warning boxes popping up computer to become non responsive and fre

Started by mare_wbpa, June 04, 2013, 01:24:23 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Print
Go Down Pages1 2 3 ... 10
User actions

mare_wbpa

June 04, 2013, 01:24:23 AM
Need your help again RC. I'm getting warning boxes popping up that cause my computer to become non responsive and freeze up for sometimes several mins at a time. One box is the Unresponsive plugin box, the other is Unresponsive script. I tried to get email support from HP as I have in the past, but I'm getting a message that my machine is out of warranty. It's was out of warranty for yrs but I was still able to get email support, no longer. I have a Compaq Presario, approx 7 yrs old, with (don't laugh) 512MB Mem, 180GB hard drive with 140 free GBs, Firefox is my browser. Any suggestions?

mare_wbpa

#1
June 04, 2013, 02:23:48 AM
This is what I wanted to post.

I'm getting warning boxes popping up that cause my computer to become non responsive and freeze up for sometimes several mins at a time. One box is the Unresponsive plugin box, the other is Unresponsive script.
I have a Compaq Presario desktop, approx 7 yrs old, with
512MB Mem, 180GB hard drive with 140 free GBs, Firefox is my browser. I updated several pluguns with no improvement.  I attempted to update to SP3 X2, .  It completed the install the 1st time but when it restarted there was a loop from the opening page right to the Safe Mode page.  I did a system restore.  2nd attempt wouldn't finish after 8 hrs.  I shut down and restarted to the same loop as after the 1st install try, another system restore.  I updated and ran Malwarebytse, found 5 threats and removed them. I downloaded and ran Spyware blaster.  O hope all of the information ypu need is enclosed.  I also downloaded the KB 953356 patch for the AMD processor b$ doing the SP3.   Thanks in advance.
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702
Run by Compaq_Owner at 20:36:21 on 2013-06-03
Microsoft Windows XP Home Edition  5.1.2600.2.1252.1.1033.18.383.22 [GMT -4:00]
.
AV: AVG AntiVirus Free Edition 2013 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ================
.
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Garmin\Lifetime Updater\GarminLifetime.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\program files\real\realplayer\update\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\All Users\Application Data\OfficeGuardianV2N\reminder\SacReminder.exe
C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe
C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
C:\Program Files\Stickies\stickies.exe
C:\Program Files\Bonjour\mDNSResponder.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\Documents and Settings\All Users\Application Data\OfficeGuardianV2N\Reminder\SacNetAgent.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.yahoo.com/
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=presario&pf=desktop
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://toolbar.inbox.com/search/ie.aspx?tbid=80114
mCustomizeSearch = hxxp://toolbar.inbox.com/help/sa_customize.aspx?tbid=80114
uURLSearchHooks: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: MSS+ Identifier: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - c:\program files\mcafee security scan\3.0.318\McAfeeMSS_IE.dll
BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\documents and settings\all users\application data\realnetworks\realdownloader\browserplugins\ie\rndlbrowserrecordplugin.dll
BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -
BHO: Search Helper: {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: WitBHO Class: {75ED56AF-4DC9-4243-A30C-4EF4DD0CA28F} - c:\program files\chameleontom\wit4ie.dll
BHO: {95B7759C-8C7F-4BF1-B163-73684A933233} - <orphaned>
TB: &Google: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
TB: &Windows Live Toolbar: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: &Google: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
TB: &Windows Live Toolbar: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr .exe" /background
uRun: [Uniblue RegistryBooster 2] c:\program files\uniblue\registrybooster 2\RegistryBooster.exe /S
uRun: [SacReminderHDDV2N] c:\documents and settings\all users\application data\officeguardianv2n\reminder\SacReminder.exe
mRun: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon
mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Garmin Lifetime Updater] c:\program files\garmin\lifetime updater\GarminLifetime.exe /StartMinimized
mRun: [AVG_UI] "c:\program files\avg\avg2013\avgui.exe" /TRAYONLY
mRun: [vProt] "c:\program files\avg secure search\vprot.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe"  -osboot
mRunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/ww.special-uninstallation-feedback-appf?lic=NFVWSzItQUxZTUYtU0xLTFUtQVoyVUItNkdPS0ItSkhGTkg"&"inst=NzctNDgwNjAyMDYyLVQxLUJBKzEtS1YzKzctWEwrMS1VQ0FMTCsxLVVDQUxMMisyLVRCOCsyLUZMKzgtRjEwTSs1LVFJWDErNC1YMjAxMCsyLUYxME0xMEQrMS1MSUMrNw"&"prod=90"&"ver=10.0.1204
dRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil10c.exe
StartupFolder: c:\docume~1\compaq~1\startm~1\programs\startup\canoni~1.lnk - c:\windows\system32\rundll32.exe
StartupFolder: c:\docume~1\compaq~1\startm~1\programs\startup\stickies.lnk - c:\program files\stickies\stickies.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\compaq~1.lnk - c:\program files\compaq connections\6750491\program\Compaq Connections.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\3.0.318\SSScheduler.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
uPolicies-System: EnableProfileQuota = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: Add To Compaq Organize... - c:\progra~1\hewlet~1\compaq~1\bin/module.main/favorites\ie_add_to.html
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office11\EXCEL.EXE/3000
IE: {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\chameleontom\ct.htm
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: NameServer = 192.168.2.1 24.229.54.212 216.144.187.199 204.186.80.229
TCP: Interfaces\{14D9CC6F-26E4-4C91-A6EC-9E1BA6683FAC} : DHCPNameServer = 192.168.2.1 24.229.54.212 216.144.187.199 204.186.80.229
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\15.2.0\ViProtocol.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\compaq_owner\application data\mozilla\firefox\profiles\gbhvogpj.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3294791&CUI=UN12355583662464419&UM=2&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - www.yahoo.com
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3294791&SearchSource=2&CUI=UN12355583662464419&UM=2&q=
FF - prefs.js: network.proxy.type - 0
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff10.dll
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff4.dll
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff5.dll
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff6.dll
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff7.dll
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff8.dll
FF - component: c:\program files\avg\avg2012\firefox4\components\avgssff9.dll
FF - plugin: c:\documents and settings\all users\application data\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlchromebrowserrecordext.dll
FF - plugin: c:\documents and settings\all users\application data\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlhtml5videoshim.dll
FF - plugin: c:\documents and settings\all users\application data\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlpepperflashvideoshim.dll
FF - plugin: c:\documents and settings\all users\application data\realnetworks\realdownloader\browserplugins\npdlplugin.dll
FF - plugin: c:\documents and settings\compaq_owner\application data\move networks\plugins\npqmp071503000010.dll
FF - plugin: c:\documents and settings\compaq_owner\application data\move networks\plugins\npqmp071505000011.dll
FF - plugin: c:\documents and settings\compaq_owner\application data\mozilla\firefox\profiles\gbhvogpj.default\extensions\{195a3098-0bd5-4e90-ae22-ba1c540afd1e}\plugins\npGarmin.dll
FF - plugin: c:\documents and settings\compaq_owner\application data\mozilla\firefox\profiles\gbhvogpj.default\extensions\{7f3f960e-a836-45ca-8911-0accb522246e}\plugins\np-mswmp.dll
FF - plugin: c:\documents and settings\compaq_owner\application data\mozilla\firefox\profiles\gbhvogpj.default\extensions\{7f3f960e-a836-45ca-8911-0accb522246e}\plugins\npConduitFirefoxPlugin.dll
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\common files\avg secure search\sitesafetyinstaller\15.2.0\npsitesafety.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\mcafee security scan\3.0.318\npMcAfeeMSS.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.20125.0\npctrlui.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nprpplugin.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_7_700_202.dll
FF - ExtSQL: 2013-04-13 21:42; rapportive@rapportive.com; c:\documents and settings\compaq_owner\application data\mozilla\firefox\profiles\gbhvogpj.default\extensions\rapportive@rapportive.com
FF - ExtSQL: 2013-04-13 21:44; newtabgoogle@graememcc.co.uk; c:\documents and settings\compaq_owner\application data\mozilla\firefox\profiles\gbhvogpj.default\extensions\newtabgoogle@graememcc.co.uk.xpi
FF - ExtSQL: 2013-05-22 11:15; {7f3f960e-a836-45ca-8911-0accb522246e}; c:\documents and settings\compaq_owner\application data\mozilla\firefox\profiles\gbhvogpj.default\extensions\{7f3f960e-a836-45ca-8911-0accb522246e}
FF - ExtSQL: 2013-05-22 19:52; {FCE04E1F-9378-4f39-96F6-5689A9159E45}; c:\documents and settings\all users\application data\realnetworks\realdownloader\browserplugins\firefox\Ext
FF - ExtSQL: !HIDDEN! 2009-09-01 21:11; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
.
---- FIREFOX POLICIES ----
FF - user.js: extensions.autoDisableScopes - 0
FF - user.js: extensions.shownSelectionUI - true
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2012-4-19 60216]
R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2012-9-21 245048]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-3-1 96568]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-1-19 39224]
R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2011-12-23 208184]
R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2011-12-23 22328]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-1-7 170808]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-2-10 182072]
R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2012-12-11 37664]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2013\avgidsagent.exe [2013-5-14 4937264]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg2013\avgwdsvc.exe [2013-4-18 283136]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-3-9 55152]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 fsssvc;Windows Live Family Safety;c:\program files\windows live\family safety\fsssvc.exe [2009-2-6 533360]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\3.0.318\McCHSvc.exe [2013-2-5 235216]
.
=============== Created Last 30 ================
.
2013-06-03 23:42:06   --------   d-----w-   c:\windows\system32\wbem\repository\FS
2013-06-03 23:42:06   --------   d-----w-   c:\windows\system32\wbem\Repository
2013-06-03 23:36:22   --------   d-----w-   c:\windows\system32\CatRoot_bak
2013-06-03 15:59:14   --------   d-----w-   c:\program files\SpywareBlaster
2013-06-02 16:20:57   19569   ----a-w-   c:\windows\005403_.tmp
2013-06-02 15:57:25   --------   d-----w-   C:\8b92052dd8fbc345a9bdf0e9
2013-05-31 00:45:17   --------   d-----w-   c:\documents and settings\compaq_owner\local settings\application data\Wildtangent
2013-05-31 00:45:11   --------   d-----w-   c:\windows\wt
2013-05-31 00:45:06   --------   d-----w-   c:\program files\McAfee Security Scan
2013-05-31 00:45:06   --------   d-----w-   c:\documents and settings\all users\application data\McAfee Security Scan
2013-05-31 00:13:12   19528   ----a-w-   c:\windows\000001_.tmp
2013-05-30 23:57:50   --------   d-----w-   C:\d321eb98beeded867b1c1470
2013-05-28 21:52:09   --------   d-----w-   c:\windows\system32\scripting
2013-05-28 21:52:08   --------   d-----w-   c:\windows\l2schemas
2013-05-28 21:43:09   19569   ----a-w-   c:\windows\002709_.tmp
2013-05-24 17:41:26   --------   d-----w-   c:\program files\Norton Security Scan
2013-05-24 17:39:50   --------   d-----w-   c:\program files\NortonInstaller
2013-05-22 23:54:21   --------   d-----w-   c:\documents and settings\compaq_owner\application data\RealNetworks
2013-05-22 23:52:12   --------   d-----w-   c:\program files\RealNetworks
2013-05-22 23:51:53   --------   d-----w-   c:\documents and settings\all users\application data\RealNetworks
2013-05-22 23:51:21   --------   d-----w-   c:\program files\common files\xing shared
2013-05-22 23:50:51   153736   ----a-w-   c:\program files\mozilla firefox\plugins\nppl3260.dll
2013-05-22 23:50:40   124504   ----a-w-   c:\program files\mozilla firefox\plugins\nprpplugin.dll
2013-05-22 15:31:34   --------   d-----w-   c:\program files\Uninstaller
2013-05-22 15:23:33   --------   d-----w-   c:\program files\Uniblue
2013-05-22 15:21:24   --------   d-----w-   c:\program files\Vafmusic2
2013-05-22 15:17:10   --------   d-----w-   c:\program files\SearchProtect
2013-05-22 15:16:56   --------   d-----w-   c:\documents and settings\compaq_owner\local settings\application data\Strongvault Online Backup
2013-05-22 15:16:47   --------   d-----w-   c:\documents and settings\all users\application data\Strongvault Online Backup
2013-05-22 15:16:35   --------   d-----w-   c:\documents and settings\compaq_owner\local settings\application data\Strongvault
2013-05-22 15:15:52   --------   d-----w-   c:\program files\Strongvault Online Backup
2013-05-22 15:15:30   --------   d-----w-   c:\documents and settings\compaq_owner\application data\SearchProtect
2013-05-22 15:12:05   --------   d-----w-   c:\program files\Optimizer Pro
2013-05-22 15:09:52   --------   d-----w-   c:\documents and settings\compaq_owner\application data\Strongvault
2013-05-22 15:04:50   --------   d-----w-   c:\program files\SingAlong
2013-05-21 22:49:08   262552   ----a-w-   c:\program files\mozilla firefox\browser\components\browsercomps.dll
2013-05-11 10:37:28   209472   ----a-w-   c:\program files\mozilla firefox\plugins\nppdf32.dll
2013-05-11 10:37:28   209472   ----a-w-   c:\program files\internet explorer\plugins\nppdf32.dll
.
==================== Find3M  ====================
.
2013-05-28 21:55:49   45056   ----a-w-   c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\uninstallui\eHelpSetup.exe
2013-05-28 21:55:49   44032   ----a-w-   c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\scripts\devcon.exe
2013-05-22 23:50:10   348160   ----a-w-   c:\windows\system32\msvcr71.dll
2013-05-22 23:50:09   499712   ----a-w-   c:\windows\system32\msvcp71.dll
2013-05-21 00:06:25   37664   ----a-w-   c:\windows\system32\drivers\avgtpx86.sys
2013-05-15 01:31:11   71048   ----a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
2013-05-15 01:31:11   692104   ----a-w-   c:\windows\system32\FlashPlayerApp.exe
2013-04-04 18:50:32   22856   ----a-w-   c:\windows\system32\drivers\mbam.sys
2013-03-29 06:53:48   208184   ----a-w-   c:\windows\system32\drivers\avgidsdriverx.sys
2013-03-21 07:08:24   182072   ----a-w-   c:\windows\system32\drivers\avgtdix.sys
.
============= FINISH: 20:40:34.93 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume2
Install Date: 2/6/2009 12:16:06 AM
System Uptime: 6/3/2013 8:21:05 PM (0 hours ago)
.
Motherboard: ASUSTek Computer INC. |  | Salmon
Processor: AMD Athlon(tm) 64 Processor 3400+ | Socket 754 | 1808/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 180 GiB total, 125.155 GiB free.
D: is FIXED (FAT32) - 6 GiB total, 0.873 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is Removable
H: is Removable
I: is Removable
J: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP1322: 5/28/2013 7:18:30 PM - Installed Windows XP KB958690.
RP1323: 5/28/2013 7:26:50 PM - Installed Windows XP KB959426.
RP1324: 5/28/2013 7:31:29 PM - Installed Windows XP KB960225.
RP1325: 5/28/2013 7:35:26 PM - Installed Windows XP KB960803.
RP1326: 5/28/2013 7:40:13 PM - Installed Windows XP KB960859.
RP1327: 5/28/2013 7:45:56 PM - Installed Windows XP KB961118.
RP1328: 5/28/2013 7:49:36 PM - Installed Windows XP KB961371.
RP1329: 5/28/2013 7:52:19 PM - Installed Windows XP KB961373.
RP1330: 5/28/2013 7:54:31 PM - Installed Windows XP KB961501.
RP1331: 5/28/2013 7:57:23 PM - Installed Windows XP KB961503.
RP1332: 5/28/2013 7:59:27 PM - Installed Windows XP KB967715.
RP1333: 5/28/2013 8:01:44 PM - Installed Windows XP KB968389.
RP1334: 5/28/2013 8:03:46 PM - Installed Windows XP KB968537.
RP1335: 5/28/2013 8:06:55 PM - Installed Windows XP KB969059.
RP1336: 5/28/2013 8:12:26 PM - Installed Windows XP KB969947.
RP1337: 5/28/2013 8:16:01 PM - Installed Windows XP KB970238.
RP1338: 5/28/2013 8:18:37 PM - Installed Windows XP KB970430.
RP1339: 5/28/2013 8:21:22 PM - Installed Windows XP KB971468.
RP1340: 5/28/2013 8:26:23 PM - Installed Windows XP KB971486.
RP1341: 5/28/2013 8:31:29 PM - Installed Windows XP KB971557.
RP1342: 5/28/2013 8:35:18 PM - Installed Windows XP KB971633.
RP1343: 5/28/2013 8:39:19 PM - Installed Windows XP KB971657.
RP1344: 5/28/2013 8:41:12 PM - Installed Windows XP KB971737.
RP1345: 5/28/2013 8:47:00 PM - Installed Windows XP KB972270.
RP1346: 5/28/2013 8:51:06 PM - Installed Windows XP KB973354.
RP1347: 5/28/2013 8:54:48 PM - Installed Windows XP KB973507.
RP1348: 5/28/2013 8:56:55 PM - Installed Windows XP KB973687.
RP1349: 5/28/2013 8:58:40 PM - Installed Windows XP KB973815.
RP1350: 5/28/2013 9:00:27 PM - Installed Windows XP KB973869.
RP1351: 5/28/2013 9:01:58 PM - Installed Windows XP KB974112.
RP1352: 5/28/2013 9:03:29 PM - Installed Windows XP KB974318.
RP1353: 5/28/2013 9:06:59 PM - Installed Windows XP KB974392.
RP1354: 5/28/2013 9:11:17 PM - Installed Windows XP KB974571.
RP1355: 5/28/2013 9:13:08 PM - Installed Windows XP KB975025.
RP1356: 5/28/2013 9:15:14 PM - Installed Windows XP KB975467.
RP1357: 5/28/2013 9:17:08 PM - Installed Windows XP KB975560.
RP1358: 5/28/2013 9:18:54 PM - Installed Windows XP KB975561.
RP1359: 5/28/2013 9:21:09 PM - Installed Windows XP KB975562.
RP1360: 5/28/2013 9:23:09 PM - Installed Windows XP KB975713.
RP1361: 5/28/2013 9:25:20 PM - Installed Windows XP KB977165.
RP1362: 5/28/2013 9:27:01 PM - Installed Windows XP KB977914.
RP1363: 5/28/2013 9:28:40 PM - Installed Windows XP KB978037.
RP1364: 5/28/2013 9:30:27 PM - Installed Windows XP KB978251.
RP1365: 5/28/2013 9:32:36 PM - Installed Windows XP KB978338.
RP1366: 5/28/2013 9:34:31 PM - Installed Windows XP KB978542.
RP1367: 5/28/2013 9:36:42 PM - Installed Windows XP KB978601.
RP1368: 5/28/2013 9:40:06 PM - Installed Windows XP KB978706.
RP1369: 5/28/2013 9:42:57 PM - Installed Windows XP KB979309.
RP1370: 5/28/2013 9:44:22 PM - Installed Windows XP KB979482.
RP1371: 5/28/2013 9:45:44 PM - Installed Windows XP KB979559.
RP1372: 5/28/2013 9:47:10 PM - Installed Windows XP KB979683.
RP1373: 5/28/2013 9:48:49 PM - Installed Windows XP KB980218.
RP1374: 5/28/2013 9:50:13 PM - Installed Windows XP KB980232.
RP1375: 5/29/2013 9:52:39 AM - Restore Operation
RP1376: 5/30/2013 2:04:29 PM - System Checkpoint
RP1377: 5/30/2013 5:42:17 PM - Installed Windows XP KB953356.
RP1378: 5/30/2013 8:13:36 PM - Installed Windows XP Service Pack 2.
RP1379: 5/30/2013 8:40:43 PM - Restore Operation
RP1380: 5/31/2013 7:31:54 PM - Installed Windows XP KB953356.
RP1381: 5/31/2013 7:37:34 PM - before XP3
RP1382: 6/1/2013 3:43:31 PM - Restore Operation
RP1383: 6/2/2013 11:55:48 AM - before sp3
RP1384: 6/2/2013 12:21:29 PM - Installed Windows XP Service Pack 3.
RP1385: 6/2/2013 1:19:02 PM - Installed Windows XP KB2229593.
RP1386: 6/2/2013 1:21:51 PM - Installed Windows XP KB923561.
RP1387: 6/2/2013 1:28:12 PM - Installed Windows XP KB938464.
RP1388: 6/2/2013 1:39:26 PM - Installed Windows XP KB946648.
RP1389: 6/2/2013 1:44:22 PM - Installed Windows XP KB950762.
RP1390: 6/2/2013 1:47:18 PM - Installed Windows XP KB950974.
RP1391: 6/2/2013 1:49:14 PM - Installed Windows XP KB951066.
RP1392: 6/2/2013 1:51:03 PM - Installed Windows XP KB951376-v2.
RP1393: 6/2/2013 1:53:13 PM - Installed Windows XP KB951698.
RP1394: 6/2/2013 1:55:45 PM - Installed Windows XP KB951748.
RP1395: 6/2/2013 2:00:25 PM - Installed Windows XP KB952004.
RP1396: 6/2/2013 2:05:38 PM - Installed Windows XP KB952287.
RP1397: 6/2/2013 2:09:55 PM - Installed Windows XP KB952954.
RP1398: 6/2/2013 2:13:19 PM - Installed Windows XP KB954211.
RP1399: 6/2/2013 2:17:15 PM - Installed Windows XP KB954600.
RP1400: 6/2/2013 2:23:05 PM - Installed Windows XP KB974112.
RP1401: 6/2/2013 2:27:02 PM - Installed Windows XP KB955069.
RP1402: 6/2/2013 2:29:55 PM - Installed Windows XP KB973687.
RP1403: 6/2/2013 2:33:40 PM - Installed Windows XP KB955759.
RP1404: 6/2/2013 2:35:54 PM - Installed Windows XP KB956572.
RP1405: 6/2/2013 2:40:44 PM - Installed Windows XP KB956802.
RP1406: 6/2/2013 2:47:09 PM - Installed Windows XP KB956803.
RP1407: 6/2/2013 2:56:47 PM - Installed Windows XP KB956841.
RP1408: 6/2/2013 3:05:02 PM - Installed Windows XP KB956844.
RP1409: 6/2/2013 3:19:49 PM - Installed Windows XP KB957097.
RP1410: 6/2/2013 3:28:59 PM - Installed Windows XP KB958644.
RP1411: 6/2/2013 3:31:41 PM - Installed Windows XP KB958687.
RP1412: 6/2/2013 3:36:14 PM - Installed Windows XP KB958690.
RP1413: 6/2/2013 3:41:20 PM - Installed Windows XP KB959426.
RP1414: 6/2/2013 3:46:31 PM - Installed Windows XP KB960225.
RP1415: 6/2/2013 3:49:13 PM - Installed Windows XP KB960803.
RP1416: 6/2/2013 3:51:38 PM - Installed Windows XP KB960859.
RP1417: 6/2/2013 3:53:57 PM - Installed Windows XP KB961118.
RP1418: 6/2/2013 3:56:32 PM - Installed Windows XP KB961371.
RP1419: 6/2/2013 4:02:13 PM - Installed Windows XP KB961373.
RP1420: 6/2/2013 4:10:25 PM - Installed Windows XP KB961501.
RP1421: 6/2/2013 4:12:57 PM - Installed Windows XP KB961503.
RP1422: 6/2/2013 4:16:22 PM - Installed Windows XP KB967715.
RP1423: 6/2/2013 4:19:25 PM - Installed Windows XP KB968389.
RP1424: 6/2/2013 4:22:20 PM - Installed Windows XP KB968537.
RP1425: 6/2/2013 4:26:03 PM - Installed Windows XP KB969059.
RP1426: 6/2/2013 4:31:38 PM - Installed Windows XP KB969947.
RP1427: 6/2/2013 4:38:53 PM - Installed Windows XP KB970238.
RP1428: 6/2/2013 4:42:30 PM - Installed Windows XP KB970430.
RP1429: 6/2/2013 4:45:32 PM - Installed Windows XP KB971468.
RP1430: 6/2/2013 4:50:09 PM - Installed Windows XP KB971486.
RP1431: 6/2/2013 4:58:20 PM - Installed Windows XP KB971557.
RP1432: 6/2/2013 5:12:42 PM - Installed Windows XP KB971633.
RP1433: 6/2/2013 5:41:09 PM - Installed Windows XP KB971657.
RP1434: 6/2/2013 5:54:15 PM - Installed Windows XP KB971737.
RP1435: 6/2/2013 6:02:41 PM - Installed Windows XP KB972270.
RP1436: 6/2/2013 6:05:28 PM - Installed Windows XP KB973354.
RP1437: 6/2/2013 6:13:19 PM - Installed Windows XP KB973507.
RP1438: 6/2/2013 6:19:22 PM - Installed Windows XP KB973687.
RP1439: 6/2/2013 6:21:49 PM - Installed Windows XP KB973815.
RP1440: 6/2/2013 6:24:20 PM - Installed Windows XP KB973869.
RP1441: 6/2/2013 6:26:46 PM - Installed Windows XP KB974112.
RP1442: 6/2/2013 6:28:51 PM - Installed Windows XP KB974318.
RP1443: 6/2/2013 6:31:09 PM - Installed Windows XP KB974392.
RP1444: 6/2/2013 6:38:03 PM - Installed Windows XP KB974571.
RP1445: 6/2/2013 6:45:22 PM - Installed Windows XP KB975025.
RP1446: 6/2/2013 6:49:07 PM - Installed Windows XP KB975467.
RP1447: 6/2/2013 6:51:41 PM - Installed Windows XP KB975560.
RP1448: 6/2/2013 7:00:18 PM - Installed Windows XP KB975561.
RP1449: 6/2/2013 7:15:32 PM - Installed Windows XP KB975562.
RP1450: 6/2/2013 7:25:37 PM - Installed Windows XP KB975713.
RP1451: 6/2/2013 7:36:19 PM - Installed Windows XP KB977165.
RP1452: 6/2/2013 7:50:42 PM - Installed Windows XP KB977914.
RP1453: 6/2/2013 7:59:28 PM - Installed Windows XP KB978037.
RP1454: 6/2/2013 8:08:43 PM - Installed Windows XP KB978251.
RP1455: 6/2/2013 8:11:17 PM - Installed Windows XP KB978338.
RP1456: 6/2/2013 8:16:13 PM - Installed Windows XP KB978542.
RP1457: 6/2/2013 8:19:05 PM - Installed Windows XP KB978601.
RP1458: 6/2/2013 8:21:50 PM - Installed Windows XP KB978706.
RP1459: 6/2/2013 8:26:40 PM - Installed Windows XP KB979309.
RP1460: 6/2/2013 8:35:14 PM - Installed Windows XP KB979482.
RP1461: 6/2/2013 8:48:40 PM - Installed Windows XP KB979559.
RP1462: 6/2/2013 9:05:11 PM - Restore Operation
RP1463: 6/3/2013 7:15:33 PM - Restore Operation
.
==== Installed Programs ======================
.
Adobe Flash Player 10 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader XI (11.0.03)
Agere Systems PCI Soft Modem
Amazon Kindle
AMT 2.0
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArcSoft MediaImpression for Kodak
AVG 2013
AVG Security Toolbar
Blackhawk Striker 2 from Compaq (remove only)
Blasterball 2 from Compaq (remove only)
Blasterball 2 Holidays from Compaq (remove only)
Blasterball 2 Remix from Compaq (remove only)
Bonjour
Bounce Symphony from Compaq (remove only)
calibre
Canon MP Navigator EX 1.0
Canon MX310 series
Canon MX310 series User Registration
Canon My Printer
Canon Utilities Easy-PhotoPrint EX
Canon Utilities Solution Menu
CCleaner
Chameleon Tom
Choice Guard
Compaq Connections
Compaq Organize
Critical Update for Windows Media Player 11 (KB959772)
Crystal Maze from Compaq (remove only)
Deal or No Deal - Secret Vault Games
Easy Internet Sign-up
EZ Tape Converter 2.0.0 by MixMeister
Final Drive Nitro from Compaq (remove only)
Free Convert MOV AVI to FLV Flash WMV Converter 5.8
Garmin Communicator Plugin
Garmin Lifetime Updater
Google Toolbar for Internet Explorer
Help and Support Additions
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
Hotfix for Windows XP (KB942288-v3)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB954708)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Boot Optimizer
HP Help and Support 4.0
HpSdpAppCoreApp
InterVideo WinDVD Player
iTunes
Junk Mail filter update
K-Lite Codec Pack 4.0.0 (Full)
KBD
Lexibox Deluxe from Compaq (remove only)
LS_HSI
Malwarebytes Anti-Malware version 1.75.0.1300
McAfee Security Scan Plus
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Picture It! 2000
Microsoft Plus! Dancer LE
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable - KB2467175
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Microsoft Works
Move Media Player
Mozilla Firefox 19.0.2 (x86 en-US)
Mozilla Maintenance Service
MSN
MSVCRT
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB973686)
Nickelodeon Toon Twister 3-D
Overball from Compaq (remove only)
Pattern Maker for cross stitch - Std
Pattern Maker for cross stitch Update - V3.10
PC-Doctor for Windows
Phoenix Assault from Compaq (remove only)
Photo Explosion Deluxe
PhotoScape
Picasa 3
Polar Bowler from Compaq (remove only)
Polar Golfer from Compaq (remove only)
Presto! PageManager 7.15.16
PS2
Python 2.2 pywin32 extensions (build 203)
Python 2.2.3
QuickTime
RealDownloader
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealNetworks - Microsoft Visual C++ 2010 Runtime
RealPlayer
RealUpgrade 1.1
Remove Adobe Photoshop Album 2.0 Starter Edition installer
Remove Microsoft Money 2005 installer
Remove WeatherBug installer
Revo Uninstaller 1.83
SA30xx Media Converter
SCRABBLE
Security Update for CAPICOM (KB931906)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 7 (KB974455)
Security Update for Windows Internet Explorer 7 (KB976325)
Security Update for Windows Internet Explorer 7 (KB978207)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB944338-v2)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958470)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972260)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB981349)
Segoe UI
Serif AlbumPlus SE PRO
Serif PhotoPlus X3
Shooting Stars Pool from Compaq (remove only)
SiS VGA Utilities
Slyder from Compaq (remove only)
Smilebox
Sonic Express Labeler
Sonic MyDVD Plus
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Stickies 7.1b
Super Granny from Compaq (remove only)
Sure Cuts A Lot 2.029
The File Splitter 1.31
Tradewinds from Compaq (remove only)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 7 (KB976749)
Update for Windows Internet Explorer 7 (KB980182)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows XP (KB898461)
Update for Windows XP (KB904942)
Update for Windows XP (KB925720)
Update for Windows XP (KB953356)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB961503)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Walmart MP3 Music Downloads
WebFldrs XP
WildTangent GameChannel (remove only)
WildTangent Web Driver
Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray
Windows Imaging Component
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Toolbar
Windows Live Upload Tool
Windows Live Writer
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB883667
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888239
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB891781
Yahoo! Toolbar
.
==== End Of File ===========================

Results of screen317's Security Check version 0.99.64
Windows XP Service Pack 2 x86   
Out of date service pack!!
``````````````Antivirus/Firewall Check:``````````````[/u]
Windows Firewall Enabled!
AVG 2013     
AVG Security Toolbar   
AVG 2013     
McAfee Security Scan Plus   
`````````Anti-malware/Other Utilities Check:`````````[/u]
Malwarebytes Anti-Malware version 1.75.0.1300
CCleaner     
Adobe Flash Player 10 Flash Player out of Date!
Adobe Flash Player    11.7.700.202
Adobe Reader XI
Mozilla Firefox 19.0.2 Firefox out of Date!
Google Chrome 2.0.172.39
````````Process Check: objlist.exe by Laurent````````[/u]
AVG avgwdsvc.exe
AVG avgrsx.exe
AVG avgnsx.exe
AVG avgemc.exe
`````````````````System Health check`````````````````[/u]
Total Fragmentation on Drive C:: 8%
````````````````````End of Log``````````````````````[/u]

R-C

#2
June 04, 2013, 02:25:57 PM
ok good you were able to get it to copy and paste! Good just be patient and take it step by step. You did good so far.
registered Linux user:476595
May inspiration fill your heart and hands, run down your legs onto your feet and cause Spontaneous Dancing! :dance:

mare_wbpa

#3
June 04, 2013, 03:24:11 PM
I had a call from my credit card co this AM.  There was an unauthorized charge made to my card today.  I was wondering if any sensitive info could be gotten from the logs I posted. 

winchester73

#4
June 04, 2013, 04:56:48 PM
No, there is nothing in the logs that would compromise you ...

QuoteI updated and ran Malwarebytse, found 5 threats and removed them

It would be useful to see what MBAM found and removed.  Please launch it, and click on the "Logs" tab at the top.  Click on the scan that you ran, the "Open" at the bottom left.  Copy/paste here please.
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Corrine

#5
June 04, 2013, 05:14:46 PM
Hi, mare_wbpa.  You made it!  :dance:  Welcome to LandzDown Forum.

We will do our best to assist you.  However, in order to do so, please follow all instructions provided in the sequence given.  Do not install/re-install any programs or run any fixes or scanners that you have not been instructed to use.  This may cause conflicts with the tools being used in the cleanup process.   

If you have questions regarding any of the instructions or problems running any tools, please let us know.

1.  Let's start by uninstalling the following.  McAfee Security Scan is unnecessary and would have been included with an Adobe update.  With your computer out of warranty, PC-Doctor is of no value.

McAfee Security Scan Plus
PC-Doctor for Windows

2.  Next, please run the Norton Removal tool to remove those leftovers:  Download and run the Norton Removal Tool to remove your Norton product.

3.  Please download AdwCleaner by Xplode to your Desktop.

  •   Double-click AdwCleaner.exe to run the tool.
  •   Click Search.
  •   A logfile will automatically open after the scan has finished.
  •   Please post the contents of that logfile with your next response.
Note: The log can also be found at C:\AdwCleaner[XX].txt where XX denotes the number of times the application has been run, i.e., R1

4.  As Winchester73 indicted, please provide a copy of the Malwarebytes scan that shows what MBAM removed.  The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.  Please post contents of that file in your next reply.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

R-C

#6
June 04, 2013, 08:12:50 PM
oh good job by your credit card company. You can rest assured that every thing you are doing here is safe and will hopefully be able to make your pc more secure. These logs will help determine if you still have any infections compromising the security of it.
You are doing a good job.
registered Linux user:476595
May inspiration fill your heart and hands, run down your legs onto your feet and cause Spontaneous Dancing! :dance:

mare_wbpa

#7
June 04, 2013, 09:23:47 PM
I'm having trouble already.  I went to add/remove and found PC Dr but it wouldn't uninstall.  A box would come up momentarilly with a progress bar half way across but would disappear B4 I had a chance to read it.  I didn't see Mcafee in the add/remove list, but found it in the "all programs"list and uninstalled it, I think.  When I went back to recheck if I had missed it in the Add/remove list I found that list wouldn't open when I clicked on it on the control panel.  I didn't go any further.

winchester73

#8
June 04, 2013, 11:08:45 PM
No worries ... run AdwCleaner and post the MBAM log. We can sort out the rest once we see what is going on.
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

mare_wbpa

#9
June 05, 2013, 03:26:51 PM
I used Search to see if I could find the Mbam log and it failed to find it.  What's my next step to find the log?

Corrine

#10
June 05, 2013, 03:42:08 PM
Hi, mare_wbpa. 

Rather than using Search, launch Malwarebytes and click on the tab for Logs.  If you cannot locate the log there, just move on and run AdwCleaner. 

Thanks.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

mare_wbpa

#11
June 05, 2013, 05:39:57 PM
I tried to launch Mbam for the log but got a message that the database  was missing or corrupt, and that I needed to download it again.  I did the Norton download and ran it.  I did the AdwCleaner scan here's the log.


# Updated 16/05/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 2 (32 bits)
# User : Compaq_Owner - YOUR-F78BF48CE2
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Compaq_Owner\My Documents\Downloads\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

File Found : C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Uninstall.exe
File Found : C:\END
File Found : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Found : C:\WINDOWS\Tasks\SpeedUpMyPC.job
Folder Found : C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\avg@toolbar
Folder Found : C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\CT3289847
Folder Found : C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\CT3289847
Folder Found : C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\CT3294791
Folder Found : C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Iminent
Folder Found : C:\Documents and Settings\All Users\Application Data\AVG Secure Search
Folder Found : C:\Documents and Settings\Compaq_Owner\Application Data\AVG Secure Search
Folder Found : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\CT3289847
Folder Found : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\CT3289847
Folder Found : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\CT3294791
Folder Found : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\extensions\{739df940-c5ee-4bab-9d7e-270894ae687a}(2)
Folder Found : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\extensions\{739df940-c5ee-4bab-9d7e-270894ae687a}(3)
Folder Found : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\extensions\{7f3f960e-a836-45ca-8911-0accb522246e}
Folder Found : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\Smartbar
Folder Found : C:\Documents and Settings\Compaq_Owner\Application Data\SearchProtect
Folder Found : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\AVG Secure Search
Folder Found : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\AVG Security Toolbar
Folder Found : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhbgpoakplhahbklhkcfbpicgjcaoglk
Folder Found : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl
Folder Found : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Ilivid
Folder Found : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\PackageAware
Folder Found : C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Chameleon Tom
Folder Found : C:\Program Files\AVG Secure Search
Folder Found : C:\Program Files\ChameleonTom
Folder Found : C:\Program Files\Common Files\AVG Secure Search
Folder Found : C:\Program Files\InfoAtoms
Folder Found : C:\Program Files\OApps
Folder Found : C:\Program Files\Optimizer Pro
Folder Found : C:\Program Files\SearchProtect
Folder Found : C:\Program Files\SingAlong

***** [Registry] *****

Key Found : HKCU\Software\AVG Secure Search
Key Found : HKCU\Software\AVG Security Toolbar
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{75ED56AF-4DC9-4243-A30C-4EF4DD0CA28F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{042DA63B-0933-403D-9395-B49307691690}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{14CD42DD-ABCD-3586-DCAB-40E3693E3737}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75ED56AF-4DC9-4243-A30C-4EF4DD0CA28F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF0118D4-63FF-4138-9327-F3028FB1A578}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB35C569-5624-4CFC-8043-E5139F55A073}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : HKLM\Software\AVG Secure Search
Key Found : HKLM\Software\AVG Security Toolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Key Found : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{75ED56AF-4DC9-4243-A30C-4EF4DD0CA28F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{BF0118D4-63FF-4138-9327-F3028FB1A578}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9732E648-5755-43ED-9003-9E835D22CFE7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E7767193-0A2F-4AFE-BAF4-288366162E48}
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Found : HKLM\SOFTWARE\Classes\wit4ie.WitBHO
Key Found : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.1
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{14CD42DD-ABCD-3586-DCAB-40E3693E3737}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ChameleonTom
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75ED56AF-4DC9-4243-A30C-4EF4DD0CA28F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ChameleonTom
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : HKU\S-1-5-21-3067886581-847020557-550397895-1009\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKU\S-1-5-21-3067886581-847020557-550397895-1009\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKU\S-1-5-21-3067886581-847020557-550397895-1009\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://toolbar.inbox.com/search/ie.aspx?tbid=80114
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - CustomizeSearch] = hxxp://toolbar.inbox.com/help/sa_customize.aspx?tbid=80114
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - SearchAssistant] = hxxp://toolbar.inbox.com/search/ie.aspx?tbid=80114
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - CustomizeSearch] = hxxp://toolbar.inbox.com/help/sa_customize.aspx?tbid=80114

-\\ Mozilla Firefox v19.0.2 (en-US)

File : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\0az38696.default\prefs.js

Found : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Found : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Found : user_pref("browser.startup.homepage", "hxxp://isearch.avg.com/?cid={0BAA4612-B26C-431F-83DF-372ABBD3[...]
Found : user_pref("keyword.URL", "hxxp://isearch.avg.com/search?cid={0BAA4612-B26C-431F-83DF-372ABBD3B64B}&m[...]

File : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\prefs.js

Found : user_pref("CT3289847.1000082.isPlayDisplay", "true");
Found : user_pref("CT3289847.1000082.state", "{\"state\":\"stopped\",\"text\":\"1.FM (Cou...\",\"description[...]
Found : user_pref("CT3289847.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3289847.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT3289847.FF19Solved", "true");
Found : user_pref("CT3289847.FirstTime", "true");
Found : user_pref("CT3289847.FirstTimeFF3", "true");
Found : user_pref("CT3289847.PG_ENABLE.enc", "dHJ1ZQ==");
Found : user_pref("CT3289847.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Found : user_pref("CT3289847.UserID", "UN68834311713071263");
Found : user_pref("CT3289847.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT3289847.browser.search.defaultthis.engineName", "true");
Found : user_pref("CT3289847.defaultSearch", "true");
Found : user_pref("CT3289847.embeddedsData", "[{\"appId\":\"130068661007799818\",\"apiPermissions\":{\"cross[...]
Found : user_pref("CT3289847.enableAlerts", "true");
Found : user_pref("CT3289847.enableFix404ByUser", "TRUE");
Found : user_pref("CT3289847.enableSearchFromAddressBar", "true");
Found : user_pref("CT3289847.firstTimeDialogOpened", "true");
Found : user_pref("CT3289847.fixPageNotFoundError", "true");
Found : user_pref("CT3289847.fixPageNotFoundErrorByUser", "true");
Found : user_pref("CT3289847.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT3289847.fixUrls", true);
Found : user_pref("CT3289847.homepageuserchanged", true);
Found : user_pref("CT3289847.hxxp___api16_similarsites_com.pid2.enc", "MzZiZmQwOGU0YzUyM2E0Mg==");
Found : user_pref("CT3289847.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_defaultGui.enc", "eyJndWkiOltdLC[...]
Found : user_pref("CT3289847.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_settings.enc", "eyJpbml0VXJsIjoi[...]
Found : user_pref("CT3289847.hxxp___toolbar_jollywallet_com_tlb_2.jw_token.enc", "NzRkZDEyMWUtOTJiMC00NmVkLW[...]
Found : user_pref("CT3289847.hxxp___toolbar_jollywallet_com_tlb_2.key_list_id.enc", "MjAxMjA4MDItMDAw");
Found : user_pref("CT3289847.installDate", "10/4/2013 22:46:49");
Found : user_pref("CT3289847.installId", "9818");
Found : user_pref("CT3289847.installType", "conduitnsisintegration");
Found : user_pref("CT3289847.installerVersion", "1.3.7.3");
Found : user_pref("CT3289847.isCheckedStartAsHidden", true);
Found : user_pref("CT3289847.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3289847.isFirstTimeToolbarLoading", "false");
Found : user_pref("CT3289847.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT3289847.keyword", "true");
Found : user_pref("CT3289847.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Found : user_pref("CT3289847.lastVersion", "10.14.380.14");
Found : user_pref("CT3289847.mam_gk_appStateReportTime.enc", "MTM2NTcxNTYwNDkwOA==");
Found : user_pref("CT3289847.mam_gk_appState_CouponBuddy.enc", "b24=");
Found : user_pref("CT3289847.mam_gk_appState_PriceGong.enc", "b24=");
Found : user_pref("CT3289847.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Found : user_pref("CT3289847.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Found : user_pref("CT3289847.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImN[...]
Found : user_pref("CT3289847.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Found : user_pref("CT3289847.mam_gk_first_time.enc", "MQ==");
Found : user_pref("CT3289847.mam_gk_gadgetOpen.enc", "MA==");
Found : user_pref("CT3289847.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Found : user_pref("CT3289847.mam_gk_lastLoginTime.enc", "MTM2NTcxNTU5OTcxOQ==");
Found : user_pref("CT3289847.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Found : user_pref("CT3289847.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Found : user_pref("CT3289847.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Found : user_pref("CT3289847.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Found : user_pref("CT3289847.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Found : user_pref("CT3289847.mam_gk_userId.enc", "MTFiNmE3MTctOTU1My00MWE0LWJjZjYtNjFiYjViMGNiNjIz");
Found : user_pref("CT3289847.migrateAppsAndComponents", true);
Found : user_pref("CT3289847.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Found : user_pref("CT3289847.openThankYouPage", "false");
Found : user_pref("CT3289847.openUninstallPage", "true");
Found : user_pref("CT3289847.revertSettingsEnabled", "true");
Found : user_pref("CT3289847.search.searchAppId", "130068661007799818");
Found : user_pref("CT3289847.search.searchCount", "0");
Found : user_pref("CT3289847.searchFromAddressBarEnabledByUser", "true");
Found : user_pref("CT3289847.searchInNewTabEnabledByUser", "true");
Found : user_pref("CT3289847.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT3289847.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3289847.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT3289847.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Found : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT3289847.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1365648866123");
Found : user_pref("CT3289847.serviceLayer_services_appsMetadata_lastUpdate", "1365648865230");
Found : user_pref("CT3289847.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1365648865095");
Found : user_pref("CT3289847.serviceLayer_services_location_lastUpdate", "1365735273807");
Found : user_pref("CT3289847.serviceLayer_services_login_10.14.380.14_lastUpdate", "1365691159439");
Found : user_pref("CT3289847.serviceLayer_services_login_10.15.0.562_lastUpdate", "1365778011762");
Found : user_pref("CT3289847.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1365648865238");
Found : user_pref("CT3289847.serviceLayer_services_searchAPI_lastUpdate", "1365648854931");
Found : user_pref("CT3289847.serviceLayer_services_serviceMap_lastUpdate", "1365735271492");
Found : user_pref("CT3289847.serviceLayer_services_setupAPI_lastUpdate", "1365648855851");
Found : user_pref("CT3289847.serviceLayer_services_toolbarContextMenu_lastUpdate", "1365648865019");
Found : user_pref("CT3289847.serviceLayer_services_toolbarSettings_lastUpdate", "1365778011208");
Found : user_pref("CT3289847.serviceLayer_services_translation_lastUpdate", "1365735272528");
Found : user_pref("CT3289847.settingsINI", true);
Found : user_pref("CT3289847.shouldFirstTimeDialog", "false");
Found : user_pref("CT3289847.showToolbarPermission", "false");
Found : user_pref("CT3289847.smartbar.CTID", "CT3289847");
Found : user_pref("CT3289847.smartbar.Uninstall", "0");
Found : user_pref("CT3289847.smartbar.homepage", true);
Found : user_pref("CT3289847.smartbar.isHidden", true);
Found : user_pref("CT3289847.smartbar.toolbarName", "WhiteSmoke New ");
Found : user_pref("CT3289847.startPage", "true");
Found : user_pref("CT3289847.toolbarBornServerTime", "11-4-2013");
Found : user_pref("CT3289847.toolbarCurrentServerTime", "12-4-2013");
Found : user_pref("CT3289847.toolbarLoginClientTime", "Thu Apr 11 2013 16:35:18 GMT-0400 (Eastern Daylight T[...]
Found : user_pref("CT3289847_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Found : user_pref("CT3294791.1000082.isPlayDisplay", "true");
Found : user_pref("CT3294791.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Found : user_pref("CT3294791.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3294791.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT3294791.FF19Solved", "true");
Found : user_pref("CT3294791.FirstTime", "true");
Found : user_pref("CT3294791.FirstTimeFF3", "true");
Found : user_pref("CT3294791.PG_ENABLE", "dHJ1ZQ==");
Found : user_pref("CT3294791.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Found : user_pref("CT3294791.SF_STATUS.enc", "RU5BQkxFRA==");
Found : user_pref("CT3294791.SF_USER_ID.enc", "Y2lkXzIyNTIwMTMxOTU1NTgzMzg5MDM=");
Found : user_pref("CT3294791.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT329[...]
Found : user_pref("CT3294791.UserID", "UN12355583662464419");
Found : user_pref("CT3294791.YTbyClickFavorites.enc", "W10=");
Found : user_pref("CT3294791.YTbyClickRecent.enc", "W10=");
Found : user_pref("CT3294791.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT3294791.autoDisableScopes", 0);
Found : user_pref("CT3294791.browser.search.defaultthis.engineName", "true");
Found : user_pref("CT3294791.cbfirsttime.enc", "V2VkIE1heSAyMiAyMDEzIDE2OjE3OjE1IEdNVC0wNDAwIChFYXN0ZXJuIFN0[...]
Found : user_pref("CT3294791.defaultSearch", "true");
Found : user_pref("CT3294791.embeddedsData", "[{\"appId\":\"130089396748860745\",\"apiPermissions\":{\"cross[...]
Found : user_pref("CT3294791.enableAlerts", "true");
Found : user_pref("CT3294791.enableFix404ByUser", "TRUE");
Found : user_pref("CT3294791.enableSearchFromAddressBar", "true");
Found : user_pref("CT3294791.firstTimeDialogOpened", "true");
Found : user_pref("CT3294791.fixPageNotFoundError", "true");
Found : user_pref("CT3294791.fixPageNotFoundErrorByUser", "true");
Found : user_pref("CT3294791.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT3294791.fixUrls", true);
Found : user_pref("CT3294791.installDate", "22/5/2013 11:15:00");
Found : user_pref("CT3294791.installId", "stub.exe");
Found : user_pref("CT3294791.installSessionId", "{BECD15F8-F851-4052-AD18-7AB94D7C72B5}");
Found : user_pref("CT3294791.installSp", "TRUE");
Found : user_pref("CT3294791.installType", "conduitnsisintegration");
Found : user_pref("CT3294791.installUsage", "2013-05-22T23:17:02.7008829+03:00");
Found : user_pref("CT3294791.installUsageEarly", "2013-05-22T23:17:00.0020483+03:00");
Found : user_pref("CT3294791.installerVersion", "1.4.2.3");
Found : user_pref("CT3294791.isCheckedStartAsHidden", true);
Found : user_pref("CT3294791.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3294791.isFirstTimeToolbarLoading", "false");
Found : user_pref("CT3294791.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT3294791.keyword", "true");
Found : user_pref("CT3294791.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Found : user_pref("CT3294791.lastVersion", "10.16.2.509");
Found : user_pref("CT3294791.mam_gk_appStateReportTime.enc", "MTM2OTI1MzgyNzc5Mg==");
Found : user_pref("CT3294791.mam_gk_appState_CouponBuddy.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_Easytobook.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_PriceGong.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_WindowShopper.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Found : user_pref("CT3294791.mam_gk_appsDefaultEnabled.enc", "dHJ1ZQ==");
Found : user_pref("CT3294791.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImN[...]
Found : user_pref("CT3294791.mam_gk_currentVersion.enc", "MS42LjAuMQ==");
Found : user_pref("CT3294791.mam_gk_eventsCache.enc", "eyJmMDNmZGY0OC00MmEzLTRiNjQtODM4Ny0xMjY4ZWUxMjU4ZmUiO[...]
Found : user_pref("CT3294791.mam_gk_first_time.enc", "MQ==");
Found : user_pref("CT3294791.mam_gk_gadgetOpen.enc", "d2VsY29tZQ==");
Found : user_pref("CT3294791.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Found : user_pref("CT3294791.mam_gk_lastLoginTime.enc", "MTM2OTI1MzgyMzkxNg==");
Found : user_pref("CT3294791.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Found : user_pref("CT3294791.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Found : user_pref("CT3294791.mam_gk_settings1.6.0.1.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Found : user_pref("CT3294791.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Found : user_pref("CT3294791.mam_gk_showWelcomeGadget.enc", "dHJ1ZQ==");
Found : user_pref("CT3294791.mam_gk_userId.enc", "NjE5MjdkMTUtMjU1NC00ZGMxLWFkMjEtNzY5MzEzZTY3NDRl");
Found : user_pref("CT3294791.migrateAppsAndComponents", true);
Found : user_pref("CT3294791.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Found : user_pref("CT3294791.openThankYouPage", "false");
Found : user_pref("CT3294791.openUninstallPage", "true");
Found : user_pref("CT3294791.originalHomepage", "hxxp://www.yahoo.com/");
Found : user_pref("CT3294791.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT32[...]
Found : user_pref("CT3294791.originalSearchEngine", "Google");
Found : user_pref("CT3294791.revertSettingsEnabled", "false");
Found : user_pref("CT3294791.search.searchAppId", "130089396748860745");
Found : user_pref("CT3294791.search.searchCount", "0");
Found : user_pref("CT3294791.searchFromAddressBarEnabledByUser", "true");
Found : user_pref("CT3294791.searchInNewTabEnabledByUser", "true");
Found : user_pref("CT3294791.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT3294791.searchRevert", "false");
Found : user_pref("CT3294791.searchUserMode", "2");
Found : user_pref("CT3294791.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3294791.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT3294791.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT3294791.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1369253811745");
Found : user_pref("CT3294791.serviceLayer_services_appsMetadata_lastUpdate", "1369253812031");
Found : user_pref("CT3294791.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1369253811803");
Found : user_pref("CT3294791.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1369253808[...]
Found : user_pref("CT3294791.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1369253812632")[...]
Found : user_pref("CT3294791.serviceLayer_services_location_lastUpdate", "1370360426073");
Found : user_pref("CT3294791.serviceLayer_services_login_10.16.2.509_lastUpdate", "1370375300137");
Found : user_pref("CT3294791.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1369253811652");
Found : user_pref("CT3294791.serviceLayer_services_searchAPI_lastUpdate", "1369263810153");
Found : user_pref("CT3294791.serviceLayer_services_serviceMap_lastUpdate", "1370360425350");
Found : user_pref("CT3294791.serviceLayer_services_setupAPI_lastUpdate", "1369263809260");
Found : user_pref("CT3294791.serviceLayer_services_toolbarContextMenu_lastUpdate", "1369253811523");
Found : user_pref("CT3294791.serviceLayer_services_toolbarSettings_lastUpdate", "1370375314720");
Found : user_pref("CT3294791.serviceLayer_services_translation_lastUpdate", "1370360427056");
Found : user_pref("CT3294791.settingsINI", true);
Found : user_pref("CT3294791.shouldFirstTimeDialog", "false");
Found : user_pref("CT3294791.showToolbarPermission", "false");
Found : user_pref("CT3294791.smartbar.CTID", "CT3294791");
Found : user_pref("CT3294791.smartbar.Uninstall", "0");
Found : user_pref("CT3294791.smartbar.homepage", "true");
Found : user_pref("CT3294791.smartbar.isHidden", true);
Found : user_pref("CT3294791.smartbar.toolbarName", "Vafmusic2 ");
Found : user_pref("CT3294791.startPage", "true");
Found : user_pref("CT3294791.toolbarBornServerTime", "22-5-2013");
Found : user_pref("CT3294791.toolbarCurrentServerTime", "4-6-2013");
Found : user_pref("CT3294791.toolbarLoginClientTime", "Wed May 22 2013 16:16:52 GMT-0400 (Eastern Standard T[...]
Found : user_pref("CT3294791.url_history0001.enc", "aHR0cDovL3d3dy55YWhvby5jb20vOjo6Y2xpY2toYW5kbGVyOjo6MTM2[...]
Found : user_pref("CT3294791.versionFromInstaller", "10.16.2.9");
Found : user_pref("CT3294791_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Found : user_pref("Smartbar.ConduitHomepagesList", "");
Found : user_pref("Smartbar.ConduitSearchEngineList", "");
Found : user_pref("Smartbar.ConduitSearchUrlList", "");
Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C[...]
Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3294791");
Found : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Found : user_pref("browser.search.defaultthis.engineName", "Vafmusic2 Customized Web Search");
Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3294791&CUI[...]
Found : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3294791&SearchSource=2&CU[...]
Found : user_pref("smartbar.addressBarOwnerCTID", "CT3294791");
Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3289847&octid=CT3289847[...]
Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Found : user_pref("smartbar.defaultSearchOwnerCTID", "CT3294791");
Found : user_pref("smartbar.homePageOwnerCTID", "CT3294791");
Found : user_pref("smartbar.machineId", "99IOF5TMEEYUMZZM7CYH67LFITE");
Found : user_pref("smartbar.originalHomepage", "www.yahoo.com");
Found : user_pref("smartbar.originalSearchAddressUrl", "hxxp://isearch.avg.com/search?cid={0BAA4612-B26C-431[...]
Found : user_pref("smartbar.originalSearchEngine", "Google");

-\\ Google Chrome v [Unable to get version]

File : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [31513 octets] - [05/06/2013 13:29:55]

########## EOF - C:\AdwCleaner[R1].txt - [31574 octets] ##########

Corrine

#12
June 05, 2013, 06:26:52 PM
Ok, we'll take a look at MBAM later.  In the meantime, please do the following:

1.  Please rescan with AdwCleaner so it can remove what was found.

  • Double-click AdwCleaner.exe to run the tool.
  • Click Delete.
  • Everything that was found will be deleted.
  • Save any open files and approve the reboot.  A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
Note: The log can also be found at C:\AdwCleaner[XX].txt where XX denotes the number of times the application has been run, i.e., S1

2.  This next tool often picks up additional items that AdwCleaner doesn't see.  Please download Junkware Removal Tool to your desktop.

  • Run the tool by double-clicking it.  If you are using Windows Vista or Seven, right-mouse click it and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
3.  Restart your computer and then please follow these instructions carefully.

Download ComboFix from here.

!!! IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your antivirus and anti-malware security applications. If not disabled, these programs will likely interfere with cleanup process. This can usually be accomplished by a right-click on the icon in the System Tray. 

Note:  If you are unsure how to disable your security software, see the instructions in this topic at Tech Support Forum:  How to disable your security applications.

Now, please run ComboFix:

  • Note:  If infections are found, ComboFix will automatically reboot the machine to complete the removal process.  Please ensure all opened windows are closed before proceeding.
  • Double-click ComboFix.exe on your desktop and follow the prompts.
  • As part of the process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it is strongly recommended to have this pre-installed on your machine before doing any malware removal. The Recovery Console will allow you to start up the computer in a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

    Please note: If the Microsoft Windows Recovery Console is already installed on the computer, ComboFix will continue the malware removal procedures.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console.
  • When prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.


  • After the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


  • Click "Yes" to continue scanning for malware.

  • When finished, a log will be produced. Please include the C:\ComboFix.txt in your next reply.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

mare_wbpa

#13
June 05, 2013, 08:51:25 PM
Here's the AdwCleaner log.  I'll be working on the next download.

# AdwCleaner v2.301 - Logfile created 06/05/2013 at 16:38:13
# Updated 16/05/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 2 (32 bits)
# User : Compaq_Owner - YOUR-F78BF48CE2
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Compaq_Owner\My Documents\Downloads\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Deleted on reboot : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhbgpoakplhahbklhkcfbpicgjcaoglk
Deleted on reboot : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl
Deleted on reboot : C:\Program Files\Common Files\AVG Secure Search
File Deleted : C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Uninstall.exe
File Deleted : C:\END
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Deleted : C:\WINDOWS\Tasks\SpeedUpMyPC.job
Folder Deleted : C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\avg@toolbar
Folder Deleted : C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\CT3289847
Folder Deleted : C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\CT3294791
Folder Deleted : C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Iminent
Folder Deleted : C:\Documents and Settings\All Users\Application Data\AVG Secure Search
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Application Data\AVG Secure Search
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\CT3289847
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\CT3294791
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\extensions\{739df940-c5ee-4bab-9d7e-270894ae687a}(2)
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\extensions\{739df940-c5ee-4bab-9d7e-270894ae687a}(3)
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\extensions\{7f3f960e-a836-45ca-8911-0accb522246e}
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\Smartbar
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Application Data\SearchProtect
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\AVG Secure Search
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\AVG Security Toolbar
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Ilivid
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\PackageAware
Folder Deleted : C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Chameleon Tom
Folder Deleted : C:\Program Files\AVG Secure Search
Folder Deleted : C:\Program Files\ChameleonTom
Folder Deleted : C:\Program Files\InfoAtoms
Folder Deleted : C:\Program Files\OApps
Folder Deleted : C:\Program Files\Optimizer Pro
Folder Deleted : C:\Program Files\SearchProtect
Folder Deleted : C:\Program Files\SingAlong

***** [Registry] *****

Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\AVG Security Toolbar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{75ED56AF-4DC9-4243-A30C-4EF4DD0CA28F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{042DA63B-0933-403D-9395-B49307691690}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{14CD42DD-ABCD-3586-DCAB-40E3693E3737}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75ED56AF-4DC9-4243-A30C-4EF4DD0CA28F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF0118D4-63FF-4138-9327-F3028FB1A578}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB35C569-5624-4CFC-8043-E5139F55A073}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{75ED56AF-4DC9-4243-A30C-4EF4DD0CA28F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BF0118D4-63FF-4138-9327-F3028FB1A578}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9732E648-5755-43ED-9003-9E835D22CFE7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E7767193-0A2F-4AFE-BAF4-288366162E48}
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Classes\wit4ie.WitBHO
Key Deleted : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{14CD42DD-ABCD-3586-DCAB-40E3693E3737}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ChameleonTom
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75ED56AF-4DC9-4243-A30C-4EF4DD0CA28F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ChameleonTom
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://toolbar.inbox.com/search/ie.aspx?tbid=80114 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - CustomizeSearch] = hxxp://toolbar.inbox.com/help/sa_customize.aspx?tbid=80114 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - SearchAssistant] = hxxp://toolbar.inbox.com/search/ie.aspx?tbid=80114 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - CustomizeSearch] = hxxp://toolbar.inbox.com/help/sa_customize.aspx?tbid=80114 --> hxxp://www.google.com

-\\ Mozilla Firefox v19.0.2 (en-US)

File : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\0az38696.default\prefs.js

C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\0az38696.default\user.js ... Deleted !

Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Deleted : user_pref("browser.startup.homepage", "hxxp://isearch.avg.com/?cid={0BAA4612-B26C-431F-83DF-372ABBD3[...]
Deleted : user_pref("keyword.URL", "hxxp://isearch.avg.com/search?cid={0BAA4612-B26C-431F-83DF-372ABBD3B64B}&m[...]

File : C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\prefs.js

C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\gbhvogpj.default\user.js ... Deleted !

Deleted : user_pref("CT3289847.1000082.isPlayDisplay", "true");
Deleted : user_pref("CT3289847.1000082.state", "{\"state\":\"stopped\",\"text\":\"1.FM (Cou...\",\"description[...]
Deleted : user_pref("CT3289847.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3289847.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT3289847.FF19Solved", "true");
Deleted : user_pref("CT3289847.FirstTime", "true");
Deleted : user_pref("CT3289847.FirstTimeFF3", "true");
Deleted : user_pref("CT3289847.PG_ENABLE.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3289847.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Deleted : user_pref("CT3289847.UserID", "UN68834311713071263");
Deleted : user_pref("CT3289847.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3289847.browser.search.defaultthis.engineName", "true");
Deleted : user_pref("CT3289847.defaultSearch", "true");
Deleted : user_pref("CT3289847.embeddedsData", "[{\"appId\":\"130068661007799818\",\"apiPermissions\":{\"cross[...]
Deleted : user_pref("CT3289847.enableAlerts", "true");
Deleted : user_pref("CT3289847.enableFix404ByUser", "TRUE");
Deleted : user_pref("CT3289847.enableSearchFromAddressBar", "true");
Deleted : user_pref("CT3289847.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3289847.fixPageNotFoundError", "true");
Deleted : user_pref("CT3289847.fixPageNotFoundErrorByUser", "true");
Deleted : user_pref("CT3289847.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3289847.fixUrls", true);
Deleted : user_pref("CT3289847.homepageuserchanged", true);
Deleted : user_pref("CT3289847.hxxp___api16_similarsites_com.pid2.enc", "MzZiZmQwOGU0YzUyM2E0Mg==");
Deleted : user_pref("CT3289847.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_defaultGui.enc", "eyJndWkiOltdLC[...]
Deleted : user_pref("CT3289847.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_settings.enc", "eyJpbml0VXJsIjoi[...]
Deleted : user_pref("CT3289847.hxxp___toolbar_jollywallet_com_tlb_2.jw_token.enc", "NzRkZDEyMWUtOTJiMC00NmVkLW[...]
Deleted : user_pref("CT3289847.hxxp___toolbar_jollywallet_com_tlb_2.key_list_id.enc", "MjAxMjA4MDItMDAw");
Deleted : user_pref("CT3289847.installDate", "10/4/2013 22:46:49");
Deleted : user_pref("CT3289847.installId", "9818");
Deleted : user_pref("CT3289847.installType", "conduitnsisintegration");
Deleted : user_pref("CT3289847.installerVersion", "1.3.7.3");
Deleted : user_pref("CT3289847.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3289847.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3289847.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3289847.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3289847.keyword", "true");
Deleted : user_pref("CT3289847.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Deleted : user_pref("CT3289847.lastVersion", "10.14.380.14");
Deleted : user_pref("CT3289847.mam_gk_appStateReportTime.enc", "MTM2NTcxNTYwNDkwOA==");
Deleted : user_pref("CT3289847.mam_gk_appState_CouponBuddy.enc", "b24=");
Deleted : user_pref("CT3289847.mam_gk_appState_PriceGong.enc", "b24=");
Deleted : user_pref("CT3289847.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Deleted : user_pref("CT3289847.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Deleted : user_pref("CT3289847.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImN[...]
Deleted : user_pref("CT3289847.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Deleted : user_pref("CT3289847.mam_gk_first_time.enc", "MQ==");
Deleted : user_pref("CT3289847.mam_gk_gadgetOpen.enc", "MA==");
Deleted : user_pref("CT3289847.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Deleted : user_pref("CT3289847.mam_gk_lastLoginTime.enc", "MTM2NTcxNTU5OTcxOQ==");
Deleted : user_pref("CT3289847.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Deleted : user_pref("CT3289847.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3289847.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Deleted : user_pref("CT3289847.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3289847.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Deleted : user_pref("CT3289847.mam_gk_userId.enc", "MTFiNmE3MTctOTU1My00MWE0LWJjZjYtNjFiYjViMGNiNjIz");
Deleted : user_pref("CT3289847.migrateAppsAndComponents", true);
Deleted : user_pref("CT3289847.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Deleted : user_pref("CT3289847.openThankYouPage", "false");
Deleted : user_pref("CT3289847.openUninstallPage", "true");
Deleted : user_pref("CT3289847.revertSettingsEnabled", "true");
Deleted : user_pref("CT3289847.search.searchAppId", "130068661007799818");
Deleted : user_pref("CT3289847.search.searchCount", "0");
Deleted : user_pref("CT3289847.searchFromAddressBarEnabledByUser", "true");
Deleted : user_pref("CT3289847.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT3289847.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3289847.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3289847.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3289847.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3289847.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1365648866123");
Deleted : user_pref("CT3289847.serviceLayer_services_appsMetadata_lastUpdate", "1365648865230");
Deleted : user_pref("CT3289847.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1365648865095");
Deleted : user_pref("CT3289847.serviceLayer_services_location_lastUpdate", "1365735273807");
Deleted : user_pref("CT3289847.serviceLayer_services_login_10.14.380.14_lastUpdate", "1365691159439");
Deleted : user_pref("CT3289847.serviceLayer_services_login_10.15.0.562_lastUpdate", "1365778011762");
Deleted : user_pref("CT3289847.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1365648865238");
Deleted : user_pref("CT3289847.serviceLayer_services_searchAPI_lastUpdate", "1365648854931");
Deleted : user_pref("CT3289847.serviceLayer_services_serviceMap_lastUpdate", "1365735271492");
Deleted : user_pref("CT3289847.serviceLayer_services_setupAPI_lastUpdate", "1365648855851");
Deleted : user_pref("CT3289847.serviceLayer_services_toolbarContextMenu_lastUpdate", "1365648865019");
Deleted : user_pref("CT3289847.serviceLayer_services_toolbarSettings_lastUpdate", "1365778011208");
Deleted : user_pref("CT3289847.serviceLayer_services_translation_lastUpdate", "1365735272528");
Deleted : user_pref("CT3289847.settingsINI", true);
Deleted : user_pref("CT3289847.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3289847.showToolbarPermission", "false");
Deleted : user_pref("CT3289847.smartbar.CTID", "CT3289847");
Deleted : user_pref("CT3289847.smartbar.Uninstall", "0");
Deleted : user_pref("CT3289847.smartbar.homepage", true);
Deleted : user_pref("CT3289847.smartbar.isHidden", true);
Deleted : user_pref("CT3289847.smartbar.toolbarName", "WhiteSmoke New ");
Deleted : user_pref("CT3289847.startPage", "true");
Deleted : user_pref("CT3289847.toolbarBornServerTime", "11-4-2013");
Deleted : user_pref("CT3289847.toolbarCurrentServerTime", "12-4-2013");
Deleted : user_pref("CT3289847.toolbarLoginClientTime", "Thu Apr 11 2013 16:35:18 GMT-0400 (Eastern Daylight T[...]
Deleted : user_pref("CT3289847_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("CT3294791.1000082.isPlayDisplay", "true");
Deleted : user_pref("CT3294791.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Deleted : user_pref("CT3294791.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3294791.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT3294791.FF19Solved", "true");
Deleted : user_pref("CT3294791.FirstTime", "true");
Deleted : user_pref("CT3294791.FirstTimeFF3", "true");
Deleted : user_pref("CT3294791.PG_ENABLE", "dHJ1ZQ==");
Deleted : user_pref("CT3294791.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Deleted : user_pref("CT3294791.SF_STATUS.enc", "RU5BQkxFRA==");
Deleted : user_pref("CT3294791.SF_USER_ID.enc", "Y2lkXzIyNTIwMTMxOTU1NTgzMzg5MDM=");
Deleted : user_pref("CT3294791.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT329[...]
Deleted : user_pref("CT3294791.UserID", "UN12355583662464419");
Deleted : user_pref("CT3294791.YTbyClickFavorites.enc", "W10=");
Deleted : user_pref("CT3294791.YTbyClickRecent.enc", "W10=");
Deleted : user_pref("CT3294791.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3294791.autoDisableScopes", 0);
Deleted : user_pref("CT3294791.browser.search.defaultthis.engineName", "true");
Deleted : user_pref("CT3294791.cbfirsttime.enc", "V2VkIE1heSAyMiAyMDEzIDE2OjE3OjE1IEdNVC0wNDAwIChFYXN0ZXJuIFN0[...]
Deleted : user_pref("CT3294791.defaultSearch", "true");
Deleted : user_pref("CT3294791.embeddedsData", "[{\"appId\":\"130089396748860745\",\"apiPermissions\":{\"cross[...]
Deleted : user_pref("CT3294791.enableAlerts", "true");
Deleted : user_pref("CT3294791.enableFix404ByUser", "TRUE");
Deleted : user_pref("CT3294791.enableSearchFromAddressBar", "true");
Deleted : user_pref("CT3294791.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3294791.fixPageNotFoundError", "true");
Deleted : user_pref("CT3294791.fixPageNotFoundErrorByUser", "true");
Deleted : user_pref("CT3294791.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3294791.fixUrls", true);
Deleted : user_pref("CT3294791.installDate", "22/5/2013 11:15:00");
Deleted : user_pref("CT3294791.installId", "stub.exe");
Deleted : user_pref("CT3294791.installSessionId", "{BECD15F8-F851-4052-AD18-7AB94D7C72B5}");
Deleted : user_pref("CT3294791.installSp", "TRUE");
Deleted : user_pref("CT3294791.installType", "conduitnsisintegration");
Deleted : user_pref("CT3294791.installUsage", "2013-05-22T23:17:02.7008829+03:00");
Deleted : user_pref("CT3294791.installUsageEarly", "2013-05-22T23:17:00.0020483+03:00");
Deleted : user_pref("CT3294791.installerVersion", "1.4.2.3");
Deleted : user_pref("CT3294791.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3294791.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3294791.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3294791.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3294791.keyword", "true");
Deleted : user_pref("CT3294791.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Deleted : user_pref("CT3294791.lastVersion", "10.16.2.509");
Deleted : user_pref("CT3294791.mam_gk_appStateReportTime.enc", "MTM2OTI1MzgyNzc5Mg==");
Deleted : user_pref("CT3294791.mam_gk_appState_CouponBuddy.enc", "b24=");
Deleted : user_pref("CT3294791.mam_gk_appState_Easytobook.enc", "b24=");
Deleted : user_pref("CT3294791.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Deleted : user_pref("CT3294791.mam_gk_appState_PriceGong.enc", "b24=");
Deleted : user_pref("CT3294791.mam_gk_appState_WindowShopper.enc", "b24=");
Deleted : user_pref("CT3294791.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Deleted : user_pref("CT3294791.mam_gk_appsDefaultEnabled.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3294791.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImN[...]
Deleted : user_pref("CT3294791.mam_gk_currentVersion.enc", "MS42LjAuMQ==");
Deleted : user_pref("CT3294791.mam_gk_eventsCache.enc", "eyJmMDNmZGY0OC00MmEzLTRiNjQtODM4Ny0xMjY4ZWUxMjU4ZmUiO[...]
Deleted : user_pref("CT3294791.mam_gk_first_time.enc", "MQ==");
Deleted : user_pref("CT3294791.mam_gk_gadgetOpen.enc", "d2VsY29tZQ==");
Deleted : user_pref("CT3294791.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Deleted : user_pref("CT3294791.mam_gk_lastLoginTime.enc", "MTM2OTI1MzgyMzkxNg==");
Deleted : user_pref("CT3294791.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Deleted : user_pref("CT3294791.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3294791.mam_gk_settings1.6.0.1.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Deleted : user_pref("CT3294791.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3294791.mam_gk_showWelcomeGadget.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3294791.mam_gk_userId.enc", "NjE5MjdkMTUtMjU1NC00ZGMxLWFkMjEtNzY5MzEzZTY3NDRl");
Deleted : user_pref("CT3294791.migrateAppsAndComponents", true);
Deleted : user_pref("CT3294791.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Deleted : user_pref("CT3294791.openThankYouPage", "false");
Deleted : user_pref("CT3294791.openUninstallPage", "true");
Deleted : user_pref("CT3294791.originalHomepage", "hxxp://www.yahoo.com/");
Deleted : user_pref("CT3294791.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT32[...]
Deleted : user_pref("CT3294791.originalSearchEngine", "Google");
Deleted : user_pref("CT3294791.revertSettingsEnabled", "false");
Deleted : user_pref("CT3294791.search.searchAppId", "130089396748860745");
Deleted : user_pref("CT3294791.search.searchCount", "0");
Deleted : user_pref("CT3294791.searchFromAddressBarEnabledByUser", "true");
Deleted : user_pref("CT3294791.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT3294791.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3294791.searchRevert", "false");
Deleted : user_pref("CT3294791.searchUserMode", "2");
Deleted : user_pref("CT3294791.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3294791.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3294791.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3294791.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1369253811745");
Deleted : user_pref("CT3294791.serviceLayer_services_appsMetadata_lastUpdate", "1369253812031");
Deleted : user_pref("CT3294791.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1369253811803");
Deleted : user_pref("CT3294791.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1369253808[...]
Deleted : user_pref("CT3294791.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1369253812632")[...]
Deleted : user_pref("CT3294791.serviceLayer_services_location_lastUpdate", "1370455340858");
Deleted : user_pref("CT3294791.serviceLayer_services_login_10.16.2.509_lastUpdate", "1370455337467");
Deleted : user_pref("CT3294791.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1369253811652");
Deleted : user_pref("CT3294791.serviceLayer_services_searchAPI_lastUpdate", "1369263810153");
Deleted : user_pref("CT3294791.serviceLayer_services_serviceMap_lastUpdate", "1370455337304");
Deleted : user_pref("CT3294791.serviceLayer_services_setupAPI_lastUpdate", "1369263809260");
Deleted : user_pref("CT3294791.serviceLayer_services_toolbarContextMenu_lastUpdate", "1369253811523");
Deleted : user_pref("CT3294791.serviceLayer_services_toolbarSettings_lastUpdate", "1370455337387");
Deleted : user_pref("CT3294791.serviceLayer_services_translation_lastUpdate", "1370455337826");
Deleted : user_pref("CT3294791.settingsINI", true);
Deleted : user_pref("CT3294791.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3294791.showToolbarPermission", "false");
Deleted : user_pref("CT3294791.smartbar.CTID", "CT3294791");
Deleted : user_pref("CT3294791.smartbar.Uninstall", "0");
Deleted : user_pref("CT3294791.smartbar.homepage", "true");
Deleted : user_pref("CT3294791.smartbar.isHidden", true);
Deleted : user_pref("CT3294791.smartbar.toolbarName", "Vafmusic2 ");
Deleted : user_pref("CT3294791.startPage", "true");
Deleted : user_pref("CT3294791.toolbarBornServerTime", "22-5-2013");
Deleted : user_pref("CT3294791.toolbarCurrentServerTime", "5-6-2013");
Deleted : user_pref("CT3294791.toolbarLoginClientTime", "Wed May 22 2013 16:16:52 GMT-0400 (Eastern Standard T[...]
Deleted : user_pref("CT3294791.url_history0001.enc", "aHR0cDovL3d3dy55YWhvby5jb20vOjo6Y2xpY2toYW5kbGVyOjo6MTM2[...]
Deleted : user_pref("CT3294791.versionFromInstaller", "10.16.2.9");
Deleted : user_pref("CT3294791_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("Smartbar.ConduitHomepagesList", "");
Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");
Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");
Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C[...]
Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3294791");
Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Deleted : user_pref("browser.search.defaultthis.engineName", "Vafmusic2 Customized Web Search");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3294791&CUI[...]
Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3294791&SearchSource=2&CU[...]
Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3294791");
Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3289847&octid=CT3289847[...]
Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3294791");
Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3294791");
Deleted : user_pref("smartbar.machineId", "99IOF5TMEEYUMZZM7CYH67LFITE");
Deleted : user_pref("smartbar.originalHomepage", "www.yahoo.com");
Deleted : user_pref("smartbar.originalSearchAddressUrl", "hxxp://isearch.avg.com/search?cid={0BAA4612-B26C-431[...]
Deleted : user_pref("smartbar.originalSearchEngine", "Google");

-\\ Google Chrome v [Unable to get version]

File : C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [31644 octets] - [05/06/2013 13:29:55]
AdwCleaner[S1].txt - [32037 octets] - [05/06/2013 16:38:13]

########## EOF - C:\AdwCleaner[S1].txt - [32098 octets] ##########

mare_wbpa

#14
June 05, 2013, 09:36:28 PM
Here's the JRT log.

Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Microsoft Windows XP x86
Ran by Compaq_Owner on Wed 06/05/2013 at 17:26:08.42
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\uniblue registrybooster 2
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\All Users\application data\strongvault online backup"
Successfully deleted: [Folder] "C:\Documents and Settings\Compaq_Owner\Application Data\strongvault"
Successfully deleted: [Folder] "C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\strongvault"
Successfully deleted: [Folder] "C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\strongvault online backup"
Successfully deleted: [Folder] "C:\Program Files\coupons"
Successfully deleted: [Folder] "C:\Program Files\strongvault online backup"
Successfully deleted: [Folder] "C:\Documents and Settings\All Users\start menu\programs\hot deals"



~~~ FireFox

Successfully deleted: [File] C:\Documents and Settings\Compaq_Owner\Application Data\mozilla\firefox\profiles\gbhvogpj.default\searchplugins\youtube-video-search.xml
Successfully deleted the following from C:\Documents and Settings\Compaq_Owner\Application Data\mozilla\firefox\profiles\gbhvogpj.default\prefs.js

user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11");
Emptied folder: C:\Documents and Settings\Compaq_Owner\Application Data\mozilla\firefox\profiles\gbhvogpj.default\minidumps [11 files]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 06/05/2013 at 17:32:36.25
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Print
Go Up Pages1 2 3 ... 10
User actions