (Hora ofi[...] Deleted : user_pref("CT2475029.homepageProtectorEnableByLogin", true); Deleted : user_pref("CT2475029.initDone", true); Deleted : user_pref("CT2475029.isAppTrackingManagerOn", true); Deleted : user_pref("CT2475029.isFirstRadioInstallation", false); Deleted : user_pref("CT2475029.myStuffEnabled", true); Deleted : user_pref("CT2475029.myStuffPublihserMinWidth", 400); Deleted : user_pref("CT2475029.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Deleted : user_pref("CT2475029.myStuffServiceIntervalMM", 1440); Deleted : user_pref("CT2475029.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Deleted : user_pref("CT2475029.oldAppsList", "200,129053524177369346,129053524177525597,111,129584873345514033[...] Deleted : user_pref("CT2475029.searchProtectorDialogDelayInSec", 10); Deleted : user_pref("CT2475029.searchProtectorEnableByLogin", true); Deleted : user_pref("CT2475029.testingCtid", ""); Deleted : user_pref("CT2475029.toolbarAppMetaDataLastCheckTime", "Fri Sep 02 2011 10:56:41 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.toolbarContextMenuLastCheckTime", "Mon Aug 29 2011 19:32:22 GMT-0300 (Hora ofic[...] Deleted : user_pref("CT2475029.usagesFlag", 2); Deleted : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2475029,CT2247187,CT1098640"); Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2304157&Search[...] Deleted : user_pref("CommunityToolbar.ConduitSearchList", "XfireXO Customized Web Search"); Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2324177/CT2324177[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/5747/5719/BR", "\"0\""); Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/644679/640541/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/700614/696475/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/720205/716065/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/868510/864310/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874426/870225/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874430/870228/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874431/870229/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874435/870233/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874437/870235/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874438/870236/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874439/870237/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874440/870238/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874441/870239/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874443/870241/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/BR", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT1098640", [...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2247187", [...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2304157", [...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2324177", [...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", [...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2878731", [...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT1098640",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2247187",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2304157",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2324177",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2475029",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2878731",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/20[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT1098640&octid=[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2247187&octid=[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2304157&octid=[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2324177&octid=[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2475029&octid=[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2878731&octid=[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT1098640/CT1098640[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2247187/CT2247187[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2304157/CT2304157[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2324177/CT2324177[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2475029/CT2475029[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equaliz[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimiz[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gi[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gi[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/maxi.gif",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/minimize.g[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/play.gif",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/play_mini.[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/stop.gif",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/stopped.GI[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/vol.gif", [...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/equalizer_de[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/minimize.gif[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/play.gif", "[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/stop.gif", "[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Poppy/vol.gif", "\[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/equalize[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/minimize[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/play.gif[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/stop.gif[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/vol.gif"[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=pt", "\"c3c[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"059d4725a5ba97b3bb9b[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"60fab9e7a0fb88a67cb[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml", "\"8fb32822fe16bfe8574[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"6dffbbf3249b308fac1[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/21817319.xml", "\"534cbd3b554fa659e87[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"b1e096e882a1a25110c[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"8ba53819612e914cb7a[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"3b81d79ab7ee921001c7f[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"74e433e4aba6f3b6a8e90[...] Deleted : user_pref("CommunityToolbar.EngineOwner", ""); Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{f8e9011a-4c40-4940-9480-a8ac729c8658}"); Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "ccv_team"); Deleted : user_pref("CommunityToolbar.IsEngineShown", true); Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\marilaine.marilaine-Mega\\AppData\\[...] Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.8.1.0"); Deleted : user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.labpixies.com/campaigns/tv/tv.html", [...] Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://virusscan.ashampoo.com/", "580x484"); Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2324177"); Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{f8e9011a-4c40-4940-9480-a8ac729c8658}"); Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "ccv_team"); Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://websearch.ask.com/redirect?client[...] Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2324177,CT2475029,CT1098640,CT2247187,CT2304157"); Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2324177,CT2475029,CT1098640,CT2247187,CT2304157"); Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2304157"); Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Wed Jul 13 2011 22:37:39 GMT-03[...] Deleted : user_pref("CommunityToolbar.alert.alertEnabled", true); Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Jul 03 2011 10:38:39 GMT-0300 (Hora [...] Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Deleted : user_pref("CommunityToolbar.alert.locale", "en"); Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Aug 16 2011 13:18:32 GMT-0300 (Hora ofic[...] Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611"); Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false); Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Deleted : user_pref("CommunityToolbar.alert.userId", "d5d05cff-5486-488a-803f-88df484756b0"); Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Oct 08 2011 11:59:01 GMT-0300 (Hor[...] Deleted : user_pref("CommunityToolbar.globalUserId", "59ae5db3-7693-4c72-9eed-4b882dd25faf"); Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2304157"); Deleted : user_pref("CommunityToolbar.killedEngine", true); Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Dec 25 2011 22:24:5[...] Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", true); Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440); Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Wed Dec 28 2011 14:20:09 GMT-020[...] Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com"); Deleted : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true); Deleted : user_pref("CommunityToolbar.notifications.locale", "en"); Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Dec 28 2011 14:20:01 GMT-0200"); Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com"); Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false); Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); Deleted : user_pref("CommunityToolbar.notifications.userId", "fd1dd1fc-4231-4564-a1a1-ad96272537c1"); Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://mystart.incredimail.com/mb59?u=92823115015413[...] Deleted : user_pref("CommunityToolbar.originalSearchEngine", "Google"); Deleted : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300 [...] Deleted : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300[...] Deleted : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300[...] Deleted : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300[...] Deleted : user_pref("CommunityToolbar.twitter.user_21817319.LastCheckTime", "Sat Oct 08 2011 18:25:46 GMT-0300[...] Deleted : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300[...] Deleted : user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300[...] Deleted : user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300 ([...] Deleted : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Fri Sep 02 2011 20:55:42 GMT-0300 ([...] Deleted : user_pref("CommunityToolbar.undefined", ""); Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com"); Deleted : user_pref("browser.search.defaultengine", "Ask.com"); Deleted : user_pref("browser.search.defaultenginename", "Ask.com"); Deleted : user_pref("browser.search.defaultthis.engineName", "XfireXO Customized Web Search"); Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2304157&Sea[...] Deleted : user_pref("browser.search.order.1", "Ask.com"); Deleted : user_pref("extensions.BabylonToolbar.admin", false); Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar.babTrack", "affID=101365"); Deleted : user_pref("extensions.BabylonToolbar.bbDpng", 26); Deleted : user_pref("extensions.BabylonToolbar.dfltSrch", false); Deleted : user_pref("extensions.BabylonToolbar.hmpg", false); Deleted : user_pref("extensions.BabylonToolbar.id", "128c0892000000000000002511b32bf6"); Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15354"); Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar.lastDP", 26); Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1717:58:45"); Deleted : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "9.0"); Deleted : user_pref("extensions.BabylonToolbar.newTab", true); Deleted : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb"); Deleted : user_pref("extensions.BabylonToolbar.noFFXTlbr", false); Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar.propectorlck", 66166120); Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar.ptch_0717", true); Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "base"); Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1717:58:45"); Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar_i.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=101365"); Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "128c0892000000000000002511b32bf6"); Deleted : user_pref("extensions.BabylonToolbar_i.id", "128c0892000000000000002511b32bf6"); Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15354"); Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar_i.newTab", false); Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "base"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1717:58:45"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.asktb.abar-war-timeout", "4000"); Deleted : user_pref("extensions.asktb.autofill-competitor-query-enabled", true); Deleted : user_pref("extensions.asktb.autofill-text-highlight-enabled", true); Deleted : user_pref("extensions.asktb.cbid", "VY"); Deleted : user_pref("extensions.asktb.config-updated", true); Deleted : user_pref("extensions.asktb.crumb", "2010.11.14+12.54.40-toolbar001iad-BR-UmlvIEdyYW5kZSxCcmF6aWw%3D[...] Deleted : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://br.ask.com/web?q={query}&qsrc={qsrc}&[...] Deleted : user_pref("extensions.asktb.displaybehavior", ""); Deleted : user_pref("extensions.asktb.displaytext", ""); Deleted : user_pref("extensions.asktb.dtid", "YYYYYYYYBR"); Deleted : user_pref("extensions.asktb.dyn-weather-do-locid-lookup-weatherWidget", true); Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.mywebsearch.com/mywebsearch/GGm[...] Deleted : user_pref("extensions.asktb.fresh-install", false); Deleted : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com[...] Deleted : user_pref("extensions.asktb.l", "dis"); Deleted : user_pref("extensions.asktb.last-config-req", "1318029967317"); Deleted : user_pref("extensions.asktb.last-search-timestamp", "1311970320012"); Deleted : user_pref("extensions.asktb.last-v", "3.12.2.100006"); Deleted : user_pref("extensions.asktb.locale", "pt_BR"); Deleted : user_pref("extensions.asktb.lstation", ""); Deleted : user_pref("extensions.asktb.o", "14782"); Deleted : user_pref("extensions.asktb.options-lang", "pt"); Deleted : user_pref("extensions.asktb.options-locale", "UK"); Deleted : user_pref("extensions.asktb.overlay-reloaded-using-restart", true); Deleted : user_pref("extensions.asktb.pstate", ""); Deleted : user_pref("extensions.asktb.qsrc", "2871"); Deleted : user_pref("extensions.asktb.r", "3"); Deleted : user_pref("extensions.asktb.search-history-queries", "orkut||translema||E||Foto Extra Online E[...] Deleted : user_pref("extensions.asktb.search-suggestions-enabled", true); Deleted : user_pref("extensions.asktb.silent-upgrade", true); Deleted : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", true); Deleted : user_pref("extensions.asktb.socialmini-first", true); Deleted : user_pref("extensions.asktb.socialmini-interval", "1200000"); Deleted : user_pref("extensions.asktb.socialmini-max-char-ticker", "33"); Deleted : user_pref("extensions.asktb.socialmini-max-items", "30"); Deleted : user_pref("extensions.asktb.socialmini-native-on", true); Deleted : user_pref("extensions.asktb.socialmini-speed", "5000"); Deleted : user_pref("extensions.asktb.socialmini-transition-first-open", false); Deleted : user_pref("extensions.asktb.volume", ""); Deleted : user_pref("extensions.enabledAddons", "m3ffxtbr@mywebsearch.com:1.1,{33e0daa6-3af3-d8b5-6752-10e949c[...] Deleted : user_pref("extensions.enabledItems", "toolbar@ask.com:3.11.3.15590,firebug@software.joehewitt.com:1.[...] Deleted : user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea[...] Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true); Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&t[...] Deleted : user_pref("keyword.URL", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZNxmk936YYBR&ptn[...] -\\ Google Chrome v [unable to get version] File : C:\Users\marilaine.marilaine-Mega\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted : "keyword": "basicscan.com", Deleted : "name": "BasicScan", Deleted : "search_url": "hxxp://www.basicscan.com/?tmp=redir_bho_bing&dist=0&prt=BscscnPB&keywords={sear[...] Deleted : "host_referral_list": [ 2, [ "hxxp://adlsoft.net/", [ "hxxp://adlsoft.net/", 10.11656727241656[...] Deleted : "name": "My Web Search Plugin Stub", Deleted : "path": "C:\\Program Files\\MyWebSearch\\bar\\2.bin\\NPMyWebS.dll", Deleted : "path": "C:\\Users\\marilaine.marilaine-Mega\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\[...] Deleted : "name": "My Web Search Plugin Stub" ************************* AdwCleaner[R1].txt - [92225 octets] - [26/01/2012 17:12:26] AdwCleaner[R2].txt - [91791 octets] - [26/01/2012 18:06:59] AdwCleaner[R3].txt - [91852 octets] - [26/01/2012 18:07:15] AdwCleaner[s1].txt - [93909 octets] - [26/01/2012 18:07:26] ************************* Temporary folder : : 2 folder(s) and 0 file(s) deleted ########## EOF - C:\AdwCleaner[s1].txt - [94126 octets] ########## Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Janeiro 26, 2012 Boa Noite! SmasH |- Nunca vi uma máquina tão afetada por adwares e toolbars maliciosas como esta. O que houve? rsr... |- O comprometimento é tão vasto,que teremos que repetir alguns procedimentos. |- Deixarei a montagem do script do ComboFix,para mais adiante. ///°°°/// |- Baixe: < RogueKiller > ( ... par tigzy ) |- Salve-o no desktop! |- Feche aplicativos que estejam abertos! |- Execute a ferramenta,escolhendo a opção ( 1 ) Recherche ou Scan <- Confirme! |- Ps: Para Windows Vista ou 7,execute-o como administrador. |- Poste o relatório: RKreport[1].txt ///°°°/// |- Baixe: < GabKiller > ( ... par 2011N2 ) |- Salve-o no desktop! |- Feche pastas que estejam abertas e execute a ferramenta. |- Para Windows Vista ou 7,clique direito e execute como administrador. |- Escolha a opção 1. Recherche -> Aperte Enter! |- Aguarde a conclusão e poste o relatório: Rapport de recherche de GabKiller |- Para sair,aperte a opção "4. Quitter" -> Enter! ///°°°/// |- Execute,novamente,o Malwarebytes em seu escaneamento COMPLETO. |- Poste o relatório! Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
SmasH 0 Denunciar post Postado Janeiro 26, 2012 Até me assustei depois do que você falou, tanto malware assim? kkkkkkkk Log do RogueKiller RogueKiller V7.0.0 [01/26/2012] by Tigzy mail: tigzyRK<at>gmail<dot>com Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/ Blog: http://tigzyrk.blogspot.com Operating System: Windows 7 (6.1.7600 ) 32 bits version Started in : Normal mode User: marilaine [Admin rights] Mode: Scan -- Date : 01/26/2012 19:04:11 ¤¤¤ Bad processes: 0 ¤¤¤ ¤¤¤ Registry Entries: 4 ¤¤¤ [HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> FOUND [HJ] HKLM\[...]\System : EnableLUA (0) -> FOUND [HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND ¤¤¤ Particular Files / Folders: ¤¤¤ ¤¤¤ Driver: [LOADED] ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ 127.0.0.1 localhost ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: +++++ --- User --- [MBR] c4622ebc8a772cdce79e25490246e9d8 [bSP] 4025c6ef95d8c128147d0261651ea7a0 : Windows 7 MBR Code Partition table: 0 - [ACTIVE] NTFS [VISIBLE] Offset (sectors): 2048 | Size: 320070 Mo User = LL1 ... OK! User = LL2 ... OK! Finished : << RKreport[1].txt >> RKreport[1].txt Esse programa acima eu precisarei clicar em delete?? Log do GabKiller: ====================================== Informations ====================================== Rapport de recherche de GabKiller Outil développé par 2011N2 Contact : lot12@hotmail.fr Site : http://2011n2.forumgratuit.fr/ Mis à jour le : 04/08/2011 à 13h | 1.45 par 2011N2 Début du scan de recherche : 19:07:02 Nom du PC : MARILAINE-MEGA Système d'exploitation : Windows 7 Starter Internet Explorer : 8.0.7600.16385 Mozilla Firefox : 9.0.1 (pt-BR) Mozilla Firefox : version 5 Mozilla Firefox : version 6 ############################# Éléments infectieux ############################# ============================ Section HKLM ============================ Présent : HKLM\Software\Classes\WlcUI.DialerWindow Présent : HKLM\Software\Classes\WlcUI.DialerWindow.1 Présent : HKLM\Software\Classes\WlcUI.PhoneNumber Présent : HKLM\Software\Classes\WlcUI.PhoneNumber.1 Présent : HKLM\Software\Classes\WlcUI.DialerWindow Présent : HKLM\Software\Classes\WlcUI.DialerWindow.1 Présent : HKLM\Software\Classes\WlcUI.PhoneNumber Présent : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar ============================ Section HKCU ============================ ============================ Section HKCR ============================ Présent : HKCR\bittorrent ========================== Dossiers/Fichiers ========================== ================================================================================================ Fin du scan de recherche : 19:07:29 Copyright © 2011. Tous droits réservés. ############### EOF ############### Postarei o LOG do Malwarebits quando acabar a verificação. Abraços e obrigado por estar me ajudando... Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Janeiro 26, 2012 Boa Noite! SmasH |- Aguardarei a conclusão do scan do Malwarebytes,antes de qualquer iniciativa. Recomendo,apenas,que não faça downloads de programas ou ferramentas que não tenha lhe recomendado. Esse programa acima eu precisarei clicar em delete?? |- Não agora! Lembre-se que,ainda,não executei o script do ComboFix. Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
SmasH 0 Denunciar post Postado Janeiro 26, 2012 Ta aí o log do malwarebits Malwarebytes Anti-Malware 1.60.0.1800 www.malwarebytes.org Versão da Base de Dados: v2012.01.26.05 Windows 7 x86 NTFS Internet Explorer 8.0.7600.16385 marilaine :: MARILAINE-MEGA [administrador] 26/01/2012 19:15:03 mbam-log-2012-01-26 (20-42-34).txt Tipo de Verificação: Verificação Completa Opções de verificações ativadas: Memória | Inicialização | Registro | Sistema de arquivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM Opções de verificação desativadas: P2P Objetos escaneados: 409682 Tempo decorrido: 1 hora(s), 24 minuto(s), 41 segundo(s) Processos de Memória Detectados: 0 (Não foram detectados ítens maliciosos) Módulos de Memória Detectados: 0 (Não foram detectados ítens maliciosos) Chaves de Registro Detectadas: 0 (Não foram detectados ítens maliciosos) Valores de Registro Detectadas: 1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\USERS\MARILAINE.MARILAINE-MEGA\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\MATRIX HACKER\X1NJECT.EXE (HackTool.Agent) -> Data: 1 -> Nenhuma ação foi feita. Itens de Dados no Registro Detectadas: 0 (Não foram detectados ítens maliciosos) Pastas Detectadas: 0 (Não foram detectados ítens maliciosos) Arquivos Detectados: 9 C:\Program Files\Ad-Remover\Quarantine\C\Program Files\Windows Live\Messenger\Msimg32.dll.vir (PUP.FunWebProducts) -> Nenhuma ação foi feita. C:\Program Files\Ad-Remover\Quarantine\C\Program Files\Windows Live\Messenger\Riched20.dll.vir (PUP.FunWebProducts) -> Nenhuma ação foi feita. C:\GitzWC\ISTeam.dll (Malware.Gen) -> Nenhuma ação foi feita. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Matrix Hacker\X1nject.exe (HackTool.Agent) -> Nenhuma ação foi feita. C:\Users\marilaine.marilaine-Mega\Downloads\SoftonicDownloader_para_nolimits-rollercoaster.exe (PUP.BundleOffer.Downloader.S) -> Nenhuma ação foi feita. C:\Users\marilaine.marilaine-Mega\Downloads\SoftonicDownloader_para_rigs-of-rods.exe (PUP.BundleOffer.Downloader.S) -> Nenhuma ação foi feita. C:\Users\marilaine.marilaine-Mega\Downloads\Hack para SABR\PerX.exe (HackTool.Agent) -> Nenhuma ação foi feita. C:\Users\marilaine.marilaine-Mega\Downloads\Hack Sudden Attack br\Hack Sudden Attack br\PerX.exe (HackTool.Agent) -> Nenhuma ação foi feita. C:\Users\marilaine.marilaine-Mega\Downloads\Hacker+NoisNaNet+Presente+de+Natal\Hacker NoisNaNet Presente de Natal\PerX.exe (HackTool.Agent) -> Nenhuma ação foi feita. (fim) Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Janeiro 26, 2012 Boa Noite! SmasH |- Lance,novamente,GabKiller e escolha a opção "Suppression". |- Poste o relatório! ///°°°/// |- Execute,novamente,o Malwarebytes e mande deletar o que encontrar. Somente o escaneamento completo pode fazê-lo e já lhe passei instruções para esse modo de ação. Poste o relatório! |- Não se preocupe,estarei lhe aguardando e praticamente online com vossa pessoa! Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
SmasH 0 Denunciar post Postado Janeiro 26, 2012 Log GabKiller: =========== Informations =========== Mis à jour le : 07/08/2011 à 16h12 | 1.45 par 2011N2 Rapport de suppression de GabKiller par 2011N2 Contact : lot12@hotmail.fr Site : http://2011n2.forumgratuit.fr/ Début du nettoyage : 21:05:11 ###################################### Clés supprimées #################################### ============================ Section HKLM ============================ supprimé !! HKLM\Software\Classes\WlcUI.DialerWindow supprimé !! HKLM\Software\Classes\WlcUI.DialerWindow.1 supprimé !! HKLM\Software\Classes\WlcUI.PhoneNumber supprimé !! HKLM\Software\Classes\WlcUI.PhoneNumber.1 supprimé !! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar ============================ Section HKCU ============================ ============================ Section HKCR ============================ supprimé !! HKCR\bittorrent ========================== Dossiers/Fichiers ======================== =================================== Fin du nettoyage : 21:05:19 Copyright © 2011. Tous droits réservés. ======== EOF ======== Log do Malwarebits novamente: Malwarebytes Anti-Malware 1.60.0.1800 www.malwarebytes.org Versão da Base de Dados: v2012.01.26.05 Windows 7 x86 NTFS Internet Explorer 8.0.7600.16385 marilaine :: MARILAINE-MEGA [administrador] 26/01/2012 19:15:03 mbam-log-2012-01-26 (19-15-03).txt Tipo de Verificação: Verificação Completa Opções de verificações ativadas: Memória | Inicialização | Registro | Sistema de arquivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM Opções de verificação desativadas: P2P Objetos escaneados: 409682 Tempo decorrido: 1 hora(s), 24 minuto(s), 41 segundo(s) Processos de Memória Detectados: 0 (Não foram detectados ítens maliciosos) Módulos de Memória Detectados: 0 (Não foram detectados ítens maliciosos) Chaves de Registro Detectadas: 0 (Não foram detectados ítens maliciosos) Valores de Registro Detectadas: 1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\USERS\MARILAINE.MARILAINE-MEGA\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\MATRIX HACKER\X1NJECT.EXE (HackTool.Agent) -> Data: 1 -> Enviado para a Quarentena e deletado com sucesso. Itens de Dados no Registro Detectadas: 0 (Não foram detectados ítens maliciosos) Pastas Detectadas: 0 (Não foram detectados ítens maliciosos) Arquivos Detectados: 9 C:\Program Files\Ad-Remover\Quarantine\C\Program Files\Windows Live\Messenger\Msimg32.dll.vir (PUP.FunWebProducts) -> Enviado para a Quarentena e deletado com sucesso. C:\Program Files\Ad-Remover\Quarantine\C\Program Files\Windows Live\Messenger\Riched20.dll.vir (PUP.FunWebProducts) -> Enviado para a Quarentena e deletado com sucesso. C:\GitzWC\ISTeam.dll (Malware.Gen) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Matrix Hacker\X1nject.exe (HackTool.Agent) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\Downloads\SoftonicDownloader_para_nolimits-rollercoaster.exe (PUP.BundleOffer.Downloader.S) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\Downloads\SoftonicDownloader_para_rigs-of-rods.exe (PUP.BundleOffer.Downloader.S) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\Downloads\Hack para SABR\PerX.exe (HackTool.Agent) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\Downloads\Hack Sudden Attack br\Hack Sudden Attack br\PerX.exe (HackTool.Agent) -> Enviado para a Quarentena e deletado com sucesso. C:\Users\marilaine.marilaine-Mega\Downloads\Hacker+NoisNaNet+Presente+de+Natal\Hacker NoisNaNet Presente de Natal\PerX.exe (HackTool.Agent) -> Enviado para a Quarentena e deletado com sucesso. (fim) Nem estou com tanta pressa, e agradeço novamente pela ajuda. Já sinto muita diferença na velocidade da minha internet já faz + de 3 horas que a internet não fica lenta nem por 1 segundo, espero que continue assim. hehe Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Janeiro 26, 2012 Boa Noite! SmasH Nem estou com tanta pressa, e agradeço novamente pela ajuda. Já sinto muita diferença na velocidade da minha internet já faz + de 3 horas que a internet não fica lenta nem por 1 segundo, espero que continue assim. hehe |- Além dos malwares já citados,dialers estavam comprometendo sua conecção. Residia,também,uma CoolWeb,que no passado,empregávamos a ferramenta CWShereder para a limpeza. |- Amigo! Não tem como escapar da verificação por ZHPDiag,para perfeito diagnóstico e Fix. ///°°°/// |- Baixe: < > < > ( ...par Nicolas Coolman ) |- Estando na página,clique em: < > |- Salve-o em Arquivos de programas e descompacte-o aí mesmo! |- Desabilite seu antivírus e execute "ZHPDiag2.exe". < > |- Ps: Confirme todos os passos,ao instalar ZHPDiag. |- Clique em |-- Termine. |- Abra a ferramenta,clicando no ícone do pergaminho. < > |- Atualize-a,clicando na seta verde,no topo à direita. |- A atualização estará completa,ao termos a mensagem: |- Habilite todas as opções de diagnóstico,clicando em ( Ícone da chave de fenda ) |- Clique em All. |- Dê início ao diagnóstico ( Diag ),clicando no ícone da lupa. |- Ao concluir,clique no ícone da máquina fotográfica ou "Save Report",para dispormos do relatório. |- Salve-o em um local conveniente! |- Caso queira salvar o log no Bloco de Notas,clique no ícone da máquina fotográfica e cole-o no BN. |- Poste-o,na sua resposta: ZHPDiag.txt |- Tendo problemas ao postar esse relatório,acesse < > |- Maiores informações: |Link| > Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
SmasH 0 Denunciar post Postado Janeiro 27, 2012 O programa aki está travando onde diz "Working". Ele trava completamente e não sai dessa tela. Na janelinha diz "Não Respondendo" Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Janeiro 27, 2012 O programa aki está travando onde diz "Working". Ele trava completamente e não sai dessa tela. Na janelinha diz "Não Respondendo" Olá! |- Executou o arquivo como administrador? Veja se funciona ao limpar previamente,a máquina com o CCleaner. |- Desabilitou o Antivírus? Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
SmasH 0 Denunciar post Postado Janeiro 27, 2012 Fechei o Firefox e funcionou perfeitamente o programa. Aqui o link do relatório: http://cjoint.com/?BABdcoZ0QoN Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Janeiro 27, 2012 Bom Dia! SmasH |- Estabeleça um Ponto de Restauração,pois teremos alguma mudança de vulto. Se bem que no script existe instrução para o seu estabelecimento. ///°°°/// |- Feche programas/pastas que estejam abertas. |- Dê um duplo clique em ZHPFix. |- Clique no menu,H < > P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (...) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (.not file.)R3 - URLSearchHook: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\MyAshampoo\prxtbMyA0.dll R3 - URLSearchHook: Softonic ES Toolbar - {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\Softonic_ES\prxtbSof2.dll R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\XfireXO\prxtbXfir.dll R3 - URLSearchHook: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\MyAshampoo\prxtbMyA0.dll R3 - URLSearchHook: Softonic ES Toolbar - {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\Softonic_ES\prxtbSof2.dll R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\XfireXO\prxtbXfir.dll R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1:9421 O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Orphean Key O2 - BHO: XfireXO - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\XfireXO\prxtbXfir.dll O2 - BHO: MyAshampoo - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\MyAshampoo\prxtbMyA0.dll O2 - BHO: Softonic ES - {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_ES\prxtbSof2.dll O3 - Toolbar: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\MyAshampoo\prxtbMyA0.dll O3 - Toolbar: Softonic ES Toolbar - {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_ES\prxtbSof2.dll O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\XfireXO\prxtbXfir.dll O23 - Service: (gpsvc) - Orphean Key O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Norton Security Scan for marilaine.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\RMSchedule.job [MD5.00000000000000000000000000000000] [APT] [DealPlyUpdate] (...) -- C:\Program Files\DealPly\DealPlyUpdate.exe (.not file.) [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.FAF03D4847BD5527DFAE990EF1C7CEC6] [APT] [Norton Security Scan for marilaine] (.Symantec Corporation.) -- C:\Program Files\NORTON~2\Engine\351~1.8\Nss.exe [MD5.00000000000000000000000000000000] [APT] [RunAsStdUser Task] (...) -- C:\Users\marilaine\AppData\Local\ClickPotatoLiteSA\bin\12.0.15.0\ClickPotatoLiteSA.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{212022DB-EFF4-485B-8A25-AC3B1C7D3317}] (...) -- C:\Users\marilaine\Downloads\BAIXAKI - GTA SA BR.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{5201E7F3-5E9B-4D4D-A11B-BD5E88F1F20B}] (...) -- C:\Users\marilaine\Downloads\Combatarms_VER_2.1010.01.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{6546F708-C958-4AE3-A18F-BC19C5D35D11}] (...) -- D:\Install.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{E8703BEC-750F-44E1-A2DC-BF7B57DBB29F}] (...) -- C:\Program Files\Ahead\nero\uninstall\UNNERO.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{F145FF97-0E4C-46C6-B961-E826100538C3}] (...) -- C:\Users\marilaine\Downloads\x1nject.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{F4C82400-9F22-495B-92E6-9CFBA84033A6}] (...) -- C:\Users\marilaine\Downloads\SilkroadOnline_GlobalOfficial_v1_265\SilkroadOnline_GlobalOfficial_v1_265.exe (.not file.) O41 - Driver: (davtizzd) . (. - .) - C:\Windows\system32\drivers\davtizzd.sys (.not file.) O41 - Driver: (MpKsl00ff4c1b) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B9A23BFC-2C92-46D7-9452-09964E1F007D}\MpKsl00ff4c1b.sys (.not file.) O41 - Driver: (MpKsl0133f6fd) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E99A2C2F-ED68-4BFC-9651-4053D481A8D9}\MpKsl0133f6fd.sys (.not file.) O41 - Driver: (MpKsl06270223) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{CDEB7FCC-2102-47E2-B739-EDF8ED6A1903}\MpKsl06270223.sys (.not file.) O41 - Driver: (MpKsl0765b0b0) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9837313B-0D9C-4CDB-854D-79231CE23BA1}\MpKsl0765b0b0.sys (.not file.) O41 - Driver: (MpKsl090ce9d4) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2669F14E-8890-407F-9579-D88B0453D9C7}\MpKsl090ce9d4.sys (.not file.) O41 - Driver: (MpKsl0edbfa8c) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{ABE68900-BF0C-4FF7-8855-D7DE526B1544}\MpKsl0edbfa8c.sys (.not file.) O41 - Driver: (MpKsl106ee7b2) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{96D96419-C094-446E-B6F5-4780017A1166}\MpKsl106ee7b2.sys (.not file.) O41 - Driver: (MpKsl12c1c607) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A4E1403B-B5D5-4CEC-AE4C-7A56020687CF}\MpKsl12c1c607.sys (.not file.) O41 - Driver: (MpKsl13d7f9dd) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D33DAD43-15D6-466D-A722-E745A42133E6}\MpKsl13d7f9dd.sys (.not file.) O41 - Driver: (MpKsl166d2d17) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6B0D0FE3-3098-4ECE-BA1D-5B057978A0AE}\MpKsl166d2d17.sys (.not file.) O41 - Driver: (MpKsl18914510) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7802C00E-6442-473E-AD5D-C35E54C3C28D}\MpKsl18914510.sys (.not file.) O41 - Driver: (MpKsl1c4cba26) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{79FE9AE0-898E-41B1-BFC7-E78F5684881E}\MpKsl1c4cba26.sys (.not file.) O41 - Driver: (MpKsl1dae71a2) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{65229338-BD98-4EBF-A38D-6648F408D432}\MpKsl1dae71a2.sys (.not file.) O41 - Driver: (MpKsl2307f20a) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2DE33328-6D6E-47C4-BA20-AA0546DB916C}\MpKsl2307f20a.sys (.not file.) O41 - Driver: (MpKsl23b93d89) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5F6B8DED-5FBC-45F9-AA05-8CD006B3BAE1}\MpKsl23b93d89.sys (.not file.) O41 - Driver: (MpKsl26427b48) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{473E8586-7BFD-4AC1-9808-FC2449D8DE97}\MpKsl26427b48.sys (.not file.) O41 - Driver: (MpKsl2670c000) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C685B4FC-4E05-4D12-9973-348A06035959}\MpKsl2670c000.sys (.not file.) O41 - Driver: (MpKsl282c6e9e) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{645B7F98-D311-49A7-BF2E-596C07F96614}\MpKsl282c6e9e.sys (.not file.) O41 - Driver: (MpKsl28e3837d) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DB34CECA-F346-41B8-8045-926093C097F6}\MpKsl28e3837d.sys (.not file.) O41 - Driver: (MpKsl2994230a) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{1EFAD213-CBE9-4255-B09D-38BF95C8F30B}\MpKsl2994230a.sys (.not file.) O41 - Driver: (MpKsl2a72d2a5) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6C03F404-2F0D-403B-B25E-4498D3DBDC59}\MpKsl2a72d2a5.sys (.not file.) O41 - Driver: (MpKsl2a7d26a5) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{1AFD82E4-BBD0-4CA7-BA1B-DA934F655BEF}\MpKsl2a7d26a5.sys (.not file.) O41 - Driver: (MpKsl317478f7) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B7A4753E-A8AE-4730-8473-3E223C60CCCA}\MpKsl317478f7.sys (.not file.) O41 - Driver: (MpKsl32c9a9b1) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{40139259-283D-47E2-BD8C-2454A2FE36AA}\MpKsl32c9a9b1.sys (.not file.) O41 - Driver: (MpKsl37474b4a) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A4398DC9-4AD8-42F9-AA9F-3FD243215C6B}\MpKsl37474b4a.sys (.not file.) O41 - Driver: (MpKsl3873fa53) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{40139259-283D-47E2-BD8C-2454A2FE36AA}\MpKsl3873fa53.sys (.not file.) O41 - Driver: (MpKsl397ae880) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D413F188-4FEC-40D7-B18D-76C1742891C9}\MpKsl397ae880.sys (.not file.) O41 - Driver: (MpKsl3ad0b4d5) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C9E7D0C4-40D7-4D13-99AF-4944C0050FC2}\MpKsl3ad0b4d5.sys (.not file.) O41 - Driver: (MpKsl3b087dc5) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E5CC49E8-31D6-4E31-A868-79354832CA28}\MpKsl3b087dc5.sys (.not file.) O41 - Driver: (MpKsl3d6e01f7) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7BF53441-3899-4AA9-9AA4-CFDA1BDC3B7D}\MpKsl3d6e01f7.sys (.not file.) O41 - Driver: (MpKsl40902d48) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{59E8F434-56F8-4222-B758-053E62007478}\MpKsl40902d48.sys (.not file.) O41 - Driver: (MpKsl44a41626) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{817DFA1A-B065-44FD-93FF-C12D23BB8F05}\MpKsl44a41626.sys (.not file.) O41 - Driver: (MpKsl45eff0f3) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C09E4B8C-ED5E-4FAD-B596-B92B2C206BCA}\MpKsl45eff0f3.sys (.not file.) O41 - Driver: (MpKsl477bb251) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{79FE9AE0-898E-41B1-BFC7-E78F5684881E}\MpKsl477bb251.sys (.not file.) O41 - Driver: (MpKsl4858bbcf) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D33DAD43-15D6-466D-A722-E745A42133E6}\MpKsl4858bbcf.sys (.not file.) O41 - Driver: (MpKsl4ab4a193) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E4E0B67B-E1D4-423A-8C45-16BEE295E358}\MpKsl4ab4a193.sys (.not file.) O41 - Driver: (MpKsl4c34edec) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{486126E9-BC2D-4301-96E5-69BE58FD0226}\MpKsl4c34edec.sys (.not file.) O41 - Driver: (MpKsl4c669833) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{CE271109-B908-4DC8-85CD-DCBD264E58BF}\MpKsl4c669833.sys (.not file.) O41 - Driver: (MpKsl4dc0aa17) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E38B7579-62E7-4CC7-A279-2A87E012FDCD}\MpKsl4dc0aa17.sys (.not file.) O41 - Driver: (MpKsl51bfedae) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6AD1218E-C953-4EBE-BF18-065F6DD9E61E}\MpKsl51bfedae.sys (.not file.) O41 - Driver: (MpKsl548d4a23) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{96ACE7AF-6498-4EA1-9C1A-8D3BF95723E7}\MpKsl548d4a23.sys (.not file.) O41 - Driver: (MpKsl5859a9c7) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2206EB36-32A9-4986-A4A5-F6E00EF34EE3}\MpKsl5859a9c7.sys (.not file.) O41 - Driver: (MpKsl5ae5bb6b) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7BF53441-3899-4AA9-9AA4-CFDA1BDC3B7D}\MpKsl5ae5bb6b.sys (.not file.) O41 - Driver: (MpKsl5b9a55bf) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B7A4753E-A8AE-4730-8473-3E223C60CCCA}\MpKsl5b9a55bf.sys (.not file.) O41 - Driver: (MpKsl5ddad0fb) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DA9083CF-F430-450B-BA78-F20928556219}\MpKsl5ddad0fb.sys (.not file.) O41 - Driver: (MpKsl5e3d96e7) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{12E86C09-409A-4A52-A4D5-E59B9D147826}\MpKsl5e3d96e7.sys (.not file.) O41 - Driver: (MpKsl5e6b4dea) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2669F14E-8890-407F-9579-D88B0453D9C7}\MpKsl5e6b4dea.sys (.not file.) O41 - Driver: (MpKsl5eaf972c) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{963F5B68-EF7C-4FC6-91B0-89575A2B861F}\MpKsl5eaf972c.sys (.not file.) O41 - Driver: (MpKsl5ed4f12b) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7BA5AAEC-96E6-4EC6-B8F6-37912F983E0A}\MpKsl5ed4f12b.sys (.not file.) O41 - Driver: (MpKsl612a9c20) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9837313B-0D9C-4CDB-854D-79231CE23BA1}\MpKsl612a9c20.sys (.not file.) O41 - Driver: (MpKsl6602b1bf) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{614B8F03-EA06-4555-8EF3-E78B4F83EFCC}\MpKsl6602b1bf.sys (.not file.) O41 - Driver: (MpKsl66b3f10a) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{CE271109-B908-4DC8-85CD-DCBD264E58BF}\MpKsl66b3f10a.sys (.not file.) O41 - Driver: (MpKsl6b5ecaf7) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5AA3EF4B-75BE-40FD-8C56-A92911274789}\MpKsl6b5ecaf7.sys (.not file.) O41 - Driver: (MpKsl6da32c52) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{58494A36-EEE1-4144-B7A9-7F6FB014DC77}\MpKsl6da32c52.sys (.not file.) O41 - Driver: (MpKsl70291294) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D33DAD43-15D6-466D-A722-E745A42133E6}\MpKsl70291294.sys (.not file.) O41 - Driver: (MpKsl7711ed47) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{12E86C09-409A-4A52-A4D5-E59B9D147826}\MpKsl7711ed47.sys (.not file.) O41 - Driver: (MpKsl79424e96) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2162ED1F-5434-4093-9E1F-40FA74B2C3D4}\MpKsl79424e96.sys (.not file.) O41 - Driver: (MpKsl7c09f11e) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{EDFE20EF-4410-4370-B52B-747B3226C6B8}\MpKsl7c09f11e.sys (.not file.) O41 - Driver: (MpKsl7e7fbc3e) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7BA5AAEC-96E6-4EC6-B8F6-37912F983E0A}\MpKsl7e7fbc3e.sys (.not file.) O41 - Driver: (MpKsl808e8aa0) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{706E7412-FD55-4D7A-AE3F-302636441FA9}\MpKsl808e8aa0.sys (.not file.) O41 - Driver: (MpKsl8152ef58) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E5CC49E8-31D6-4E31-A868-79354832CA28}\MpKsl8152ef58.sys (.not file.) O41 - Driver: (MpKsl826f2048) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6FA8DBFD-8222-4E41-A6F0-3600FF35656F}\MpKsl826f2048.sys (.not file.) O41 - Driver: (MpKsl830eecc2) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{48148279-7BB6-418C-AED0-34DCBB0C56DE}\MpKsl830eecc2.sys (.not file.) O41 - Driver: (MpKsl83f50237) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{76970994-69A3-46D7-9580-ADD5CA24B082}\MpKsl83f50237.sys (.not file.) O41 - Driver: (MpKsl88904493) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2669F14E-8890-407F-9579-D88B0453D9C7}\MpKsl88904493.sys (.not file.) O41 - Driver: (MpKsl8a463019) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{AE806E7C-51F1-4B75-8575-4B16115BFA67}\MpKsl8a463019.sys (.not file.) O41 - Driver: (MpKsl8bb243ad) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C7B4E732-9C58-4E99-B6A4-8D85F39D31B1}\MpKsl8bb243ad.sys (.not file.) O41 - Driver: (MpKsl8ce5cb28) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C5F6B4E2-5E63-40B1-9C5C-07236CD5F37E}\MpKsl8ce5cb28.sys (.not file.) O41 - Driver: (MpKsl8d33fb94) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{338D1203-D2B3-4857-86F6-26BB0BE5E593}\MpKsl8d33fb94.sys (.not file.) O41 - Driver: (MpKsl8e36fe66) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{30C79DF3-C666-41D9-A0F4-B86EF1F1AAFC}\MpKsl8e36fe66.sys (.not file.) O41 - Driver: (MpKsl8f1f5268) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4FC9BB4F-D3BE-46EF-830F-06E546E5F4B2}\MpKsl8f1f5268.sys (.not file.) O41 - Driver: (MpKsl90aa8997) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{56611F99-06B0-4DEC-A5CF-49C05CDBC589}\MpKsl90aa8997.sys (.not file.) O41 - Driver: (MpKsl91c62237) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{642E562B-16A4-4206-A5BF-3B831924E820}\MpKsl91c62237.sys (.not file.) O41 - Driver: (MpKsl933cff2c) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B7492ECA-46AB-419E-9A14-F5BBD7F88B29}\MpKsl933cff2c.sys (.not file.) O41 - Driver: (MpKsl9366eb3e) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{96ACE7AF-6498-4EA1-9C1A-8D3BF95723E7}\MpKsl9366eb3e.sys (.not file.) O41 - Driver: (MpKsl93697895) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6FA8DBFD-8222-4E41-A6F0-3600FF35656F}\MpKsl93697895.sys (.not file.) O41 - Driver: (MpKsl953cffa5) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6595F491-757C-4120-B472-2AFC750542BD}\MpKsl953cffa5.sys (.not file.) O41 - Driver: (MpKsl95539409) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{14F2D2CC-0764-406F-875D-876C93792322}\MpKsl95539409.sys (.not file.) O41 - Driver: (MpKsl95ccb96c) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C0FE9F5D-D3F6-4BB2-8E17-6B3FAD02DC08}\MpKsl95ccb96c.sys (.not file.) O41 - Driver: (MpKsl97f28518) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D413F188-4FEC-40D7-B18D-76C1742891C9}\MpKsl97f28518.sys (.not file.) O41 - Driver: (MpKsl980897f5) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{39DF726E-0767-46FC-A4F7-7A58C1D121FB}\MpKsl980897f5.sys (.not file.) O41 - Driver: (MpKsl9ec16ffc) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{8ADC522D-404B-4BED-A27C-9D1B3A48A78B}\MpKsl9ec16ffc.sys (.not file.) O41 - Driver: (MpKsla0bd84b2) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7BA5AAEC-96E6-4EC6-B8F6-37912F983E0A}\MpKsla0bd84b2.sys (.not file.) O41 - Driver: (MpKsla284e3e0) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{10485A91-F1CC-46D1-9F1E-E6457F471324}\MpKsla284e3e0.sys (.not file.) O41 - Driver: (MpKsla447399d) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{265C65F1-0A77-47C9-AFAD-C51FD832AE0F}\MpKsla447399d.sys (.not file.) O41 - Driver: (MpKsla52648aa) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{52367EF2-8926-4D23-A889-B0BD16338970}\MpKsla52648aa.sys (.not file.) O41 - Driver: (MpKslaaf498f4) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{473E8586-7BFD-4AC1-9808-FC2449D8DE97}\MpKslaaf498f4.sys (.not file.) O41 - Driver: (MpKslae212552) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{706E7412-FD55-4D7A-AE3F-302636441FA9}\MpKslae212552.sys (.not file.) O41 - Driver: (MpKslae2731dd) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{39DF726E-0767-46FC-A4F7-7A58C1D121FB}\MpKslae2731dd.sys (.not file.) O41 - Driver: (MpKslaf0b3a9f) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{951E781B-DF78-4AEA-8AB9-38025032A606}\MpKslaf0b3a9f.sys (.not file.) O41 - Driver: (MpKslb0c77ee1) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7BA5AAEC-96E6-4EC6-B8F6-37912F983E0A}\MpKslb0c77ee1.sys (.not file.) O41 - Driver: (MpKslb1fe9c33) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5A7B4EC0-9519-4754-B80D-9FC9D7AAB7C4}\MpKslb1fe9c33.sys (.not file.) O41 - Driver: (MpKslb27c5944) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{CC21EB9F-F27B-4620-99F4-90264C8DC6D8}\MpKslb27c5944.sys (.not file.) O41 - Driver: (MpKslb3b86d84) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DA259E49-5F48-419E-846E-9B51566B0162}\MpKslb3b86d84.sys (.not file.) O41 - Driver: (MpKslb551fdc8) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{80C3D03F-2826-4B8A-8106-32C672D7BC20}\MpKslb551fdc8.sys (.not file.) O41 - Driver: (MpKslb67cc503) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B7A4753E-A8AE-4730-8473-3E223C60CCCA}\MpKslb67cc503.sys (.not file.) O41 - Driver: (MpKslb8386851) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{40139259-283D-47E2-BD8C-2454A2FE36AA}\MpKslb8386851.sys (.not file.) O41 - Driver: (MpKslb8415549) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{14F2D2CC-0764-406F-875D-876C93792322}\MpKslb8415549.sys (.not file.) O41 - Driver: (MpKslba821d18) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{48148279-7BB6-418C-AED0-34DCBB0C56DE}\MpKslba821d18.sys (.not file.) O41 - Driver: (MpKslbd196803) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{8ADC522D-404B-4BED-A27C-9D1B3A48A78B}\MpKslbd196803.sys (.not file.) O41 - Driver: (MpKslbe27e904) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D8157A4D-ADD8-469F-B7E6-E69614979ADC}\MpKslbe27e904.sys (.not file.) O41 - Driver: (MpKslbe4403d2) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{17C85D5F-72C0-4DD3-900B-4CA2E75205BD}\MpKslbe4403d2.sys (.not file.) O41 - Driver: (MpKslc7a76084) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D33DAD43-15D6-466D-A722-E745A42133E6}\MpKslc7a76084.sys (.not file.) O41 - Driver: (MpKslc7b01bd5) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{12B2B57E-8993-4976-A612-D03B67F922C9}\MpKslc7b01bd5.sys (.not file.) O41 - Driver: (MpKslc7ef1356) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{436E8997-AC40-4B0A-A89B-533BBCB381DF}\MpKslc7ef1356.sys (.not file.) O41 - Driver: (MpKslc973710f) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{84F5741C-C490-4227-BBD1-D6179A118B32}\MpKslc973710f.sys (.not file.) O41 - Driver: (MpKslca33b5cc) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6C03F404-2F0D-403B-B25E-4498D3DBDC59}\MpKslca33b5cc.sys (.not file.) O41 - Driver: (MpKslca79f34b) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2E32E05C-E181-4B6E-9B92-BFF083E42F0A}\MpKslca79f34b.sys (.not file.) O41 - Driver: (MpKslcb1a857b) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{CE271109-B908-4DC8-85CD-DCBD264E58BF}\MpKslcb1a857b.sys (.not file.) O41 - Driver: (MpKslcb411a84) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{231871FF-53D0-4F8F-BA12-571A944843CC}\MpKslcb411a84.sys (.not file.) O41 - Driver: (MpKslcbf991c6) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{33591E17-8C21-4392-AD59-B87BC4ECCDF1}\MpKslcbf991c6.sys (.not file.) O41 - Driver: (MpKslcc925976) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E0885BA3-E69D-47F0-AF24-543717BDDA4D}\MpKslcc925976.sys (.not file.) O41 - Driver: (MpKslcd78fe50) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{CE271109-B908-4DC8-85CD-DCBD264E58BF}\MpKslcd78fe50.sys (.not file.) O41 - Driver: (MpKslcd907521) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{46FFAE96-BFB1-4DBA-9E5D-8ECFD222A2C6}\MpKslcd907521.sys (.not file.) O41 - Driver: (MpKslcf741de5) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{59BA1F00-BD76-4A79-80E3-C2B668AD838A}\MpKslcf741de5.sys (.not file.) O41 - Driver: (MpKsld1501c4b) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D3F227FA-1526-4592-BB5F-BED57C5B1B7A}\MpKsld1501c4b.sys (.not file.) O41 - Driver: (MpKsld43a970d) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{CC21EB9F-F27B-4620-99F4-90264C8DC6D8}\MpKsld43a970d.sys (.not file.) O41 - Driver: (MpKsld4425a6f) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BEEE588C-702C-4ADC-BF25-8A981CCF82A3}\MpKsld4425a6f.sys (.not file.) O41 - Driver: (MpKsld4b14462) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{80E0EC11-C61A-4142-A209-2E20993D3899}\MpKsld4b14462.sys (.not file.) O41 - Driver: (MpKsld4d129ac) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{77B8804B-7B1C-4F43-9B2E-2E452B706844}\MpKsld4d129ac.sys (.not file.) O41 - Driver: (MpKsld520a689) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E5CC49E8-31D6-4E31-A868-79354832CA28}\MpKsld520a689.sys (.not file.) O41 - Driver: (MpKsld527c56f) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{45AF17E3-4EA3-46C9-BE92-AF4345C0952B}\MpKsld527c56f.sys (.not file.) O41 - Driver: (MpKsld59faada) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B4798C37-33D2-4C74-8AA0-E85F95CB2A23}\MpKsld59faada.sys (.not file.) O41 - Driver: (MpKsld6d377da) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7802C00E-6442-473E-AD5D-C35E54C3C28D}\MpKsld6d377da.sys (.not file.) O41 - Driver: (MpKsld7bb71cb) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D8157A4D-ADD8-469F-B7E6-E69614979ADC}\MpKsld7bb71cb.sys (.not file.) O41 - Driver: (MpKsld936ddda) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7BA5AAEC-96E6-4EC6-B8F6-37912F983E0A}\MpKsld936ddda.sys (.not file.) O41 - Driver: (MpKsld9ddc087) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{231871FF-53D0-4F8F-BA12-571A944843CC}\MpKsld9ddc087.sys (.not file.) O41 - Driver: (MpKslda64f763) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9F8A4343-016D-406C-9718-1E90F1D84BAF}\MpKslda64f763.sys (.not file.) O41 - Driver: (MpKsldb55aab7) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{05C55EA9-1712-48F4-952B-A717FE74C3AC}\MpKsldb55aab7.sys (.not file.) O41 - Driver: (MpKsldb5e3bf6) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{96ACE7AF-6498-4EA1-9C1A-8D3BF95723E7}\MpKsldb5e3bf6.sys (.not file.) O41 - Driver: (MpKsldbbc5e58) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D381DD7A-DA87-43B7-8130-2C1021F5C188}\MpKsldbbc5e58.sys (.not file.) O41 - Driver: (MpKsldd06b276) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5A7B4EC0-9519-4754-B80D-9FC9D7AAB7C4}\MpKsldd06b276.sys (.not file.) O41 - Driver: (MpKslddb99e51) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{CAD597D0-7F18-488A-93A5-DDE864E00BB8}\MpKslddb99e51.sys (.not file.) O41 - Driver: (MpKsldfb8fc85) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{46FFAE96-BFB1-4DBA-9E5D-8ECFD222A2C6}\MpKsldfb8fc85.sys (.not file.) O41 - Driver: (MpKsle00da7dc) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{59BA1F00-BD76-4A79-80E3-C2B668AD838A}\MpKsle00da7dc.sys (.not file.) O41 - Driver: (MpKsle48b0853) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{131967B7-6F87-41B0-AB47-3AD794164ACA}\MpKsle48b0853.sys (.not file.) O41 - Driver: (MpKsle4f66408) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{84F5741C-C490-4227-BBD1-D6179A118B32}\MpKsle4f66408.sys (.not file.) O41 - Driver: (MpKsle8d82247) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{473E8586-7BFD-4AC1-9808-FC2449D8DE97}\MpKsle8d82247.sys (.not file.) O41 - Driver: (MpKsle9758f80) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DA259E49-5F48-419E-846E-9B51566B0162}\MpKsle9758f80.sys (.not file.) O41 - Driver: (MpKslea174970) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C94DBE47-A191-407E-8A38-7357437476BA}\MpKslea174970.sys (.not file.) O41 - Driver: (MpKsleaa13c9d) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A8B7B894-A521-460B-878F-460F2503F554}\MpKsleaa13c9d.sys (.not file.) O41 - Driver: (MpKslf02bc285) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E99A2C2F-ED68-4BFC-9651-4053D481A8D9}\MpKslf02bc285.sys (.not file.) O41 - Driver: (MpKslf18005ab) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D7C22975-2A39-49AB-ACC9-AA3488DC5F46}\MpKslf18005ab.sys (.not file.) O41 - Driver: (MpKslf1f5512a) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{131967B7-6F87-41B0-AB47-3AD794164ACA}\MpKslf1f5512a.sys (.not file.) O41 - Driver: (MpKslf242cb55) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C685B4FC-4E05-4D12-9973-348A06035959}\MpKslf242cb55.sys (.not file.) O41 - Driver: (MpKslf428c679) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DA9083CF-F430-450B-BA78-F20928556219}\MpKslf428c679.sys (.not file.) O41 - Driver: (MpKslf9f181cc) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6B0D0FE3-3098-4ECE-BA1D-5B057978A0AE}\MpKslf9f181cc.sys (.not file.) O41 - Driver: (MpKslfcbc734b) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{436E8997-AC40-4B0A-A89B-533BBCB381DF}\MpKslfcbc734b.sys (.not file.) O41 - Driver: (MpKslfda2e566) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F1F8D59C-3CAE-4792-9C19-6C427F2280B4}\MpKslfda2e566.sys (.not file.) O41 - Driver: (MpKslfdcc41c3) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{59BA1F00-BD76-4A79-80E3-C2B668AD838A}\MpKslfdcc41c3.sys (.not file.) O41 - Driver: (MpKslfeb64ac0) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9F5843A4-DC38-40FF-940F-1FE6FF6B34AB}\MpKslfeb64ac0.sys (.not file.) O41 - Driver: (TKFWFV) . (. - .) - C:\Windows\system32\TKFWFV.sys (.not file.) O41 - Driver: (tvgqhgiq) . (. - .) - C:\Windows\system32\drivers\tvgqhgiq.sys (.not file.) 045 - LFCP:[MD5.1895536D64522B7E97A9827D3677AD4C] - 24/01/2012 - 21:55:57 ---A- - C:\Windows\Prefetch\AgCx_SC4.db 045 - LFCP:[MD5.1A23D5C4F9C2858EF386664A9E10AB84] - 26/01/2012 - 19:38:22 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-3481824857-3955233913-349915734-1000.db O45 - LFCP:[MD5.39F9A54C25B2506DB67AC7D1FA2361DC] - 26/01/2012 - 19:38:22 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-3481824857-3955233913-349915734-1000.db O45 - LFCP:[MD5.52C4CAAB4143D072DB25382281D66BCE] - 26/01/2012 - 21:26:35 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db O45 - LFCP:[MD5.F96C761A2DD219C329ABAA4B906CDD63] - 26/01/2012 - 21:26:35 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db O45 - LFCP:[MD5.3DEA624A9ABDD96D3B501790D3560365] - 26/01/2012 - 21:26:35 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db O45 - LFCP:[MD5.666CAC1BC9A2C50F6599AD95160529AE] - 26/01/2012 - 21:26:35 ---A- - C:\Windows\Prefetch\AgRobust.db O47 - AAKE:Key Export SP - "C:\kos\game_sting_pak\sting.exe" [Enabled] .(...) -- C:\kos\game_sting_pak\sting.exe (.not file.) O69 - SBI: SearchScopes [HKCU] {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} - (MyStart Search) - http://mystart.incredimail.com C:\Users\marilaine.marilaine-Mega\AppData\Roaming\BabylonToolbar C:\Program Files\NORTON~2\Engine\351~1.8\Nss.exe C:\Program Files\NORTON~2\Engine\351~1.8 C:\Program Files\NORTON~2\Engine C:\Program Files\NORTON~2 [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified [HKCU\Software\MyAshampoo] [HKCU\Software\AppDataLow\Software\MyAshampoo] [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyAshampoo Toolbar] emptytemp emptyflash firewallraz sysrestore |- Copie e cole estas informações,que estão em vermelho,para o campo "amarelo claro" de ZHPFix. |- Ps: Procure deixar o campo limpo,antes de colar as informações que estão na Quote. |- Clique em GO -> Oui. |- Ao concluir,e caso tenha desaparecido todos os ícones de seu desktop,faça o seguinte: |- Abra o Gerenciador de tarefas. ( ctrl+alt+del ) |- Clique na aba "Aplicativos". |- Clique em "Nova tarefa..." |- Digite na caixa: explorer.exe |- Clique em OK. |- Poste o relatório: C:\ZHP\ZHPFixReport.txt |- Ps: Também,será gerado o relatório ( ZHPExportRegistry-dia-mes-ano-hs-min-seg ),que será backup das entradas removidas. <- Não poste-o! |- Informe algum acidente de percursso! Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
SmasH 0 Denunciar post Postado Janeiro 27, 2012 Aqui o relatório do ZHP: Rapport de ZHPFix 1.12.3379 par Nicolas Coolman, Update du 22/01/2011 Fichier d'export Registre : Run by marilaine at 27/01/2012 01:03:06 Windows 7 Starter Edition, 32-bit (Build 7600) Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html Web site : http://nicolascoolman.skyrock.com/ ========== Memory Process ========== DELETED Memory Process: C:\Program Files\Google\Update\GoogleUpdate.exe DELETED Memory Process: C:\Program Files\NORTON~2\Engine\351~1.8\Nss.exe ========== Registry Key ========== DELETED Key: Mozilla Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 DELETED Key: CLSID BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} DELETED Key: CLSID BHO: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} DELETED Key: CLSID BHO: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} DELETED Key: CLSID BHO: {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} NOT FOUND Key: Service: gpsvc DELETED Driver Key: davtizzd DELETED Driver Key: MpKsl00ff4c1b DELETED Driver Key: MpKsl0133f6fd DELETED Driver Key: MpKsl06270223 DELETED Driver Key: MpKsl0765b0b0 DELETED Driver Key: MpKsl090ce9d4 DELETED Driver Key: MpKsl0edbfa8c DELETED Driver Key: MpKsl106ee7b2 DELETED Driver Key: MpKsl12c1c607 DELETED Driver Key: MpKsl13d7f9dd DELETED Driver Key: MpKsl166d2d17 DELETED Driver Key: MpKsl18914510 DELETED Driver Key: MpKsl1c4cba26 DELETED Driver Key: MpKsl1dae71a2 DELETED Driver Key: MpKsl2307f20a DELETED Driver Key: MpKsl23b93d89 DELETED Driver Key: MpKsl26427b48 DELETED Driver Key: MpKsl2670c000 DELETED Driver Key: MpKsl282c6e9e DELETED Driver Key: MpKsl28e3837d DELETED Driver Key: MpKsl2994230a DELETED Driver Key: MpKsl2a72d2a5 DELETED Driver Key: MpKsl2a7d26a5 DELETED Driver Key: MpKsl317478f7 DELETED Driver Key: MpKsl32c9a9b1 DELETED Driver Key: MpKsl37474b4a DELETED Driver Key: MpKsl3873fa53 DELETED Driver Key: MpKsl397ae880 DELETED Driver Key: MpKsl3ad0b4d5 DELETED Driver Key: MpKsl3b087dc5 DELETED Driver Key: MpKsl3d6e01f7 DELETED Driver Key: MpKsl40902d48 DELETED Driver Key: MpKsl44a41626 DELETED Driver Key: MpKsl45eff0f3 DELETED Driver Key: MpKsl477bb251 DELETED Driver Key: MpKsl4858bbcf DELETED Driver Key: MpKsl4ab4a193 DELETED Driver Key: MpKsl4c34edec DELETED Driver Key: MpKsl4c669833 DELETED Driver Key: MpKsl4dc0aa17 DELETED Driver Key: MpKsl51bfedae DELETED Driver Key: MpKsl548d4a23 DELETED Driver Key: MpKsl5859a9c7 DELETED Driver Key: MpKsl5ae5bb6b DELETED Driver Key: MpKsl5b9a55bf DELETED Driver Key: MpKsl5ddad0fb DELETED Driver Key: MpKsl5e3d96e7 DELETED Driver Key: MpKsl5e6b4dea DELETED Driver Key: MpKsl5eaf972c DELETED Driver Key: MpKsl5ed4f12b DELETED Driver Key: MpKsl612a9c20 DELETED Driver Key: MpKsl6602b1bf DELETED Driver Key: MpKsl66b3f10a DELETED Driver Key: MpKsl6b5ecaf7 DELETED Driver Key: MpKsl6da32c52 DELETED Driver Key: MpKsl70291294 DELETED Driver Key: MpKsl7711ed47 DELETED Driver Key: MpKsl79424e96 DELETED Driver Key: MpKsl7c09f11e DELETED Driver Key: MpKsl7e7fbc3e DELETED Driver Key: MpKsl808e8aa0 DELETED Driver Key: MpKsl8152ef58 DELETED Driver Key: MpKsl826f2048 DELETED Driver Key: MpKsl830eecc2 DELETED Driver Key: MpKsl83f50237 DELETED Driver Key: MpKsl88904493 DELETED Driver Key: MpKsl8a463019 DELETED Driver Key: MpKsl8bb243ad DELETED Driver Key: MpKsl8ce5cb28 DELETED Driver Key: MpKsl8d33fb94 DELETED Driver Key: MpKsl8e36fe66 DELETED Driver Key: MpKsl8f1f5268 DELETED Driver Key: MpKsl90aa8997 DELETED Driver Key: MpKsl91c62237 DELETED Driver Key: MpKsl933cff2c DELETED Driver Key: MpKsl9366eb3e DELETED Driver Key: MpKsl93697895 DELETED Driver Key: MpKsl953cffa5 DELETED Driver Key: MpKsl95539409 DELETED Driver Key: MpKsl95ccb96c DELETED Driver Key: MpKsl97f28518 DELETED Driver Key: MpKsl980897f5 DELETED Driver Key: MpKsl9ec16ffc DELETED Driver Key: MpKsla0bd84b2 DELETED Driver Key: MpKsla284e3e0 DELETED Driver Key: MpKsla447399d DELETED Driver Key: MpKsla52648aa DELETED Driver Key: MpKslaaf498f4 DELETED Driver Key: MpKslae212552 DELETED Driver Key: MpKslae2731dd DELETED Driver Key: MpKslaf0b3a9f DELETED Driver Key: MpKslb0c77ee1 DELETED Driver Key: MpKslb1fe9c33 DELETED Driver Key: MpKslb27c5944 DELETED Driver Key: MpKslb3b86d84 DELETED Driver Key: MpKslb551fdc8 DELETED Driver Key: MpKslb67cc503 DELETED Driver Key: MpKslb8386851 DELETED Driver Key: MpKslb8415549 DELETED Driver Key: MpKslba821d18 DELETED Driver Key: MpKslbd196803 DELETED Driver Key: MpKslbe27e904 DELETED Driver Key: MpKslbe4403d2 DELETED Driver Key: MpKslc7a76084 DELETED Driver Key: MpKslc7b01bd5 DELETED Driver Key: MpKslc7ef1356 DELETED Driver Key: MpKslc973710f DELETED Driver Key: MpKslca33b5cc DELETED Driver Key: MpKslca79f34b DELETED Driver Key: MpKslcb1a857b DELETED Driver Key: MpKslcb411a84 DELETED Driver Key: MpKslcbf991c6 DELETED Driver Key: MpKslcc925976 DELETED Driver Key: MpKslcd78fe50 DELETED Driver Key: MpKslcd907521 DELETED Driver Key: MpKslcf741de5 DELETED Driver Key: MpKsld1501c4b DELETED Driver Key: MpKsld43a970d DELETED Driver Key: MpKsld4425a6f DELETED Driver Key: MpKsld4b14462 DELETED Driver Key: MpKsld4d129ac DELETED Driver Key: MpKsld520a689 DELETED Driver Key: MpKsld527c56f DELETED Driver Key: MpKsld59faada DELETED Driver Key: MpKsld6d377da DELETED Driver Key: MpKsld7bb71cb DELETED Driver Key: MpKsld936ddda DELETED Driver Key: MpKsld9ddc087 DELETED Driver Key: MpKslda64f763 DELETED Driver Key: MpKsldb55aab7 DELETED Driver Key: MpKsldb5e3bf6 DELETED Driver Key: MpKsldbbc5e58 DELETED Driver Key: MpKsldd06b276 DELETED Driver Key: MpKslddb99e51 DELETED Driver Key: MpKsldfb8fc85 DELETED Driver Key: MpKsle00da7dc DELETED Driver Key: MpKsle48b0853 DELETED Driver Key: MpKsle4f66408 DELETED Driver Key: MpKsle8d82247 DELETED Driver Key: MpKsle9758f80 DELETED Driver Key: MpKslea174970 DELETED Driver Key: MpKsleaa13c9d DELETED Driver Key: MpKslf02bc285 DELETED Driver Key: MpKslf18005ab DELETED Driver Key: MpKslf1f5512a DELETED Driver Key: MpKslf242cb55 DELETED Driver Key: MpKslf428c679 DELETED Driver Key: MpKslf9f181cc DELETED Driver Key: MpKslfcbc734b DELETED Driver Key: MpKslfda2e566 DELETED Driver Key: MpKslfdcc41c3 DELETED Driver Key: MpKslfeb64ac0 DELETED Driver Key: TKFWFV DELETED Driver Key: tvgqhgiq DELETED Key: SearchScopes :{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} DELETED Key: HKCU\Software\MyAshampoo DELETED Key: HKCU\Software\AppDataLow\Software\MyAshampoo DELETED Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyAshampoo Toolbar ========== Registry Value ========== DELETED URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} DELETED URLSearchHook: {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} DELETED URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} DELETED Toolbar: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} DELETED Toolbar: {c2ed826e-8903-4a9d-b0df-3a8fb8ea918a} DELETED Toolbar: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} DELETED AAKE KeyValue: C:\kos\game_sting_pak\sting.exe No Value in Domain Profile Register Key FirewallRaz : DELETED FirewallRaz (Public) : TCP Query User{7C636838-6348-4645-953A-930EAE861CB9}C:\users\marilaine.marilaine-mega\downloads\darkedenccv(2)\darkedenccv\darkeden.exe DELETED FirewallRaz (Public) : UDP Query User{558D10BA-EE63-4A92-8D77-6E082EB3D79C}C:\users\marilaine.marilaine-mega\downloads\darkedenccv(2)\darkedenccv\darkeden.exe DELETED FirewallRaz (Public) : {B1B38DA3-21E7-4630-8F5F-400CAA1C6886} DELETED FirewallRaz (Public) : {8AAED35D-D597-4F8D-932C-73BB21DC6A23} DELETED FirewallRaz (Public) : TCP Query User{D3674DA6-1E14-4621-BFBA-4F43CD973915}C:\users\marilaine.marilaine-mega\desktop\samp03csvr_win32\samp-server.exe DELETED FirewallRaz (Public) : UDP Query User{E9248B34-FB27-4F32-B0CD-F4CB526129F2}C:\users\marilaine.marilaine-mega\desktop\samp03csvr_win32\samp-server.exe DELETED FirewallRaz (Public) : TCP Query User{559B9BA5-0B09-4800-96C8-D6100FBD829C}C:\program files\left 4 dead 2\left.4.dead.2-thepirategay\left4dead2.exe DELETED FirewallRaz (Public) : UDP Query User{988136E4-66C6-45D4-A0EB-BEB50BBF1887}C:\program files\left 4 dead 2\left.4.dead.2-thepirategay\left4dead2.exe DELETED FirewallRaz (Public) : TCP Query User{E2584673-3831-4F3C-80DC-39EB94000100}C:\program files\left4dead\hl2.exe DELETED FirewallRaz (Public) : UDP Query User{39DA4D10-CD4A-4608-8FF9-E11C197BB796}C:\program files\left4dead\hl2.exe DELETED FirewallRaz (Public) : {4BDB5864-5F0F-4E2F-AA01-27883CF38B4D} DELETED FirewallRaz (Public) : {07B6AFC5-0768-4820-B35D-A3944636C9CF} DELETED FirewallRaz (Public) : {DB68D582-D7CC-4462-BA1E-9F0F3AB3A9E7} DELETED FirewallRaz (Public) : {91B7E38F-7E89-4931-944D-7D95760065D0} DELETED FirewallRaz (Public) : {EBAAB718-1C32-4A5D-B9AF-D3D856DDC2A8} DELETED FirewallRaz (Public) : {4C05FA89-A1ED-472C-9A84-14A91AED39BB} DELETED FirewallRaz (Public) : {593965A4-0EF9-4A48-B8D6-F28C5AD03A27} DELETED FirewallRaz (Public) : {B061F4E4-B391-4D23-841E-A1F8201445CA} DELETED FirewallRaz (Public) : {3A5DAB6B-874B-463A-85B9-CA409EE00386} DELETED FirewallRaz (Public) : {32FDBDD2-1C05-418A-9222-96EAD6CFC51D} DELETED FirewallRaz (None) : {EEBE0381-B5A9-4209-9226-0328F49B7CDB} DELETED FirewallRaz (Public) : TCP Query User{1B0A51B2-F3C6-478D-A3E6-CC222B814835}C:\users\marilaine.marilaine-mega\desktop\lunaticos server (original)\lunaticos roleplayer™\lunaticos rp - cópia\samp-server.exe DELETED FirewallRaz (Public) : UDP Query User{60277ECE-454D-4B02-9D02-F5D17371FD11}C:\users\marilaine.marilaine-mega\desktop\lunaticos server (original)\lunaticos roleplayer™\lunaticos rp - cópia\samp-server.exe DELETED FirewallRaz (Public) : {ABB02941-E7E7-4952-BF89-8B5177A2B1F3} DELETED FirewallRaz (Public) : {01C83A0B-4CC0-4BC0-A247-87C9EDA23789} ========== Registry Data Items ========== REMOVED R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride REMOVED Explorer Association Data Application: http://www.filefacts.net/redirect.php?ext=%s ========== Repertory ========== DELETED Folder: c:\users\marilaine.marilaine-mega\appdata\roaming\babylontoolbar DELETED Folder: c:\program files\norton~2\engine\351~1.8 DELETED Folder: c:\program files\norton~2\engine DELETED Folder: c:\program files\norton~2 DELETED Window Temporary: : 11 DELETED Flash Cookies: 501 ========== File ========== NOT FOUND File: c:\program files\windows live\photo gallery\npwlpg.dll DELETED File: c:\program files\myashampoo\prxtbmya0.dll DELETED File: c:\program files\softonic_es\prxtbsof2.dll DELETED File: c:\program files\xfirexo\prxtbxfir.dll NOT FOUND File: c:\program files\xfirexo\prxtbxfir.dll NOT FOUND File: c:\program files\myashampoo\prxtbmya0.dll NOT FOUND File: c:\program files\softonic_es\prxtbsof2.dll DELETED File: c:\windows\tasks\googleupdatetaskmachinecore.job DELETED File: c:\windows\tasks\googleupdatetaskmachineua.job DELETED File: c:\windows\tasks\norton security scan for marilaine.job DELETED File: c:\windows\tasks\rmschedule.job DELETED File***: c:\program files\google\update\googleupdate.exe NOT FOUND Folder/File: c:\program files\google\update\googleupdate.exe DELETED File: c:\program files\norton~2\engine\351~1.8\nss.exe DELETED File: c:\windows\prefetch\aggluad_s-1-5-21-3481824857-3955233913-349915734-1000.db DELETED File: c:\windows\prefetch\agglfaulthistory.db DELETED File: c:\windows\prefetch\agglfgapphistory.db DELETED File: c:\windows\prefetch\agglglobalhistory.db DELETED File: c:\windows\prefetch\agrobust.db NOT FOUND File: c:\kos\game_sting_pak\sting.exe NOT FOUND Folder/File: c:\program files\norton~2\engine\351~1.8\nss.exe DELETED Window Temporary: : 45 DELETED Flash Cookies: 4451 ========== Task ========== DELETED Task: DealPlyUpdate DELETED Task: GoogleUpdateTaskMachineCore DELETED Task: GoogleUpdateTaskMachineUA DELETED Task: Norton Security Scan for marilaine DELETED Task: RunAsStdUser Task DELETED Task: {212022DB-EFF4-485B-8A25-AC3B1C7D3317} DELETED Task: {5201E7F3-5E9B-4D4D-A11B-BD5E88F1F20B} DELETED Task: {6546F708-C958-4AE3-A18F-BC19C5D35D11} DELETED Task: {E8703BEC-750F-44E1-A2DC-BF7B57DBB29F} DELETED Task: {F145FF97-0E4C-46C6-B961-E826100538C3} DELETED Task: {F4C82400-9F22-495B-92E6-9CFBA84033A6} ========== Restoration ========== Restore System Point created succefully ========== Other ========== NOT SUPPORTED 045 - LFCP:[MD5.1895536D64522B7E97A9827D3677AD4C] - 24/01/2012 - 21:55:57 ---A- - C:\Windows\Prefetch\AgCx_SC4.db NOT SUPPORTED 045 - LFCP:[MD5.1A23D5C4F9C2858EF386664A9E10AB84] - 26/01/2012 - 19:38:22 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-3481824857-3955233913-349915734-1000.db ========== Summary ========== 2 : Memory Process 164 : Registry Key 33 : Registry Value 2 : Registry Data Items 6 : Repertory 23 : File 11 : Task 1 : Restoration 2 : Other End of clean in 00mn 42s ========== Report File ========== C:\ZHP\ZHPFix[R1].txt - 27/01/2012 01:03:06 [12884] Não entendi o que você quis dizer com acidente de percurso, poderia explicar melhor? Obrigado ^^ Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Janeiro 27, 2012 Bom Dia! SmasH Não entendi o que você quis dizer com acidente de percurso, poderia explicar melhor? Obrigado ^^ |- Seria o caso de algum programa,que lhe seja fundamental,deixar de funcionar. |- Se já não foi removida pelas ferramentas,desinstale a Babylon Toolbar. ///°°°/// |- Copie estas informações,entre os XXXXXXX....,para o Bloco de Notas. |- Salve-as,no desktop,como: CFScript <-- Texto! XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX Firefox:: FF - user.js: extensions.BabylonToolbar_i.id - 128c0892000000000000002511b32bf6 FF - user.js: extensions.BabylonToolbar_i.hardId - 128c0892000000000000002511b32bf6 FF - user.js: extensions.BabylonToolbar_i.instlDay - 15354 FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1717:58 FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar_i.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar_i.tlbrId - base FF - user.js: extensions.BabylonToolbar_i.newTab - false FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=101365 FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar_i.instlRef - sst File:: c:\windows\system32\drivers\davtizzd.sys c:\windows\xhunter1.sys c:\windows\xspirit.sys registry:: [-HKEY_CLASSES_ROOT\clsid\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}] [-HKEY_CLASSES_ROOT\clsid\{c2ed826e-8903-4a9d-b0df-3a8fb8ea918a}] [-HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}] Reglock:: [HKEY_USERS\S-1-5-21-3481824857-3955233913-349915734-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] Driver:: davtizzd xhunter1 xspirit XDva374 XDva377 XDva379 XDva382 XDva383 XDva385 XDva386 XDva387 XDva388 XDva389 XDva390 XDva391 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX |- Arraste o CFScript.txt,para o ícone do ComboFix. |- Arraste-o,até que surja uma solicitação para executar o ComboFix.exe. |- Terminando,poste: ComboFix.txt |- Informe,sempre,qualquer acidente de percursso! Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
