Zoek.exe Version 4.0.0.4 Updated 27-September-2013 Tool run by Eigenaar on zo 29-09-2013 at 23:36:38,35. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x64 Running in: Normal Mode Internet Access Detected Launched: H:\Users\Eigenaar\Desktop\zoek\zoek.com [Script inserted] ==== Older Logs ====================== C:\zoek-results29-09-2013-1755.log 18464 bytes ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1995473005-823767533-376333057-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BitGuard deleted successfully ==== FireFox Fix ====================== ProfilePath: C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default ---- Lines delta removed from prefs.js ---- user_pref("extensions.delta.admin", false); user_pref("extensions.delta.aflt", "babsst"); user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); user_pref("extensions.delta.autoRvrt", "false"); user_pref("extensions.delta.bbDpng", "29"); user_pref("extensions.delta.cntry", "NL"); user_pref("extensions.delta.dfltLng", "nl"); user_pref("extensions.delta.excTlbr", false); user_pref("extensions.delta.ffxUnstlRst", true); user_pref("extensions.delta.hdrMd5", "2614EB72DF1C93A8DA8AD56A1E3ABB08"); user_pref("extensions.delta.id", "022b37d5000000000000001bfcfff5b3"); user_pref("extensions.delta.instlDay", "15977"); user_pref("extensions.delta.instlRef", "sst"); user_pref("extensions.delta.lastVrsnTs", "1.8.24.616:05:53"); user_pref("extensions.delta.newTab", false); user_pref("extensions.delta.prdct", "delta"); user_pref("extensions.delta.prtnrId", "delta"); user_pref("extensions.delta.rvrt", "false"); user_pref("extensions.delta.sg", "azb"); user_pref("extensions.delta.smplGrp", "azb"); user_pref("extensions.delta.tlbrId", "base"); user_pref("extensions.delta.tlbrSrchUrl", ""); user_pref("extensions.delta.vrsn", "1.8.24.6"); user_pref("extensions.delta.vrsni", "1.8.24.6"); user_pref("extensions.delta.vrsnTs", "1.8.24.616:05:53"); user_pref("extensions.delta_i.babExt", ""); user_pref("extensions.delta_i.babTrack", "affID=120007&tsp=5020"); user_pref("extensions.delta_i.srcExt", "ss"); ---- Lines delta modified from prefs.js ---- user_pref("extensions.enabledAddons", "ffxtlbr%40delta.com:1.5.0,%7B3e9a3920-1b27-11da-8cd6-0800200c9a66%7D:3.6.4,%7B87775fdb-6972-41f9-ae51-8326e38cb206%7D:10.16.2.509,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0"); user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"C:\\\\Windows\\\\Microsoft.NET\\\\Framework\\\\v3.5\\\\Windows Presentation Foundation\\\\DotNetAssistantExtension\",\"mtime\":1251995543971,\"rdfTime\":1232707720000},\"{cb84136f-9c44-433a-9048-c5cd9df1dc16}\":{\"descriptor\":\"C:\\\\Program Files (x86)\\\\Spyware Doctor\\\\BDT\\\\Firefox\",\"mtime\":1343764324661,\"rdfTime\":1309520808000}}},{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\",\"mtime\":1370682159654,\"rdfTime\":1370682159652}}},{\"name\":\"app-profile\",\"addons\":{\"ffxtlbr@delta.com\":{\"descriptor\":\"C:\\\\Users\\\\Eigenaar\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\n0m1l7l1.default\\\\extensions\\\\ffxtlbr@delta.com\",\"mtime\":1380463558254,\"rdfTime\":1352283188000},\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"C:\\\\Users\\\\Eigenaar\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\n0m1l7l1.default\\\\extensions\\\\{20a82645-c095-46ed-80e3-08825760534b}\",\"mtime\":1276279532181,\"rdfTime\":1271780036000},\"{3e9a3920-1b27-11da-8cd6-0800200c9a66}\":{\"descriptor\":\"C:\\\\Users\\\\Eigenaar\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\n0m1l7l1.default\\\\extensions\\\\{3e9a3920-1b27-11da-8cd6-0800200c9a66}.xpi\",\"mtime\":1337061651461},\"disabled\":{\"descriptor\":\"C:\\\\Users\\\\Eigenaar\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\n0m1l7l1.default\\\\extensions\\\\disabled\",\"mtime\":1375306934631,\"rdfTime\":1369250042000},\"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\":{\"descriptor\":\"C:\\\\Users\\\\Eigenaar\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\n0m1l7l1.default\\\\extensions\\\\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\",\"mtime\":1253897192139,\"rdfTime\":1251971580000}}}]"); ---- Lines delta removed from user.js ---- user_pref("extensions.delta.tlbrSrchUrl", ""); user_pref("extensions.delta.id", "022b37d5000000000000001bfcfff5b3"); user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); user_pref("extensions.delta.instlDay", "15977"); user_pref("extensions.delta.vrsn", "1.8.24.6"); user_pref("extensions.delta.vrsni", "1.8.24.6"); user_pref("extensions.delta.vrsnTs", "1.8.24.616:05:53"); user_pref("extensions.delta.prtnrId", "delta"); user_pref("extensions.delta.prdct", "delta"); user_pref("extensions.delta.aflt", "babsst"); user_pref("extensions.delta.smplGrp", "none"); user_pref("extensions.delta.tlbrId", "base"); user_pref("extensions.delta.instlRef", "sst"); user_pref("extensions.delta.dfltLng", "nl"); user_pref("extensions.delta.excTlbr", false); user_pref("extensions.delta.ffxUnstlRst", true); user_pref("extensions.delta.admin", false); user_pref("extensions.delta_i.babTrack", "affID=120007&tsp=5020"); user_pref("extensions.delta_i.babExt", ""); user_pref("extensions.delta_i.srcExt", "ss"); user_pref("extensions.delta.autoRvrt", "false"); user_pref("extensions.delta.rvrt", "false"); user_pref("extensions.delta.newTab", false); ---- Lines searchya removed from prefs.js ---- user_pref("browser.search.defaultenginename", "SearchYa!"); user_pref("browser.search.selectedEngine", "SearchYa!"); user_pref("extensions.searchya.aflt", "grupo1y"); user_pref("extensions.searchya.appId", "{1973277F-87B0-4EA3-9ED2-470A91D284CF}"); user_pref("extensions.searchya.dfltLng", ""); user_pref("extensions.searchya.dfltSrch", true); user_pref("extensions.searchya.dnsErr", true); user_pref("extensions.searchya.excTlbr", false); user_pref("extensions.searchya.hmpg", true); user_pref("extensions.searchya.hmpgUrl", "http://www.searchya.com/?f=1&a=grupo1y&cd=2XzuyEtN2Y1L1QzutDtDtC0B0F0C0F0F0FyD0BtAtAyB0DyDtN0D0Tzu0CyEtCyEtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U&cr=2019594674&ir="); user_pref("extensions.searchya.id", "001BFCFFF5B337D5"); user_pref("extensions.searchya.instlDay", "15753"); user_pref("extensions.searchya.instlRef", ""); user_pref("extensions.searchya.newTabUrl", "http://www.searchya.com/?f=2&a=grupo1y&cd=2XzuyEtN2Y1L1QzutDtDtC0B0F0C0F0F0FyD0BtAtAyB0DyDtN0D0Tzu0CyEtCyEtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U&cr=2019594674&ir="); user_pref("extensions.searchya.prdct", "searchya"); user_pref("extensions.searchya.prtnrId", "searchya"); user_pref("extensions.searchya.srchPrvdr", "SearchYa!"); user_pref("extensions.searchya.tlbrId", "base"); user_pref("extensions.searchya.tlbrSrchUrl", "http://www.searchya.com/?f=3&a=grupo1y&cd=2XzuyEtN2Y1L1QzutDtDtC0B0F0C0F0F0FyD0BtAtAyB0DyDtN0D0Tzu0CyEtCyEtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U&cr=2019594674&ir=&q="); user_pref("extensions.searchya.vrsn", "1.8.8.0"); user_pref("extensions.searchya.vrsni", "1.8.8.0"); user_pref("extensions.searchya_i.hmpg", true); user_pref("extensions.searchya_i.newTab", false); user_pref("extensions.searchya_i.smplGrp", "none"); user_pref("extensions.searchya_i.vrsnTs", "1.8.8.017:7:28"); ---- Lines searchya modified from prefs.js ---- ---- Lines searchya removed from user.js ---- user_pref("extensions.searchya.hmpg", true); user_pref("extensions.searchya.hmpgUrl", "http://www.searchya.com/?f=1&a=grupo1y&cd=2XzuyEtN2Y1L1QzutDtDtC0B0F0C0F0F0FyD0BtAtAyB0DyDtN0D0Tzu0CyEtCyEtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U&cr=2019594674&ir="); user_pref("extensions.searchya.dfltSrch", true); user_pref("extensions.searchya.srchPrvdr", "SearchYa!"); user_pref("extensions.searchya.dnsErr", true); user_pref("extensions.searchya_i.newTab", false); user_pref("extensions.searchya.newTabUrl", "http://www.searchya.com/?f=2&a=grupo1y&cd=2XzuyEtN2Y1L1QzutDtDtC0B0F0C0F0F0FyD0BtAtAyB0DyDtN0D0Tzu0CyEtCyEtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U&cr=2019594674&ir="); user_pref("extensions.searchya.tlbrSrchUrl", "http://www.searchya.com/?f=3&a=grupo1y&cd=2XzuyEtN2Y1L1QzutDtDtC0B0F0C0F0F0FyD0BtAtAyB0DyDtN0D0Tzu0CyEtCyEtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U&cr=2019594674&ir=&q="); user_pref("extensions.searchya.id", "001BFCFFF5B337D5"); user_pref("extensions.searchya.instlDay", "15753"); user_pref("extensions.searchya.vrsn", "1.8.8.0"); user_pref("extensions.searchya.vrsni", "1.8.8.0"); user_pref("extensions.searchya_i.vrsnTs", "1.8.8.017:7:28"); user_pref("extensions.searchya.prtnrId", "searchya"); user_pref("extensions.searchya.prdct", "searchya"); user_pref("extensions.searchya.aflt", "grupo1y"); user_pref("extensions.searchya_i.smplGrp", "none"); user_pref("extensions.searchya.tlbrId", "base"); user_pref("extensions.searchya.instlRef", ""); user_pref("extensions.searchya.dfltLng", ""); user_pref("extensions.searchya.appId", "{1973277F-87B0-4EA3-9ED2-470A91D284CF}"); user_pref("extensions.searchya.excTlbr", false); user_pref("extensions.searchya_i.hmpg", true); ---- Lines CT2865317 removed from prefs.js ---- user_pref("CT2865317.1000234.TWC_country", "NETHERLANDS"); user_pref("CT2865317.1000234.TWC_location", "Amsterdam, Netherlands"); user_pref("CT2865317.1000234.TWC_locId", "NLXX0002"); user_pref("CT2865317.1000234.TWC_region", "OT"); user_pref("CT2865317.1000234.TWC_temp_dis", "c"); user_pref("CT2865317.1000234.TWC_TMP_city", "AMSTERDAM"); user_pref("CT2865317.1000234.TWC_TMP_country", "NL"); user_pref("CT2865317.1000234.TWC_wind_dis", "kmh"); user_pref("CT2865317.1000234.weatherData", "{\"icon\":\"31.png\",\"temperature\":\"20°C\",\"temperatureClear\":\"20°C\",\"highTemperature\":\"20°C\",\"lowTemperature\":\"18°C\",\"feelsLike\":\"20°C\",\"condition\":\"Clear\",\"tUnit\":\"c\",\"cityName\":\"Amsterdam, Netherlands\",\"lastUpdated\":\"7/31/13 11:25 PM Local Time\",\"humidity\":\"89%\",\"visibility\":\"6.0 mi\",\"pressure\":\"30.00 in\",\"pressureDescription\":\"steady\",\"windFrom\":\"S\",\"windSpeed\":\"10 Km/h\",\"hasCurrentCondition\":true,\"night\":true,\"severaAlertsCount\":0,\"loaded\":true,\"day1\":{\"icon\":\"30.png\",\"highTemperature\":\"30°C\",\"lowTemperature\":\"21°C\",\"condition\":\"Partly Cloudy\",\"precipitation\":\"0%\",\"day\":\"1\",\"sunr\":\"6:01 AM\",\"suns\":\"9:32 PM\",\"humidity\":\"68%\",\"windFrom\":\"S\",\"windSpeed\":\"21 Km/h\",\"dayName\":\"Thursday\",\"date\":\"Aug 1, 2013\",\"hourly\":[{\"key\":\"06240000\",\"class\":\"hourlyforecast\",\"dateTime\":\"6 AM\",\"temp\":65,\"feelsLike\":65,\"humid\":93,\"wSpeed\":6,\"wDir\":201,\"pop\":0,\"uv\":0,\"dew\":63,\"icon\":27,\"wDirText\":\"SSW\",\"wDesc\":\"Mostly Cloudy\",\"precip_type\":\"rain\"},{\"key\":\"06240000\",\"class\":\"hourlyforecast\",\"dateTime\":\"12 PM\",\"temp\":79,\"feelsLike\":81,\"humid\":64,\"wSpeed\":9,\"wDir\":193,\"pop\":0,\"uv\":5,\"dew\":66,\"icon\":32,\"wDirText\":\"SSW\",\"wDesc\":\"Sunny\",\"precip_type\":\"rain\"},{\"key\":\"06240000\",\"class\":\"hourlyforecast\",\"dateTime\":\"6 PM\",\"temp\":84,\"feelsLike\":86,\"humid\":54,\"wSpeed\":12,\"wDir\":174,\"pop\":0,\"uv\":2,\"dew\":66,\"icon\":32,\"wDirText\":\"S\",\"wDesc\":\"Sunny\",\"precip_type\":\"rain\"},{\"key\":\"06240000\",\"class\":\"hourlyforecast\",\"dateTime\":\"12 AM\",\"temp\":75,\"feelsLike\":75,\"humid\":73,\"wSpeed\":10,\"wDir\":148,\"pop\":0,\"uv\":0,\"dew\":66,\"icon\":31,\"wDirText\":\"SSE\",\"wDesc\":\"Clear\",\"precip_type\":\"rain\"}]},\"day2\":{\"icon\":\"32.png\",\"highTemperature\":\"33°C\",\"lowTemperature\":\"18°C\",\"condition\":\"Sunny\",\"precipitation\":\"0%\",\"day\":\"2\",\"sunr\":\"6:02 AM\",\"suns\":\"9:30 PM\",\"humidity\":\"61%\",\"windFrom\":\"S\",\"windSpeed\":\"19 Km/h\",\"dayName\":\"Friday\",\"date\":\"Aug 2, 2013\",\"hourly\":[{\"key\":\"06240000\",\"class\":\"hourlyforecast\",\"dateTime\":\"6 AM\",\"temp\":70,\"feelsLike\":70,\"humid\":81,\"wSpeed\":10,\"wDir\":162,\"pop\":0,\"uv\":0,\"dew\":64,\"icon\":31,\"wDirText\":\"SSE\",\"wDesc\":\"Clear\",\"precip_type\":\"rain\"},{\"key\":\"06240000\",\"class\":\"hourlyforecast\",\"dateTime\":\"11 AM\",\"temp\":80,\"feelsLike\":82,\"humid\":64,\"wSpeed\":10,\"wDir\":169,\"pop\":0,\"uv\":4,\"dew\":67,\"icon\":32,\"wDirText\":\"S\",\"wDesc\":\"Sunny\",\"precip_type\":\"rain\"},{\"key\":\"06240000\",\"class\":\"hourlyforecast\",\"dateTime\":\"4 PM\",\"temp\":90,\"feelsLike\":94,\"humid\":48,\"wSpeed\":11,\"wDir\":171,\"pop\":0,\"uv\":5,\"dew\":68,\"icon\":32,\"wDirText\":\"S\",\"wDesc\":\"Sunny\",\"precip_type\":\"rain\"},{\"key\":\"06240000\",\"class\":\"hourlyforecast\",\"dateTime\":\"9 PM\",\"temp\":79,\"feelsLike\":81,\"humid\":67,\"wSpeed\":8,\"wDir\":257,\"pop\":0,\"uv\":0,\"dew\":67,\"icon\":32,\"wDirText\":\"WSW\",\"wDesc\":\"Sunny\",\"precip_type\":\"rain\"}]},\"day3\":{\"icon\":\"12.png\",\"highTemperature\":\"22°C\",\"lowTemperature\":\"16°C\",\"condition\":\"AM Rain\",\"precipitation\":\"70%\",\"day\":\"3\",\"sunr\":\"6:04 AM\",\"suns\":\"9:28 PM\",\"humidity\":\"74%\",\"windFrom\":\"SW\",\"windSpeed\":\"26 Km/h\",\"dayName\":\"Saturday\",\"date\":\"Aug 3, 2013\"},\"extendedOutlookLink\":\"http://uk.weather.com/weather/today-NLXX0002?cm_ven=conduit_uk&cm_cat=application&cm_ite=link&cm_pla=cityName\",\"todayLink\":\"http://uk.weather.com/weather/10day-NLXX0002?cm_ven=conduit_uk&cm_cat=application&cm_ite=link&cm_pla=10day\",\"zone\":2,\"severeAlertsCount\":0}"); user_pref("CT2865317.addressBarTakeOverEnabledInHidden", "true"); user_pref("CT2865317.autoDisableScopes", 0); user_pref("CT2865317.defaultSearch", "false"); user_pref("CT2865317.embeddedsData", "[{\"appId\":\"129363015615338104\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"instantAlert\":true,\"jsInjection\":true,\"sslGranted\":true},\"onBeforeLoadData\":\"{\\\"view\\\":{\\\"html\\\":\\\"\\\\n \\\\n \\\\n \\\\n \\\\n \\\\n \\\\n
\\\\n \\\\n \\\\n \\\\n \\\\n \\\\n
\\\\n 		\\\\n \\\\n \\\\n \\\\n \\\\n \\\\n
\\\\n \\\\n \\\\n \\\\n \\\\n \\\\n
\\\\\\\"\\\\\\\"\\\\n
Zoeken
\\\\n
\\\\n 		\\\\n
\\\\n
\\\\n
\\\"},\\\"locale\\\":{\\\"alignMode\\\":\\\"LTR\\\",\\\"locale\\\":\\\"nl\\\",\\\"languageAlignMode\\\":\\\"LTR\\\"}}\"},{\"appId\":\"129416029873125873\",\"apiPermissions\":{\"crossDomainAjax\":false,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"instantAlert\":true,\"jsInjection\":false,\"sslGranted\":false},\"originalHeight\":26},{\"appId\":\"130055909048847312\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":false,\"instantAlert\":true,\"jsInjection\":true,\"sslGranted\":true},\"originalHeight\":26}]"); user_pref("CT2865317.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}"); user_pref("CT2865317.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}"); user_pref("CT2865317.enableAlerts", "always"); user_pref("CT2865317.enableFix404ByUser", "FALSE"); user_pref("CT2865317.enableSearchFromAddressBar", "false"); user_pref("CT2865317.FirstTime", "true"); user_pref("CT2865317.firstTimeDialogOpened", "true"); user_pref("CT2865317.FirstTimeFF3", "true"); user_pref("CT2865317.fixPageNotFoundError", "true"); user_pref("CT2865317.fixPageNotFoundErrorByUser", "true"); user_pref("CT2865317.fixPageNotFoundErrorInHidden", "true"); user_pref("CT2865317.fixUrls", true); user_pref("CT2865317.installDate", "17/2/2013 17:10:16"); user_pref("CT2865317.installType", "xpe"); user_pref("CT2865317.isCheckedStartAsHidden", true); user_pref("CT2865317.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}"); user_pref("CT2865317.isFirstTimeToolbarLoading", "false"); user_pref("CT2865317.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}"); user_pref("CT2865317.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}"); user_pref("CT2865317.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"http://search.conduit.com/?ctid=CT2865317&octid=CT2865317&SearchSource=15&CUI=UN15271617941713422&SSPV=EB_SSPV&Lay=1&UM=\"}"); user_pref("CT2865317.lastVersion", "10.16.2.509"); user_pref("CT2865317.LoginRevertSettingsEnabled", true); user_pref("CT2865317.mam_gk_appsData.enc", "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"); user_pref("CT2865317.mam_gk_appsDefaultEnabled.enc", "dHJ1ZQ=="); user_pref("CT2865317.mam_gk_appState_CouponBuddy.enc", "b24="); user_pref("CT2865317.mam_gk_appState_PriceGong.enc", "b24="); user_pref("CT2865317.mam_gk_appState_WindowShopper.enc", "b24="); user_pref("CT2865317.mam_gk_appStateReportTime.enc", "MTM2NjU2MDA0Nzc1Mw=="); user_pref("CT2865317.mam_gk_configuration.enc", "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"); user_pref("CT2865317.mam_gk_currentVersion.enc", "MS40LjQuNg=="); user_pref("CT2865317.mam_gk_eventsCache.enc", "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"); user_pref("CT2865317.mam_gk_first_time.enc", "MQ=="); user_pref("CT2865317.mam_gk_gadgetOpen.enc", "MA=="); user_pref("CT2865317.mam_gk_installer_preapproved.enc", "ZmFsc2U="); user_pref("CT2865317.mam_gk_lastLoginTime.enc", "MTM2NjU2MDA0NzQwMQ=="); user_pref("CT2865317.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOnsiVGV4dCI6IlZhbHVlIEFwcHMgZW5yaWNoZXMgeW91ciB3ZWIgZXhwZXJpZW5jZSBieSBvZmZlcmluZyB5b3UgZ3JlYXQgZGVhbHMsIGNvdXBvbnMsIHJlbGF0ZWQgY29udGVudCBhbmQgbXVjaCBtb3JlLiJ9LCJnYWRnZXREZXNjcmlwdGlvblNlY29uZGFyeSI6eyJUZXh0IjoiVmFsdWUgQXBwcyBtYXkgcmVxdWlyZSB1c2Ugb2YgeW91ciBwZXJzb25hbCBpbmZvcm1hdGlvbiwgaW5jbHVkaW5nIHlvdXIgSW50ZXJuZXQgUHJvdG9jb2wgYWRkcmVzcywgdGhlIHdlYnBhZ2VzIHlvdSB2aXNpdCBhbmQgdGhlaXIgY29udGVudC4ifSwiZ2FkZ2V0RW5hYmxlIjp7IlRleHQiOiJUcnkgaXQgbm93In0sImdhZGdldE5vVGhhbmtzIjp7IlRleHQiOiJDdXN0b21pemUifSwiZ2FkZ2V0VGVybXNBbmRQcml2YWN5UG9saWN5Ijp7IlRleHQiOiJUZXJtcyAmIFByaXZhY3kgUG9saWNpZXMifSwiZ2FkZ2V0VGVybXNUZXh0Ijp7IlRleHQiOiJCeSBjbGlja2luZyBcIlRyeSBpdCBub3dcIiwgeW91IGFncmVlIHRvIHRoZSBhY2Nlc3MsIGNvbGxlY3Rpb24gYW5kIHVzYWdlIG9mIHlvdXIgaW5mb3JtYXRpb24gYnkgVmFsdWUgQXBwcyBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIHt7e3Rlcm1zQW5kUHJpdmFjeVBvbGljeUhhbmRsZXJ9fX0uIFNlZSBvdXIge3t7Y29udGVudFBvbGljeUhhbmRsZXJ9fX0gZm9yIG1vcmUgaW5mb3JtYXRpb24uIn0sInNldHRpbmdzQ2FuY2VsIjp7IlRleHQiOiJDYW5jZWwifSwic2V0dGluZ3NDb3Vwb25CdWRkeURlc2NyaXB0aW9uIjp7IlRleHQiOiJDb3Vwb24gQnVkZHkgc2F2ZXMgeW91IG1vbmV5IGJ5IHNlcnZpbmcgeW91IHRoZSBiZXN0IGNvdXBvbnMgYW5kIGRlYWxzIGF0IHRob3VzYW5kcyBvZiB0aGUgbGFyZ2VzdCBvbmxpbmUgbWVyY2hhbnRzLiBDb3Vwb24gQnVkZHkgcmVjb2duaXplcyB3aGVyZSB5b3UgYXJlIGJyb3dzaW5nIGFuZCBhbGVydHMgeW91IG9mIHRoZSBiZXN0IGRlYWxzIHJpZ2h0IG9uIHRoZSBzaXRlIHlvdSBhcmUgdmlzaXRpbmcuIn0sInNldHRpbmdzQ291cG9uQnVkZHlOYW1lIjp7IlRleHQiOiJDb3Vwb24gQnVkZHkifSwic2V0dGluZ3NFbmFibGUiOnsiVGV4dCI6IkVuYWJsZSJ9LCJzZXR0aW5nc0VuYWJsZWQiOnsiVGV4dCI6IkVuYWJsZWQifSwic2V0dGluZ3NQcmljZUdvbmdEZXNjcmlwdGlvbiI6eyJUZXh0IjoieW91ciBvbmxpbmUgc2hvcHBpbmcgYXNzaXN0YW50LiBVc2UgUHJpY2VHb25nIHRvIGZpbmQgdGhlIGJlc3Qgb25saW5lIGRlYWxzIGFuZCBnZXQgb25saW5lIGNvdXBvbnMganVzdCB3aGVuIHlvdSBuZWVkIGl0LiJ9LCJzZXR0aW5nc1ByaWNlR29uZ05hbWUiOnsiVGV4dCI6IlByaWNlIEdvbmcifSwic2V0dGluZ3NQcml2YWN5UG9saWN5Ijp7IlRleHQiOiJQcml2YWN5IFBvbGljeSJ9LCJzZXR0aW5nc1NhdmUiOnsiVGV4dCI6IlNhdmUifSwic2V0dGluZ3NUZXJtc09mVXNlIjp7IlRleHQiOiJUZXJtcyBvZiBVc2UifSwibGFzdFVwZGF0ZVRpbWUiOjEzNjY1NjAwNDE5OTR9"); user_pref("CT2865317.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ=="); user_pref("CT2865317.mam_gk_settings1.4.4.6.enc", "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"); user_pref("CT2865317.mam_gk_showCloseButton.enc", "dHJ1ZQ=="); user_pref("CT2865317.mam_gk_showWelcomeGadget.enc", "dHJ1ZQ=="); user_pref("CT2865317.mam_gk_userId.enc", "YTNmMjYzODUtOGMwYS00ZjdlLTliNmItMmEzMzVjOTdhNjky"); user_pref("CT2865317.migrateAppsAndComponents", true); user_pref("CT2865317.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"http://uTorrentBarNL.OurToolbar.com/\",\"EB_TOOLBAR_ID\":\"CT2865317\",\"EB_TOOLBAR_VERSION\":\"10.16.2.509\",\"EB_ORIGINAL_CTID\":\"CT2865317\",\"EB_DOWNLOAD_PAGE\":\"http://uTorrentBarNL.OurToolbar.com/\",\"EB_TOOLBAR_NAME\":\"uTorrentBar_NL\"}"); user_pref("CT2865317.openThankYouPage", "true"); user_pref("CT2865317.openUninstallPage", "false"); user_pref("CT2865317.PG_ENABLE", "dHJ1ZQ=="); user_pref("CT2865317.price-gong.isManagedApp", "true"); user_pref("CT2865317.revertSettingsEnabled", "false"); user_pref("CT2865317.search.searchAppId", "129363015615338104"); user_pref("CT2865317.search.searchCount", "0"); user_pref("CT2865317.searchInNewTabEnabledByUser", "false"); user_pref("CT2865317.searchInNewTabEnabledInHidden", "true"); user_pref("CT2865317.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}"); user_pref("CT2865317.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}"); user_pref("CT2865317.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}"); user_pref("CT2865317.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2865317\"}"); user_pref("CT2865317.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"http://uTorrentBarNL.OurToolbar.com//xpi\"}"); user_pref("CT2865317.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentBar_NL\"}"); user_pref("CT2865317.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}"); user_pref("CT2865317.serviceLayer_services_appsMetadata_lastUpdate", "1375306924347"); user_pref("CT2865317.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1373724529671"); user_pref("CT2865317.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1373724529615"); user_pref("CT2865317.serviceLayer_services_location_lastUpdate", "1373724529131"); user_pref("CT2865317.serviceLayer_services_login_10.14.42.7_lastUpdate", "1368771198023"); user_pref("CT2865317.serviceLayer_services_login_10.15.0.562_lastUpdate", "1369376048361"); user_pref("CT2865317.serviceLayer_services_login_10.16.2.509_lastUpdate", "1373724529407"); user_pref("CT2865317.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1373724529457"); user_pref("CT2865317.serviceLayer_services_searchAPI_lastUpdate", "1373724529145"); user_pref("CT2865317.serviceLayer_services_serviceMap_lastUpdate", "1373724528780"); user_pref("CT2865317.serviceLayer_services_toolbarContextMenu_lastUpdate", "1373724529549"); user_pref("CT2865317.serviceLayer_services_toolbarSettings_lastUpdate", "1375306924496"); user_pref("CT2865317.serviceLayer_services_translation_lastUpdate", "1373724529350"); user_pref("CT2865317.settingsINI", true); user_pref("CT2865317.SF_JUST_INSTALLED.enc", "RkFMU0U="); user_pref("CT2865317.SF_STATUS.enc", "RU5BQkxFRA=="); user_pref("CT2865317.SF_USER_ID.enc", "Y2lkXzIxNDIwMTMxODA0ODcwMTc2OTc="); user_pref("CT2865317.shouldFirstTimeDialog", "false"); user_pref("CT2865317.showToolbarPermission", "false"); user_pref("CT2865317.smartbar.CTID", "CT2865317"); user_pref("CT2865317.smartbar.toolbarName", "uTorrentBar_NL "); user_pref("CT2865317.smartbar.Uninstall", "0"); user_pref("CT2865317.startPage", "false"); user_pref("CT2865317.toolbarBornServerTime", "21-4-2013"); user_pref("CT2865317.toolbarCurrentServerTime", "13-7-2013"); user_pref("CT2865317.toolbarLoginClientTime", "Sat May 18 2013 13:52:46 GMT+0200"); user_pref("ct2865317.UserID", "UN15271617941713422"); user_pref("CT2865317_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1380465324940,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]"); ---- Lines CT2865317 modified from prefs.js ---- ---- Lines CT2865317 removed from user.js ---- ---- Lines conduit removed from prefs.js ---- ---- Lines conduit modified from prefs.js ---- ---- Lines conduit removed from user.js ---- ---- Lines 87775fdb-6972-41f9-ae51-8326e38cb206 removed from prefs.js ---- ---- Lines 87775fdb-6972-41f9-ae51-8326e38cb206 modified from prefs.js ---- user_pref("extensions.enabledAddons", "ffxtlbr%40disabled.com:1.5.0,%7B3e9a3920-1b27-11da-8cd6-0800200c9a66%7D:3.6.4,%7B87775fdb-6972-41f9-ae51-8326e38cb206%7D:10.16.2.509,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0"); ---- Lines 87775fdb-6972-41f9-ae51-8326e38cb206 removed from user.js ---- ---- Lines smartbar removed from prefs.js ---- user_pref("smartbar.machineId", "VIXJUQRZCV8V0W+QID5FL/TBGQN0YLFPZFOFG93US3BVSSZ3T13RZIQU6UPCNLC+GCRPJD7BBPOXYNCICXY+9A"); ---- Lines smartbar modified from prefs.js ---- ---- Lines smartbar removed from user.js ---- ---- FireFox user.js and prefs.js backups ---- user_29-09-2013_1746_.backup user_30-09-2013_0003_.backup prefs_29-09-2013_1746_.backup prefs_30-09-2013_0003_.backup ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "BrowserMngr Start Page"=- [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "bProtector Start Page"=- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "BrowserMngrDefaultScope"=- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "bProtectorDefaultScope"=- ==== Deleting Files \ Folders ====================== "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\searchplugins\SearchYa.xml" not found "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\searchplugins\SearchYa.xml" not found "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206}" not found "C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data" deleted "C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences" deleted "C:\windows\SysNative\Tasks\EPUpdater" deleted "C:\end" deleted "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\searchplugins\search-the-web.xml" deleted "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\bProtector_extensions.rdf" deleted "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\bprotector_extensions.sqlite" deleted "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\bprotector_prefs.js" deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.settings" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bl" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\dm" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\uninstall.exe" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\00" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\01" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\02" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\03" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\10" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\11" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\12" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\13" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\20" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\21" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\22" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\23" not deleted "C:\Users\Eigenaar\AppData\Roaming\Vso" deleted "C:\Users\Eigenaar\AppData\Roaming\Delta" deleted "C:\Users\Eigenaar\AppData\Roaming\BabSolution" deleted "C:\Program Files (x86)\Delta" deleted "C:\Users\Eigenaar\AppData\Roaming\Delta" deleted "C:\ProgramData\Babylon" deleted "C:\Program Files (x86)\Delta" deleted "C:\Program Files (x86)\GoforFiles" deleted "C:\Program Files (x86)\Red Sky" deleted "C:\Program Files (x86)\Conduit" deleted "C:\Users\Eigenaar\AppData\Roaming\GoforFiles" deleted "C:\Users\Eigenaar\AppData\Roaming\LimeWirePlus" deleted "C:\Users\Eigenaar\AppData\Roaming\SpeedyPC Software" deleted "C:\Users\Eigenaar\AppData\Roaming\Searchya" deleted "C:\Users\Eigenaar\AppData\Roaming\DriverCure" deleted "C:\Users\Eigenaar\AppData\Roaming\BabSolution" deleted "C:\Users\Eigenaar\AppData\Roaming\Delta" deleted "C:\Users\Eigenaar\AppData\Roaming\YourFileDownloader" deleted "C:\ProgramData\BitGuard" not deleted "C:\ProgramData\SpeedyPC Software" deleted "C:\ProgramData\Babylon" deleted "C:\Users\Eigenaar\AppData\Local\CRE" deleted "C:\Users\Eigenaar\AppData\Local\DownTango" deleted "C:\Users\Eigenaar\AppData\Local\Conduit" deleted "C:\Users\Eigenaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedyPC Software" deleted "C:\Users\Eigenaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard" deleted "C:\Users\Eigenaar\AppData\LocalLow\Conduit" deleted "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\ICQToolbarData" deleted "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\extensions\staged" deleted "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\CT2865317" deleted "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\extensions\ffxtlbr@delta.com" deleted "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\CT2865317" deleted "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\smartbar" deleted "C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default\extensions\ffxtlbr@delta.com" deleted "C:\ProgramData\BitGuard\2.6.1694.246" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}" not deleted "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings" not deleted ==== Firefox Extensions ====================== ProfilePath: C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default - Microsoft .NET Framework Assistant - %ProfilePath%\extensions\{20a82645-c095-46ed-80e3-08825760534b} - Adobe DLM powered by getPlusR - %ProfilePath%\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} - Charles Autoconfiguration - %ProfilePath%\extensions\{3e9a3920-1b27-11da-8cd6-0800200c9a66}.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - ICQ Toolbar - %AppDir%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} - Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\n0m1l7l1.default E5AF72B7353FF8D431A7C463A4229524 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll - Shockwave Flash 2C82D753EF779945977C82A3908DA20A - C:\Windows\SysWOW64\npDeployJava1.dll - Java Deployment Toolkit 7.0.90.5 0B31B0F8FA99CFD009C8FBEA9E20C9DE - C:\Users\Eigenaar\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin 9F8210675BD2ACC283959BB33F0307DF - C:\Windows\system32\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director 09B4E13D25623D879D35286E2D29FF13 - C:\Users\Eigenaar\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player FC5866F7793AF2CBCD425CC4B8D32A9E - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll - Zylom Plugin AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation DFCAB29E8FD38F95650CC1E203E8D318 - C:\Windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System ==== Deleting Files \ Folders ====================== "C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}" deleted ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions cjofdnhdkbflacojpfpkchgafjahijbb - C:\Users\Eigenaar\AppData\Local\CRE\cjofdnhdkbflacojpfpkchgafjahijbb.crx[] eooncjejnppfjjklapaamhcdmjbilmde - C:\Users\Eigenaar\AppData\Roaming\BabSolution\CR\Delta.crx[] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions cjofdnhdkbflacojpfpkchgafjahijbb - C:\Users\Eigenaar\AppData\Local\CRE\cjofdnhdkbflacojpfpkchgafjahijbb.crx[] Gamers Unite Snag Bar - Eigenaar - Default\Extensions\ncmdmcjifbkefpaijakdbgfjbpaonjhg TimelineRemove - Eigenaar - Default\Extensions\nfhopoibjodcfbppkiginpbcpekbdgln Chrome In-App Payments service - Eigenaar - Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Youtube MP3 Converter - Eigenaar - Default\Extensions\ocadpfiefijfmckhbfdcddbmoleckcac ==== Chrome Fix ====================== C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ct2865317.ourtoolbar.com_0.localstorage deleted successfully C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ct2865317.ourtoolbar.com_0.localstorage-journal deleted successfully C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_utorrentbarnl.ourtoolbar.com_0.localstorage deleted successfully C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_utorrentbarnl.ourtoolbar.com_0.localstorage-journal deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {09EA5DA2-15DF-3B4A-63C5-05D34E088B41} AVG Secure Search Url="http://search.avg.com/route/?d=4b3d2cf0&i=23&tp=chrome&q={searchTerms}&lng={language}&ychte=us&nt=1" {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchGol Url="http://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=022B001BFCFFF5B3&affID=120007&tsp=5020" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" {F69EC39A-EE15-442B-A1A3-CA89BF90E6A6} Web Search Url="http://ws.infospace.com/gamers_brw/ws/redir?_iceUrl=true&user_id=%userid&tool_id=%toolid&qkw={searchTerms}" ==== Deleting CLSID Registry Keys ====================== HKEY_CLASSES_ROOT\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully HKEY_CLASSES_ROOT\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\cjofdnhdkbflacojpfpkchgafjahijbb deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde deleted successfully HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\cjofdnhdkbflacojpfpkchgafjahijbb deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Eigenaar\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Eigenaar\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\Eigenaar\AppData\Local\Mozilla\Firefox\Profiles\n0m1l7l1.default\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Eigenaar\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.settings" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bl" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\dm" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\uninstall.exe" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\00" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\01" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\02" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\03" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\10" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\11" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\12" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\13" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\20" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\21" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\22" not found "C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\23" not found "C:\Users\Eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\ProgramData\BitGuard" not found ==== EOF on ma 30-09-2013 at 0:28:25,82 ======================