[code] HitmanPro 3.7.9.216 www.hitmanpro.com Computer name . . . . : BERNADETTE-PC Windows . . . . . . . : 6.1.1.7601.X64/2 User name . . . . . . : Bernadette-PC\Bernadette UAC . . . . . . . . . : Enabled License . . . . . . . : Free Scan date . . . . . . : 2014-06-09 21:03:15 Scan mode . . . . . . : Normal Scan duration . . . . : 6m 27s Disk access mode . . : Direct disk access (SRB) Cloud . . . . . . . . : Internet Reboot . . . . . . . : No Threats . . . . . . . : 0 Traces . . . . . . . : 278 Objects scanned . . . : 1.954.484 Files scanned . . . . : 48.102 Remnants scanned . . : 357.143 files / 1.549.239 keys Potential Unwanted Programs _________________________________________________ C:\Program Files (x86)\Ask.com\ (AskBar) C:\Program Files (x86)\Ask.com\assets\oobe\ (AskBar) C:\Program Files (x86)\Ask.com\assets\oobe\b.png (AskBar) C:\Program Files (x86)\Ask.com\assets\oobe\bl.png (AskBar) C:\Program Files (x86)\Ask.com\assets\oobe\br.png (AskBar) C:\Program Files (x86)\Ask.com\assets\oobe\l.png (AskBar) C:\Program Files (x86)\Ask.com\assets\oobe\pointer.png (AskBar) C:\Program Files (x86)\Ask.com\assets\oobe\r.png (AskBar) C:\Program Files (x86)\Ask.com\assets\oobe\t.png (AskBar) C:\Program Files (x86)\Ask.com\assets\oobe\tl.png (AskBar) C:\Program Files (x86)\Ask.com\assets\oobe\tr.png (AskBar) C:\Program Files (x86)\Ask.com\cobrand.ico (AskBar) C:\Program Files (x86)\Ask.com\config.xml (AskBar) C:\Program Files (x86)\Ask.com\favicon.ico (AskBar) C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (AskBar) Size . . . . . . . : 1.519.272 bytes Age . . . . . . . : 791.1 days (2012-04-09 17:43:36) Entropy . . . . . : 6.8 SHA-256 . . . . . : 5BCE03BCF5D6B59029688A5E9A4FEA1B73188D87261B7C97847280ED92F1D47C Product . . . . . : Toolbar Publisher . . . . : Ask Description . . . : Ask Toolbar Version . . . . . : 5.15.1.22229 Copyright . . . . : (c) Ask. All rights reserved. RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -17.0 Startup HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D4027C7F-154A-4066-A1AD-4243D8127440} HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\SOFTWARE\Microsoft\Internet Explorer\UrlSearchHooks\{00000000-6E41-4FD3-8538-502F5495E5FC} References HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ HKLM\SOFTWARE\Wow6432Node\Classes\GenericAskToolbar.ToolbarWnd.1\ HKLM\SOFTWARE\Wow6432Node\Classes\GenericAskToolbar.ToolbarWnd\ HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}\ HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}\ HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}\ C:\Program Files (x86)\Ask.com\mupcfg.xml (AskBar) C:\Program Files (x86)\Ask.com\precache.exe (AskBar) Size . . . . . . . : 70.824 bytes Age . . . . . . . : 791.1 days (2012-04-09 17:43:42) Entropy . . . . . : 6.4 SHA-256 . . . . . : 42D3254F9FF8BA74382E93953E6EC899FDB5185E1EA03964DA8591F9D5AAF79D RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -9.0 C:\Program Files (x86)\Ask.com\SaUpdate.exe (AskBar) Size . . . . . . . : 196.776 bytes Age . . . . . . . : 791.1 days (2012-04-09 17:43:40) Entropy . . . . . : 6.6 SHA-256 . . . . . : B4829BC036C96719C7B4620240839B073264586E90BE2322552D5BC18C1234D5 RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -9.0 C:\Program Files (x86)\Ask.com\Updater\ (AskBar) C:\Program Files (x86)\Ask.com\Updater\config.xml (AskBar) C:\Program Files (x86)\Ask.com\Updater\Updater.exe (AskBar) Size . . . . . . . : 1.557.160 bytes Age . . . . . . . : 791.1 days (2012-04-09 17:43:42) Entropy . . . . . : 6.1 SHA-256 . . . . . : 6972803194E3E6FC362FE3C39E4B086860AF2803A50863D7553078B1265E0AA1 Product . . . . . : Updater Publisher . . . . : Ask Description . . . : Ask Updater Version . . . . . : 5.15.1.22229 Copyright . . . . : (c) Ask. All rights reserved. RSA Key Size . . . : 2048 Authenticode . . . : Valid Running processes : 4116 Fuzzy . . . . . . : -17.0 C:\Program Files (x86)\Ask.com\UpdateTask.exe (AskBar) Size . . . . . . . : 135.336 bytes Age . . . . . . . : 791.1 days (2012-04-09 17:43:40) Entropy . . . . . : 6.5 SHA-256 . . . . . : 40724F60ED9D85A461F0EE9F1A3A12E36439EF9E8C56AB3AC49D99955823D10E RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -11.0 Startup C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar C:\Program Files (x86)\Conduit\ (Conduit) C:\Program Files (x86)\Conduit\Community Alerts\ (Conduit) C:\Program Files (x86)\Conduit\Community Alerts\Alert.dll (Conduit) Size . . . . . . . : 638.560 bytes Age . . . . . . . : 774.2 days (2012-04-26 16:43:04) Entropy . . . . . : 6.4 SHA-256 . . . . . : F22E58CDFE94D4A5FBBF2795A743B167ED9923E289E14654631E0077DD306C1D Product . . . . . : Alert Publisher . . . . : Conduit Ltd. Description . . . : Alert Version . . . . . : 1.1.4.1 Copyright . . . . : Copyright © Conduit Ltd. 2011. RSA Key Size . . . : 1024 Authenticode . . . : Valid Fuzzy . . . . . . : -7.0 C:\Program Files (x86)\Vid-Saver\ (VidSaver) C:\Program Files (x86)\Vid-Saver\Uninstall.exe (VidSaver) Size . . . . . . . : 496.232 bytes Age . . . . . . . : 774.2 days (2012-04-26 16:42:41) Entropy . . . . . : 7.9 SHA-256 . . . . . : 52A7639B74AA1482A7C59DEAF63961290FAE175B76DD0A668BA2DA0F1562727E Product . . . . . : Vid-Saver Publisher . . . . : 215 Apps Description . . . : Vid-Saver Installer Version . . . . . : 1.14.149.149 Copyright . . . . : Copyright 215 Apps Fuzzy . . . . . . : -4.0 C:\Program Files (x86)\Vid-Saver\Vid-Saver.ico (VidSaver) C:\Program Files (x86)\Vid-Saver\Vid-Saver.ini (VidSaver) C:\Program Files (x86)\Vid-Saver\Vid-SaverGui.exe (VidSaver) Size . . . . . . . : 2.096.984 bytes Age . . . . . . . : 774.2 days (2012-04-26 16:42:40) Entropy . . . . . : 5.7 SHA-256 . . . . . : 24F6CB02A77ECA26F4F46090C5970F17B19A0A711EB1A0E3B45363A65E4EB986 Product . . . . . : Vid-Saver Publisher . . . . : 215 Apps Description . . . : Vid-Saver exe Version . . . . . : 1.1.143.19 Copyright . . . . : Copyright 2011 RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -15.0 C:\Program Files (x86)\Vid-Saver\Vid-SaverInstaller.log (VidSaver) C:\ProgramData\Ask\ (AskBar) C:\Users\Bernadette\AppData\Local\Conduit\ (Conduit) C:\Users\Bernadette\AppData\Local\Conduit\APISupport\ (Conduit) C:\Users\Bernadette\AppData\Local\Conduit\APISupport\APISupport.dll (Conduit) Size . . . . . . . : 766.240 bytes Age . . . . . . . : 98.3 days (2014-03-03 14:14:30) Entropy . . . . . : 6.5 SHA-256 . . . . . : 2E41408B9B914E0D75AD4953DB9FBF8F636AF6523F423D3EF173BDC4830765B9 Product . . . . . : APISupport Publisher . . . . : Conduit Ltd. Description . . . : APISupport Version . . . . . : 2.0.5.9 Copyright . . . . : Copyright © 2014 All Rights Reserved RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -7.0 C:\Users\Bernadette\AppData\Local\Conduit\APISupport\APISupport.old (Conduit) Size . . . . . . . : 758.560 bytes Age . . . . . . . : 98.3 days (2014-03-03 14:14:30) Entropy . . . . . : 6.5 SHA-256 . . . . . : 56B162851E3D1E91493F3D1612D32C2872E0F6E0DEC9E551A069788CAC0588B6 Product . . . . . : APISupport Publisher . . . . : Conduit Ltd. Description . . . : APISupport Version . . . . . : 2.0.4.3 Copyright . . . . : Copyright © 2014 All Rights Reserved RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -3.0 C:\Users\Bernadette\AppData\Local\Conduit\APISupport\APISupport_2.0.4.3\ (Conduit) C:\Users\Bernadette\AppData\Local\Conduit\APISupport\APISupport_2.0.4.3\ApiSupport.dll (Conduit) Size . . . . . . . : 758.560 bytes Age . . . . . . . : 98.3 days (2014-03-03 14:14:41) Entropy . . . . . : 6.5 SHA-256 . . . . . : 56B162851E3D1E91493F3D1612D32C2872E0F6E0DEC9E551A069788CAC0588B6 Product . . . . . : APISupport Publisher . . . . : Conduit Ltd. Description . . . : APISupport Version . . . . . : 2.0.4.3 Copyright . . . . : Copyright © 2014 All Rights Reserved RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -7.0 C:\Users\Bernadette\AppData\Local\Conduit\APISupport\APISupport_2.0.5.9\ (Conduit) C:\Users\Bernadette\AppData\Local\Conduit\APISupport\APISupport_2.0.5.9\ApiSupport.dll (Conduit) Size . . . . . . . : 766.240 bytes Age . . . . . . . : 83.9 days (2014-03-17 22:28:40) Entropy . . . . . : 6.5 SHA-256 . . . . . : 2E41408B9B914E0D75AD4953DB9FBF8F636AF6523F423D3EF173BDC4830765B9 Product . . . . . : APISupport Publisher . . . . : Conduit Ltd. Description . . . : APISupport Version . . . . . : 2.0.5.9 Copyright . . . . : Copyright © 2014 All Rights Reserved RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -7.0 C:\Users\Bernadette\AppData\Local\Conduit\APISupport\MiniSP_1.0.2.76\ (Conduit) C:\Users\Bernadette\AppData\Local\Conduit\APISupport\MiniSP_1.0.2.76\Cvc.dat (Conduit) C:\Users\Bernadette\AppData\Local\Conduit\APISupport\MiniSP_1.0.2.76\MiniSP.dll (Conduit) Size . . . . . . . : 2.604.320 bytes Age . . . . . . . : 98.3 days (2014-03-03 14:14:44) Entropy . . . . . : 6.2 SHA-256 . . . . . : 9E6EFF844CF92301697CF8F628CDB082A55C38B23E244C7B8EE5067BA53A264E Product . . . . . : MiniSp Publisher . . . . : Conduit Description . . . : MiniSp by Conduit Version . . . . . : 1.0.2.76 Copyright . . . . : 2014 (c) Conduit. All rights reserved. RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -7.0 C:\Users\Bernadette\AppData\Local\Conduit\APISupport\MiniSP_1.0.2.76\rep.dat (Conduit) C:\Users\Bernadette\AppData\Local\TB\ (Conduit) C:\Users\Bernadette\AppData\Local\TB\APISupport\ (Conduit) C:\Users\Bernadette\AppData\Local\TB\APISupport\APISupport.dll (Conduit) Size . . . . . . . : 1.036.096 bytes Age . . . . . . . : 56.4 days (2014-04-14 11:26:42) Entropy . . . . . : 6.5 SHA-256 . . . . . : 8AE99B1B6CC6BB616FA54AEB9EF9832E74A7BDAD76CAB710C79FBD5647C5ABD9 Product . . . . . : APISupport Publisher . . . . : ClientConnect Ltd. Description . . . : APISupport Version . . . . . : 2.3.4.8 Copyright . . . . : © 2014 ClientConnect Ltd. RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : 0.0 Startup HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\APISupport C:\Users\Bernadette\AppData\Local\TB\APISupport\APISupport.old (Conduit) Size . . . . . . . : 1.032.000 bytes Age . . . . . . . : 56.4 days (2014-04-14 11:26:42) Entropy . . . . . : 6.5 SHA-256 . . . . . : 901F8A3EFFA5BD68B72BAD0F6C4F8C3BA9A0DF6C0744DE37B5D0B5B5F170B0E5 Product . . . . . : APISupport Publisher . . . . : ClientConnect Ltd. Description . . . : APISupport Version . . . . . : 2.3.4.7 Copyright . . . . : © 2014 ClientConnect Ltd. RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -3.0 C:\Users\Bernadette\AppData\Local\TB\APISupport\MiniSP_1.0.2.133\ (Conduit) C:\Users\Bernadette\AppData\Local\TB\APISupport\MiniSP_1.0.2.133\Cvc.dat (Conduit) C:\Users\Bernadette\AppData\Local\TB\APISupport\MiniSP_1.0.2.133\MiniSP.dll (Conduit) Size . . . . . . . : 2.615.104 bytes Age . . . . . . . : 24.5 days (2014-05-16 09:10:12) Entropy . . . . . : 6.2 SHA-256 . . . . . : CFD251DF8C6B4CEDB4943DD05CA80B900E847F7E72ACF421CB138205252DB228 Product . . . . . : MiniSp Publisher . . . . : ClientConnect Description . . . : MiniSp Version . . . . . : 1.0.2.133 Copyright . . . . : 2014 (c) ClientConnect Ltd. RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -7.0 Forensic Cluster -1.5s C:\Users\Bernadette\AppData\Local\TB\APISupport\MiniSP_1.0.2.133\ -0.3s C:\Users\Bernadette\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P2XF2C2G\MiniSP[2].dll 0.0s C:\Users\Bernadette\AppData\Local\TB\APISupport\MiniSP_1.0.2.133\MiniSP.dll C:\Users\Bernadette\AppData\Local\TB\APISupport\MiniSP_1.0.2.133\rep.dat (Conduit) C:\Users\Bernadette\AppData\Local\Vid-Saver\ (VidSaver) C:\Users\Bernadette\AppData\Local\Vid-Saver\Chrome\ (VidSaver) C:\Users\Bernadette\AppData\Local\Vid-Saver\Chrome\Vid-Saver.crx (VidSaver) C:\Users\Bernadette\AppData\LocalLow\AskToolbar\ (AskBar) C:\Users\Bernadette\AppData\LocalLow\AskToolbar\accl.xml (AskBar) C:\Users\Bernadette\AppData\LocalLow\AskToolbar\APNU\ (AskBar) C:\Users\Bernadette\AppData\LocalLow\AskToolbar\APNU\config.xml (AskBar) C:\Users\Bernadette\AppData\LocalLow\AskToolbar\cache.dat (AskBar) C:\Users\Bernadette\AppData\LocalLow\AskToolbar\config.xml (AskBar) C:\Users\Bernadette\AppData\LocalLow\AskToolbar\osearch.xml (AskBar) C:\Users\Bernadette\AppData\LocalLow\AskToolbar\setup.exe (AskBar) Size . . . . . . . : 3.943.592 bytes Age . . . . . . . : 892.4 days (2011-12-30 11:59:54) Entropy . . . . . : 7.7 SHA-256 . . . . . : 85DEEFC0AA0409241D93B251F906CB07D9A83E1077F731441C17698E8D55A1EA Product . . . . . : Ask Toolbar Publisher . . . . : Ask Description . . . : Wrapper Application Version . . . . . : 1.15.1.0 Copyright . . . . : Copyright (C) 2012 Ask.com. RSA Key Size . . . : 2048 Authenticode . . . : Valid Fuzzy . . . . . . : -7.0 C:\Users\Bernadette\AppData\LocalLow\Conduit\ (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\ (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.1000034.Settings.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.1000234.weatherData.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.129363015615338104.search.selectedEngineId.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.129363015615338104.search.settings.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.130055909048847312.mam_gk_userId.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.5397019970362056034.feed_2429156812186649977.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.5397019970362056034.feed_2429156813040823546.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.5397019970362056034.feed_2429156813130095866.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.5397019970362056034.feed_2429156813224203613.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.5397019970362056034.feed_2429156813230837251.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.5397019970362056034.feed_2429156813454291735.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.5397019970362056034.feed_2429156813729834876.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.5397019970362056034.feed_2429156813860870021.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.5397019970362056034.feed_2429156814264681793.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.5397019970362056034.feed_2429156814863075366.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.5397019970362056034.feed_2429156815257761081.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.appOptions.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.NOTIFICATION_ID.notifications-repository.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.NOTIFICATION_ID.notifications-service_1257316.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.NOTIFICATION_ID.notifications-servicemap.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.NotificationSettings.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.pg_conf_global.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317.serviceLayer_service_login_isFirstLoginInvoked.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_10.20.101.5.serviceLayer_services_appsMetadata.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_10.20.101.5.serviceLayer_services_appTrackingFirstTime.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_10.20.101.5.serviceLayer_services_Configuration.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_10.20.101.5.serviceLayer_services_gottenAppsContextMenu.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_10.20.101.5.serviceLayer_services_login.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_10.20.101.5.serviceLayer_services_otherAppsContextMenu.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_10.20.101.5.serviceLayer_services_searchAPI.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_10.20.101.5.serviceLayer_services_serviceMap.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_10.20.101.5.serviceLayer_services_toolbarContextMenu.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_10.20.101.5.serviceLayer_services_toolbarSettings.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_10.20.101.5.serviceLayer_services_translation.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_RAW.serviceLayer_services_appsMetadata.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_RAW.serviceLayer_services_appTrackingFirstTime.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_RAW.serviceLayer_services_Configuration.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_RAW.serviceLayer_services_gottenAppsContextMenu.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_RAW.serviceLayer_services_login.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_RAW.serviceLayer_services_otherAppsContextMenu.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_RAW.serviceLayer_services_searchAPI.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_RAW.serviceLayer_services_serviceMap.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_RAW.serviceLayer_services_toolbarContextMenu.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_RAW.serviceLayer_services_toolbarSettings.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\CT2865317_RAW.serviceLayer_services_translation.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\serviceLayer_userApps_added.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\toolbar_initializing_logger.txt.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\ToolbarFullUserID.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\ToolbarUserID.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\uninstallData.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\ChromeExtData\cjofdnhdkbflacojpfpkchgafjahijbb\Repository\uninstallUrl.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\ (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\ (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\AppNotification.js (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\ (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\close.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\ (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\close.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Next.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Next_hover.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\powered-by.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Prev.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Prev_hover.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\settings.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\ (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\close.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Next.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Next_hover.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\powered-by.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Prev.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Prev_hover.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\settings.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Thumbs.db (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\like.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Next.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Next_hover.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\powered-by.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Prev.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Prev_hover.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\settings.png (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Thumbs.db (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\initialNotification.html (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\main.html (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\NotificationDialogStyle.css (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\sampleNotification.html (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\DialogsAPI.js (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\PIE.htc (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\settings.js (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Dialogs\version.txt (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Feeds\ (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1257316_1252989_NL.xml (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\LanguagePacks\ (Conduit) C:\Users\Bernadette\AppData\LocalLow\Conduit\Community Alerts\LanguagePacks\en.xml (Conduit) C:\Users\Bernadette\AppData\LocalLow\IAC\ (MindSpark) C:\Users\Bernadette\AppData\LocalLow\PriceGong\ (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\ (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\1.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\11323.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\12187.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\15407.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\16666.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\16881.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\16993.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\17444.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\17541.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\17565.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\17781.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\2229.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\2258.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\2914.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\3027.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\371.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\4489.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\459.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\4703.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\6205.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\6209.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\6973.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\7051.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\7251.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\83.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\a.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\b.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\c.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\d.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\e.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\f.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\g.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\h.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\i.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\j.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\k.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\l.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\m.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\mru.xml (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\n.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\o.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\p.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\q.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\r.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\s.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\t.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\u.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\v.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\w.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\wlu.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\x.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\y.txt (PriceGong) C:\Users\Bernadette\AppData\LocalLow\PriceGong\Data\z.txt (PriceGong) C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\ (AskBar) C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\1043.MST (AskBar) C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\ARPPRODUCTICON.exe (AskBar) Size . . . . . . . : 102.400 bytes Age . . . . . . . : 949.5 days (2011-11-03 10:09:26) Entropy . . . . . : 6.1 SHA-256 . . . . . : 092D64E5DB4FA21D6719B3A6A30AD06A2CB0E1F897357CD4935BECA52E921274 Product . . . . . : InstallShield Publisher . . . . : Acresso Software Inc. Description . . . : InstallShield Version . . . . . : 16.0.328 Copyright . . . . : Copyright (C) 2009 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved. Fuzzy . . . . . . : 0.0 C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar (AskBar) HKLM\SOFTWARE\Classes\CrossriderApp0003491.BHO\ (VidSaver) HKLM\SOFTWARE\Classes\CrossriderApp0003491.Sandbox.1\ (VidSaver) HKLM\SOFTWARE\Classes\CrossriderApp0003491.Sandbox\ (VidSaver) HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1\ (AskBar) HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd\ (AskBar) HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9\ (AskBar) HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055345591}\ (VidSaver) HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066346691}\ (VidSaver) HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220022342291}\ (VidSaver) HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}\ (Rocketfuel) HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ (AskBar) HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550055345591}\ (VidSaver) HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660066346691}\ (VidSaver) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar\ (AskBar) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7\ (AskBar) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8\ (AskBar) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01\ (AskBar) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED\ (AskBar) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472\ (AskBar) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296\ (AskBar) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888\ (AskBar) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF\ (AskBar) HKLM\SOFTWARE\Wow6432Node\Conduit\ (Conduit) HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgmfkblbflahhponhjmkcnpjinenhlnc\ (VidSaver) HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}\ (AskBar) HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{75b4241f-171e-44a3-bf44-23613b6e3e03}\ (AskBar) HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{D4027C7F-154A-4066-A1AD-4243D8127440} (AskBar) HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASAPI32\ (AskBar) HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AskPartnerCobrandingTool_RASMANCS\ (AskBar) HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ (AskBar) HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011341191}\ (VidSaver) HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Vid-Saver\ (VidSaver) HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\ (AskBar) HKLM\SOFTWARE\Wow6432Node\Systweak\RegClean Pro\ (RegClean Pro) HKU\.DEFAULT\Software\AskToolbar\ (AskBar) HKU\S-1-5-18\Software\AskToolbar\ (AskBar) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\AppDataLow\Software\AskToolbar\ (AskBar) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\AppDataLow\Software\Conduit\ (Conduit) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\AppDataLow\Software\Crossrider\ (iPumper) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\AppDataLow\Software\PriceGong\ (PriceGong) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\AppDataLow\Software\Smartbar\ (Conduit) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\Ask.com\ (AskBar) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\Conduit\ (Conduit) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\Cr_Installer\3491\ (VidSaver) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\ImInstaller\ (Sweetpacks) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}\ (AskBar) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\Microsoft\Internet Explorer\SearchScopes\{75b4241f-171e-44a3-bf44-23613b6e3e03}\ (AskBar) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\Microsoft\Internet Explorer\SearchScopes\{C6D0C577-3AC3-49D0-BE9B-6A62F9A1A8A3}\ (Conduit) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D4027C7F-154A-4066-A1AD-4243D8127440} (AskBar) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}\ (AskBar) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}\ (AskBar) HKU\S-1-5-21-3468268236-3224893684-4235404376-1000\Software\Softonic\ (Softonic) Cookies _____________________________________________________________________ C:\Users\Bernadette\AppData\Local\Google\Chrome\User Data\Default\Cookies:2o7.net C:\Users\Bernadette\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.yieldmanager.com C:\Users\Bernadette\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net C:\Users\Bernadette\AppData\Local\Google\Chrome\User Data\Default\Cookies:in.getclicky.com C:\Users\Bernadette\AppData\Local\Google\Chrome\User Data\Default\Cookies:nl.sitestat.com C:\Users\Bernadette\AppData\Local\Google\Chrome\User Data\Default\Cookies:philips.112.2o7.net C:\Users\Bernadette\AppData\Local\Google\Chrome\User Data\Default\Cookies:xiti.com C:\Users\Bernadette\AppData\Roaming\Microsoft\Windows\Cookies\USP6QQC0.txt [/code]