26 replies to this topic

[peachy_dar]

I have dusted off and revived an old gateway pc with XP that is running very slow to boot up and frequently "not responding" at the top of any window in use.  I have uninstalled software and data files that are outdated and no longer needed.  I have updated adobe flashplayer, and I'm sure there is more that needs updated.

 

I tried to install our 3 pc version of Kaspersky, but it tells me to insert a disk in the drive.  The disk is IN the drive.  the other 2 pc's in the house can read it.  This old gateway can read other disks, just not this one.  I have washed this cd thinking somehow it got dirty, but that did not help either.  so right now I have no antivirus on this machine.  Any ideas on how to get it on?

 

We are getting a ton of snow today, so I will be available all day today to follow directions with your help!!

 

Darlene

[jeffce]

Hi and Welcome!!   
 
My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:

• The fixes are specific to your problem and should only be used for the issues on this machine.
• It's often worth reading through these instructions and printing them for ease of reference.
• If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
• Please reply to this thread. Do not start a new topic.
• If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it.
• Please be sure to subscribe to the topic if you have not already done so.

IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data.
 
Having said that....     Let's get going!!  
----------
 
Ok let's see what it is that we have on this system.  
 

Please download DDS from either of these links
 
LINK 1
LINK 2
 
and save it to your desktop.

• Disable any antivirus programs during the scan (If you have difficulty properly disabling your protective programs, refer to this link here )
• Double click dds to run the tool.
• When done, two DDS.txt's will open.
• Save both reports to your desktop.

---------------------------------------------------
Please include the contents of the following in your next reply:
 
DDS.txt
 
Attach.txt
----------
 

 AdwCleaner
 
Please download AdwCleaner by Xplode and save to your Desktop.

• Double click on AdwCleaner.exe to run the tool
  Vista/Windows 7/8 users right-click and select Run As Administrator.
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Copy and paste the contents of that logfile in your next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

----------
 

Malwarebytes Anti-Rootkit
 
Please download Malwarebytes Anti-Rootkit and save it to your desktop.

• Be sure to print out and follow the instructions provided on that same page.
• Caution: This is a beta version so please be sure to read the disclaimer and back up all your data before using.
• Scan your system for malware
• If malware is found, please go to the MBAR folder and then copy/paste the contents of the MBAR-log-***.txt file to your next reply.

If there is no malware found, please let me know as well.
----------

[peachy_dar]

 

ok - I ran DDS and have attached those two files...

 

on to the next step..

 

dar

Attached Files

•  attach.txt   24.66KB   279 downloads
•  dds.txt   18.33KB   232 downloads

[peachy_dar]

here is the adwcleaner logfile:

 

# AdwCleaner v3.020 - Report created 02/03/2014 at 15:42:42
# Updated 27/02/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Road Queen - GATEWAY
# Running from : C:\Documents and Settings\Road Queen\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : BackupStack

***** [ Files / Folders ] *****

File Found : C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\searchplugins\Conduit.xml
File Found : C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\searchplugins\fast-browser-search.xml
File Found : C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\searchplugins\MyStart Search.xml
File Found : C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\user.js
File Found : C:\Documents and Settings\Road Queen\Start Menu\Programs\Startup\MyPC Backup.lnk
Folder Found : C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\Extensions\{aed7e1c0-c1e8-4153-a40b-40bb58ba05d9}
Folder Found : C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\Extensions\{dc9b3c92-0be4-4089-9aec-5c25b7f3d0c8}
Folder Found : C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\Extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
Folder Found C:\Documents and Settings\All Users\Application Data\Viewpoint
Folder Found C:\Documents and Settings\Owner.PIROZZI\Application Data\uniblue
Folder Found C:\Documents and Settings\Owner.PIROZZI\Application Data\Viewpoint
Folder Found C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\Conduit
Folder Found C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\ConduitCommon
Folder Found C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\CT2153072
Folder Found C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\CT2333073
Folder Found C:\Documents and Settings\Road Queen\Start Menu\Programs\MyPC Backup
Folder Found C:\Program Files\AskBarDis
Folder Found C:\Program Files\MyPC Backup
Folder Found C:\Program Files\Viewpoint

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\AskBarDis
Key Found : HKCU\Software\AskBarDis
Key Found : HKCU\Software\Babylon
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{201F27D4-3704-41D6-89C1-AA35E39143ED}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{327C2873-E90D-4C37-AA9D-10AC9BABA46C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{201F27D4-3704-41D6-89C1-AA35E39143ED}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{327C2873-E90D-4C37-AA9D-10AC9BABA46C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Found : HKCU\Software\WEDLMNGR
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : HKLM\Software\AskBarDis
Key Found : HKLM\SOFTWARE\Classes\AppID\{055069F3-F78B-4BD1-A277-FE66648D3300}
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\AppID\BHO.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Key Found : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\SOFTWARE\Classes\CShared.TB4Client
Key Found : HKLM\SOFTWARE\Classes\CShared.TB4Script
Key Found : HKLM\SOFTWARE\Classes\CShared.TB4Server
Key Found : HKLM\Software\Classes\Installer\Features\90C64EA18BA25EE488BF80DCF07F2FFD
Key Found : HKLM\Software\Classes\Installer\Products\90C64EA18BA25EE488BF80DCF07F2FFD
Key Found : HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
Key Found : HKLM\SOFTWARE\Classes\Interface\{45D59156-647B-4B06-B20E-0E297A1077BD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}
Key Found : HKLM\Software\ImInstaller
Key Found : HKLM\Software\MetaStream
Key Found : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Found : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Found : HKLM\SOFTWARE\Microsoft\Office\Word\Addins\HostOL.MailAnim
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Ask Toolbar_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mywebsearch bar uninstall
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus Updater
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\90C64EA18BA25EE488BF80DCF07F2FFD
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Key Found : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP
Key Found : HKLM\Software\Viewpoint
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://www.fastbrowsersearch.com/new-tab/?v=19&tid={26CB0496-CF56-4a87-81AE-5E940A0EFCEC}

-\\ Mozilla Firefox v12.0 (en-US)

[ File : C:\Documents and Settings\Road Queen\Application Data\Mozilla\Firefox\Profiles\4e89e6pn.default\prefs.js ]

Line Found : user_pref("CT2153072..clientLogIsEnabled", false);
Line Found : user_pref("CT2153072..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Found : user_pref("CT2153072..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Found : user_pref("CT2153072.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Found : user_pref("CT2153072.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/default.aspx");
Line Found : user_pref("CT2153072.AllowNonPrivacy", false);
Line Found : user_pref("CT2153072.BrowserCompStateIsOpen_130142262612540640", true);
Line Found : user_pref("CT2153072.BrowserCompStateIsOpen_1367160373000", true);
Line Found : user_pref("CT2153072.CT2153072.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2153072&octid=CT2153072&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_[...]
Line Found : user_pref("CT2153072.CTID", "CT2153072");
Line Found : user_pref("CT2153072.CTPBaseServerUrl", "hxxp://grouping.services.conduit.com/");
Line Found : user_pref("CT2153072.CommunitiesChangesLastCheckTime", "0");
Line Found : user_pref("CT2153072.CommunityChanged", false);
Line Found : user_pref("CT2153072.ConfigurationLastCheckTime", "Sat Mar 01 2014 16:58:36 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.CurrentServerDate", "2-3-2014");
Line Found : user_pref("CT2153072.DialogsAlignMode", "LTR");
Line Found : user_pref("CT2153072.DialogsGetterLastCheckTime", "Sat Mar 01 2014 16:58:48 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.DownloadReferralCookieData", "");
Line Found : user_pref("CT2153072.EMailNotifierCheckInterval", "1");
Line Found : user_pref("CT2153072.EMailNotifierLabelLength", 5);
Line Found : user_pref("CT2153072.EMailNotifierPollDate", "Sat Mar 01 2014 17:02:22 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.EMailNotifierSound", "C:\\WINDOWS\\Media\\tada.wav");
Line Found : user_pref("CT2153072.EnableClickToSearchBox", true);
Line Found : user_pref("CT2153072.EnableSearchHistory", false);
Line Found : user_pref("CT2153072.EnableSearchSuggest", true);
Line Found : user_pref("CT2153072.EnableUsage", true);
Line Found : user_pref("CT2153072.FeedLastCount128777200347256943", 100);
Line Found : user_pref("CT2153072.FeedLastCount128777363692413267", 50);
Line Found : user_pref("CT2153072.FeedLastCount128778810644762944", 208);
Line Found : user_pref("CT2153072.FeedLastCount128781528587631930", 0);
Line Found : user_pref("CT2153072.FeedPollDate128777199577725906", "Sun Feb 14 2010 11:29:50 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.FeedPollDate128777200206788012", "Sun Feb 14 2010 11:29:50 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.FeedPollDate128777363692413267", "Sun Feb 14 2010 11:29:50 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.FeedPollDate128778808676637725", "Sun Feb 14 2010 11:29:50 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.FeedPollDate128778809477575595", "Sun Feb 14 2010 11:29:50 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.FeedPollDate128778810102263140", "Sun Feb 14 2010 11:29:50 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.FeedPollDate128778810565075263", "Sun Feb 14 2010 11:29:50 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.FeedPollDate128778813973356326", "Sun Feb 14 2010 11:29:50 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.FeedPollDate128781528587631930", "Tue Feb 10 2009 21:30:22 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.FeedTTL128777363692413267", 60);
Line Found : user_pref("CT2153072.FirstServerDate", "26-12-2009");
Line Found : user_pref("CT2153072.FirstTime", true);
Line Found : user_pref("CT2153072.FirstTimeFF3", true);
Line Found : user_pref("CT2153072.FixPageNotFoundErrors", false);
Line Found : user_pref("CT2153072.GroupingInvalidateCache", false);
Line Found : user_pref("CT2153072.GroupingLastCheckTime", "0");
Line Found : user_pref("CT2153072.GroupingLastServerUpdateTime", "0");
Line Found : user_pref("CT2153072.GroupingServerCheckInterval", 1440);
Line Found : user_pref("CT2153072.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Found : user_pref("CT2153072.HasUserGlobalKeys", true);
Line Found : user_pref("CT2153072.HomePageProtectorEnabled", false);
Line Found : user_pref("CT2153072.HomepageBeforeUnload", "hxxp://home.verizon.yahoo.com/|hxxp://www.facebook.com/home.php?#!/PeachyDar?ref=profile|hxxp://www.youtube.com/user/PEACHYDAR1#p/u");
Line Found : user_pref("CT2153072.Initialize", true);
Line Found : user_pref("CT2153072.InitializeCommonPrefs", true);
Line Found : user_pref("CT2153072.InstallationAndCookieDataSentCount", 1);
Line Found : user_pref("CT2153072.InstallationType", "Unknown");
Line Found : user_pref("CT2153072.InvalidateCache", false);
Line Found : user_pref("CT2153072.IsAlertDBUpdated", true);
Line Found : user_pref("CT2153072.IsGrouping", false);
Line Found : user_pref("CT2153072.IsMulticommunity", false);
Line Found : user_pref("CT2153072.IsOpenThankYouPage", true);
Line Found : user_pref("CT2153072.IsOpenUninstallPage", true);
Line Found : user_pref("CT2153072.LanguagePackLastCheckTime", "Sat Mar 01 2014 16:58:41 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.LanguagePackReloadInterval", "24");
Line Found : user_pref("CT2153072.LanguagePackReloadIntervalMM", 1440);
Line Found : user_pref("CT2153072.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Found : user_pref("CT2153072.LastLogin", "Sat Aug 15 2009 21:26:12 GMT-0400 (Eastern Daylight Time)");
Line Found : user_pref("CT2153072.LastLogin_2.2.0.9", "Fri Nov 06 2009 06:26:39 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.LastLogin_2.4.0.4", "Sat Dec 26 2009 05:17:38 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.LastLogin_2.5.2.14", "Wed Feb 03 2010 19:45:32 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.LastLogin_2.5.6.0", "Sat Aug 07 2010 10:27:35 GMT-0400 (Eastern Daylight Time)");
Line Found : user_pref("CT2153072.LastLogin_3.21.0.1", "Sat Mar 01 2014 16:58:41 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.LatestVersion", "3.20.0.4");
Line Found : user_pref("CT2153072.Locale", "en");
Line Found : user_pref("CT2153072.LoginCache", 4);
Line Found : user_pref("CT2153072.MCDetectTooltipHeight", "83");
Line Found : user_pref("CT2153072.MCDetectTooltipShow", false);
Line Found : user_pref("CT2153072.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Found : user_pref("CT2153072.MCDetectTooltipWidth", "295");
Line Found : user_pref("CT2153072.MyGadgetsServerUrl", "hxxp://services.MyStuff.u-page.com/MyStuffService.asmx/LegacyLogin");
Line Found : user_pref("CT2153072.MyGadgetsTrustedDomains", "conduit.com");
Line Found : user_pref("CT2153072.MyStuffEnabledAtInstallation", true);
Line Found : user_pref("CT2153072.RadioIsPodcast", false);
Line Found : user_pref("CT2153072.RadioLastCheckTime", "Sat Mar 01 2014 16:58:36 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.RadioLastUpdateIPServer", "4");
Line Found : user_pref("CT2153072.RadioLastUpdateServer", "0");
Line Found : user_pref("CT2153072.RadioMediaID", "5856291");
Line Found : user_pref("CT2153072.RadioMediaType", "Media Player");
Line Found : user_pref("CT2153072.RadioMenuSelectedID", "EBRadioMenu_CT2153072_RECENT5856291");
Line Found : user_pref("CT2153072.RadioShrinked", "expanded");
Line Found : user_pref("CT2153072.RadioStationName", "Classic%20Rock");
Line Found : user_pref("CT2153072.RadioStationURL", "hxxp://www.1club.fm/go/tunein.aspx?station=classicrock");
Line Found : user_pref("CT2153072.RadioVolume", "37");
Line Found : user_pref("CT2153072.SHRINK_TOOLBAR", 1);
Line Found : user_pref("CT2153072.SearchAPILastCheckTime", "Sat Mar 01 2014 16:58:36 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.SearchBoxWidth", 120);
Line Found : user_pref("CT2153072.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2153072&octid=EB_ORIGINAL_CTID&SearchSource=1");
Line Found : user_pref("CT2153072.SearchEngineBeforeUnload", "Google");
Line Found : user_pref("CT2153072.SearchFromAddressBarIsInit", true);
Line Found : user_pref("CT2153072.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2153072&SearchSource=2&q=");
Line Found : user_pref("CT2153072.SearchInNewTabEnabled", true);
Line Found : user_pref("CT2153072.SearchInNewTabIntervalMM", 1440);
Line Found : user_pref("CT2153072.SearchInNewTabLastCheckTime", "Sat Aug 07 2010 10:27:33 GMT-0400 (Eastern Daylight Time)");
Line Found : user_pref("CT2153072.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
Line Found : user_pref("CT2153072.SearchInNewTabURLFromSearchAPI", "hxxp://search.conduit.com/?ctid=CT2153072&octid=CT2153072&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_ID");
Line Found : user_pref("CT2153072.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Line Found : user_pref("CT2153072.SearchInNewTabUserEnabled", false);
Line Found : user_pref("CT2153072.SearchProtectorEnabled", false);
Line Found : user_pref("CT2153072.SearchProtectorToolbarDisabled", false);
Line Found : user_pref("CT2153072.Server", "hxxp://users.conduit.com");
Line Found : user_pref("CT2153072.ServiceMapLastCheckTime", "Sat Mar 01 2014 16:58:33 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.SettingsCheckIntervalMin", 120);
Line Found : user_pref("CT2153072.SettingsInvalidateCache", false);
Line Found : user_pref("CT2153072.SettingsLastCheckTime", "Sat Mar 01 2014 16:58:35 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.SettingsLastUpdate", "1393331496");
Line Found : user_pref("CT2153072.ThirdPartyComponentsInterval", 504);
Line Found : user_pref("CT2153072.ThirdPartyComponentsLastCheck", "Sat Mar 01 2014 16:58:33 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.ThirdPartyComponentsLastUpdate", "1331805997");
Line Found : user_pref("CT2153072.ToolbarAlignMode", "SYSTEM");
Line Found : user_pref("CT2153072.ToolbarName", "DesignsBySiCK");
Line Found : user_pref("CT2153072.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2153072");
Line Found : user_pref("CT2153072.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,codefuel.com,tbccint.com,trovi.com,seccint.com,cpccint.com,OurToolbar.com,Comm[...]
Line Found : user_pref("CT2153072.UserID", "UN20090207073041949");
Line Found : user_pref("CT2153072.ValidationData_Search", 1);
Line Found : user_pref("CT2153072.ValidationData_Toolbar", 2);
Line Found : user_pref("CT2153072.VusualLastUpdateTime", "1246177746");
Line Found : user_pref("CT2153072.WeatherNetwork", "");
Line Found : user_pref("CT2153072.WeatherPollDate", "Sat Mar 01 2014 16:58:38 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.WeatherUnit", "F");
Line Found : user_pref("CT2153072.alertChannelId", "552400");
Line Found : user_pref("CT2153072.clientLogIsEnabled", true);
Line Found : user_pref("CT2153072.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Found : user_pref("CT2153072.components.1000", false);
Line Found : user_pref("CT2153072.components.1000034", true);
Line Found : user_pref("CT2153072.components.1000080", false);
Line Found : user_pref("CT2153072.components.1000082", true);
Line Found : user_pref("CT2153072.components.1000234", true);
Line Found : user_pref("CT2153072.components.1001", true);
Line Found : user_pref("CT2153072.components.1002", true);
Line Found : user_pref("CT2153072.components.1003", true);
Line Found : user_pref("CT2153072.components.1004", true);
Line Found : user_pref("CT2153072.components.1005", false);
Line Found : user_pref("CT2153072.components.1006", false);
Line Found : user_pref("CT2153072.components.1007", false);
Line Found : user_pref("CT2153072.components.1008", false);
Line Found : user_pref("CT2153072.components.1009", true);
Line Found : user_pref("CT2153072.components.1010", true);
Line Found : user_pref("CT2153072.components.1011", false);
Line Found : user_pref("CT2153072.components.1012", false);
Line Found : user_pref("CT2153072.components.128777192988975777", true);
Line Found : user_pref("CT2153072.components.128777200347256943", false);
Line Found : user_pref("CT2153072.components.128777363692413267", false);
Line Found : user_pref("CT2153072.components.128777380361163407", false);
Line Found : user_pref("CT2153072.components.128778810644762944", false);
Line Found : user_pref("CT2153072.components.128781528587631930", false);
Line Found : user_pref("CT2153072.components.128791814989613269", false);
Line Found : user_pref("CT2153072.components.gadgethxxp://www.labpixies.com/campaigns/calc/calc.html275260", false);
Line Found : user_pref("CT2153072.countryCode", "US");
Line Found : user_pref("CT2153072.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com;social.tbccint.com;apps.tbccint.com;services.a[...]
Line Found : user_pref("CT2153072.globalFirstTimeInfoLastCheckTime", "Sat Mar 01 2014 16:58:38 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.homepageProtectorEnableByLogin", true);
Line Found : user_pref("CT2153072.initDone", true);
Line Found : user_pref("CT2153072.isAppTrackingManagerOn", false);
Line Found : user_pref("CT2153072.myStuffEnabled", true);
Line Found : user_pref("CT2153072.myStuffPublihserMinWidth", 400);
Line Found : user_pref("CT2153072.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Found : user_pref("CT2153072.myStuffServiceIntervalMM", 1440);
Line Found : user_pref("CT2153072.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Found : user_pref("CT2153072.revertSettingsEnabled", true);
Line Found : user_pref("CT2153072.searchProtectorDialogDelayInSec", 10);
Line Found : user_pref("CT2153072.searchProtectorEnableByLogin", true);
Line Found : user_pref("CT2153072.testingCtid", "");
Line Found : user_pref("CT2153072.toolbarAppMetaDataLastCheckTime", "Sat Mar 01 2014 16:58:38 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2153072.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Found : user_pref("CT2333073.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Found : user_pref("CT2333073.CTID", "CT2333073");
Line Found : user_pref("CT2333073.Chat.Meebo.ServerLastCheckTime", "Sun Feb 14 2010 11:29:49 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.Chat.Meebo.ServerLastResponseTime", "Sun Feb 14 2010 11:29:54 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.Chat.Meebo.rooms.facebookapplicationscommunitychatf624ab21", 0);
Line Found : user_pref("CT2333073.Chat.ServerLastCheckTime", "Sun Feb 14 2010 11:29:49 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.CommunitiesChangesLastCheckTime", "Sun Feb 14 2010 11:29:49 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.CommunityChanged", true);
Line Found : user_pref("CT2333073.CurrentServerDate", "14-2-2010");
Line Found : user_pref("CT2333073.DialogsAlignMode", "LTR");
Line Found : user_pref("CT2333073.DownloadDomainsCheckInterval", "168");
Line Found : user_pref("CT2333073.DownloadDomainsListLastCheckTime", "Fri Feb 12 2010 05:48:02 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.DownloadDomainsListLastServerUpdateTime", "1201073583");
Line Found : user_pref("CT2333073.EnableUsage", false);
Line Found : user_pref("CT2333073.FeedPollDate12113172", "Sun Feb 14 2010 11:29:54 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.FirstServerDate", "5-2-2010");
Line Found : user_pref("CT2333073.FirstTime", true);
Line Found : user_pref("CT2333073.FirstTimeFF3", true);
Line Found : user_pref("CT2333073.GroupingServerCheckInterval", 1440);
Line Found : user_pref("CT2333073.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Found : user_pref("CT2333073.Initialize", true);
Line Found : user_pref("CT2333073.InitializeCommonPrefs", true);
Line Found : user_pref("CT2333073.InstalledDate", "Sat Sep 12 2009 11:56:46 GMT-0400 (Eastern Daylight Time)");
Line Found : user_pref("CT2333073.InvalidateCache", false);
Line Found : user_pref("CT2333073.IsGrouping", false);
Line Found : user_pref("CT2333073.IsMulticommunity", true);
Line Found : user_pref("CT2333073.IsOpenThankYouPage", true);
Line Found : user_pref("CT2333073.IsOpenUninstallPage", true);
Line Found : user_pref("CT2333073.LanguagePackLastCheckTime", "Sat Feb 13 2010 17:02:35 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.LanguagePackReloadIntervalMM", 1440);
Line Found : user_pref("CT2333073.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Found : user_pref("CT2333073.LastLogin_2.2.0.9", "Sun Oct 18 2009 14:13:53 GMT-0400 (Eastern Daylight Time)");
Line Found : user_pref("CT2333073.LastLogin_2.4.0.4", "Sat Dec 19 2009 07:18:18 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.LastLogin_2.5.6.0", "Sun Feb 14 2010 08:27:55 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.LatestVersion", "2.1.0.18");
Line Found : user_pref("CT2333073.Locale", "en");
Line Found : user_pref("CT2333073.LoginCache", 4);
Line Found : user_pref("CT2333073.MCDetectTooltipHeight", "83");
Line Found : user_pref("CT2333073.MCDetectTooltipShow", false);
Line Found : user_pref("CT2333073.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Found : user_pref("CT2333073.MCDetectTooltipWidth", "295");
Line Found : user_pref("CT2333073.RadioIsPodcast", false);
Line Found : user_pref("CT2333073.RadioLastCheckTime", "Sun Feb 14 2010 08:27:56 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.RadioLastUpdateIPServer", "4");
Line Found : user_pref("CT2333073.RadioLastUpdateServer", "128929877726170000");
Line Found : user_pref("CT2333073.RadioMediaID", "9890");
Line Found : user_pref("CT2333073.RadioMediaType", "Media Player");
Line Found : user_pref("CT2333073.RadioMenuSelectedID", "EBRadioMenu_CT2333073_RECENT9890");
Line Found : user_pref("CT2333073.RadioShrinked", "expanded");
Line Found : user_pref("CT2333073.RadioStationName", "Super70s%20(70s)");
Line Found : user_pref("CT2333073.RadioStationURL", "hxxp://www.myfreenetradio.com/listen70s.asx");
Line Found : user_pref("CT2333073.RadioVolume", "78");
Line Found : user_pref("CT2333073.SHRINK_TOOLBAR", 1);
Line Found : user_pref("CT2333073.SearchBoxWidth", 150);
Line Found : user_pref("CT2333073.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2333073&octid=EB_ORIGINAL_CTID");
Line Found : user_pref("CT2333073.SearchFromAddressBarIsInit", true);
Line Found : user_pref("CT2333073.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2333073&SearchSource=2&q=");
Line Found : user_pref("CT2333073.SearchInNewTabEnabled", true);
Line Found : user_pref("CT2333073.SearchInNewTabIntervalMM", 1440);
Line Found : user_pref("CT2333073.SearchInNewTabLastCheckTime", "Sun Feb 14 2010 08:27:54 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.SearchInNewTabServiceUrl", "hxxp://hosting.conduit-services.com/newtab/?ctid=EB_TOOLBAR_ID");
Line Found : user_pref("CT2333073.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Line Found : user_pref("CT2333073.SettingsCheckIntervalMin", 120);
Line Found : user_pref("CT2333073.SettingsLastCheckTime", "Sun Feb 14 2010 11:29:49 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.SettingsLastUpdate", "1266143077");
Line Found : user_pref("CT2333073.ThirdPartyComponentsInterval", 504);
Line Found : user_pref("CT2333073.ThirdPartyComponentsLastCheck", "Thu Feb 04 2010 20:21:59 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("CT2333073.ThirdPartyComponentsLastUpdate", "1246964438");
Line Found : user_pref("CT2333073.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
Line Found : user_pref("CT2333073.UserID", "UN84723193088818352");
Line Found : user_pref("CT2333073.ValidationData_Search", 2);
Line Found : user_pref("CT2333073.ValidationData_Toolbar", 2);
Line Found : user_pref("CT2333073.clientLogIsEnabled", true);
Line Found : user_pref("CT2333073.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Found : user_pref("CT2333073.components.1000034", false);
Line Found : user_pref("CT2333073.components.1000234", false);
Line Found : user_pref("CT2333073.components.1002", true);
Line Found : user_pref("CT2333073.components.1004", true);
Line Found : user_pref("CT2333073.components.1009", true);
Line Found : user_pref("CT2333073.myStuffEnabled", true);
Line Found : user_pref("CT2333073.myStuffPublihserMinWidth", 400);
Line Found : user_pref("CT2333073.myStuffSearchUrl", "hxxp://search.conduit.com/Results.aspx?q=SEARCH_TERM&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID&SearchType=ToolbarComponents");
Line Found : user_pref("CT2333073.myStuffServiceIntervalMM", 1440);
Line Found : user_pref("CT2333073.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Found : user_pref("CT2333073.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2153072/CT2153072", "\"016f5a2de9a4442e4e53e7d83833728f3\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2153072", "\"1369752661\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.21.0.1", "\"f414eeaa6bece1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://ip2location.conduit-services.com/ip/?ctid=CT2153072&ver=3.21.0.1&client=ToolbarConfiguration", "\"00e4ed1ef59c7b90fe521565837ae620\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2153072", "\"7097fd37277b6a1b754b125bd11d0197\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"cbb49aa0393173fe3dab6467b064132d\"");
Line Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\Road Queen\\Application Data\\Mozilla\\Firefox\\Profiles\\4e89e6pn.default\\conduitCommon\\modules\\3.21.0.1");
Line Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.21.0.1");
Line Found : user_pref("CommunityToolbar.MiniIPageGadgetPosition. hxxp://storage.conduit.com/gadgets/LiveTV.html?source=hxxp://www.cbc.ca/mrl3/8752/hourly/cbcnews.wmv", "908x210");
Line Found : user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.labpixies.com/campaigns/calc/calc.html", "1065x167");
Line Found : user_pref("CommunityToolbar.MiniIPageGadgetSize. hxxp://storage.conduit.com/gadgets/LiveTV.html?source=hxxp://mfile.akamai.com/12441/live/reflector:39570.asx", "389x224");
Line Found : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://threadchart.info/threadchartwidget.php", "499x325");
Line Found : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.conduit-widgets.com/?guid=00000003-7dd7-0003-0000-000000000000", "274x209");
Line Found : user_pref("CommunityToolbar.MyGadgetsIntervalMM", 1440);
Line Found : user_pref("CommunityToolbar.MyGadgetsShowDetectDialog", true);
Line Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
Line Found : user_pref("CommunityToolbar.ToolbarsList", "CT2153072,CT2333073");
Line Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2153072");
Line Found : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Line Found : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Aug 07 2010 11:27:31 GMT-0400 (Eastern Daylight Time)");
Line Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Found : user_pref("CommunityToolbar.alert.locale", "en");
Line Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Aug 07 2010 10:27:31 GMT-0400 (Eastern Daylight Time)");
Line Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1276093853");
Line Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line Found : user_pref("CommunityToolbar.alert.userId", "{ced281c7-5fc5-47e1-8443-a018aa4d08ea}");
Line Found : user_pref("CommunityToolbar.globalUserId", "39f61aa4-25de-4694-81ff-a0f3d4501e78");
Line Found : user_pref("browser.search.defaultenginename", "MyStart Search");
Line Found : user_pref("browser.search.defaultthis.engineName", "Fast Browser Search");
Line Found : user_pref("browser.search.order.1", "Fast Browser Search");
Line Found : user_pref("extensions.snipit.askTbInstalled", true);

*************************

AdwCleaner[R0].txt - [37527 octets] - [02/03/2014 15:42:42]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [37588 octets] ##########
 

[peachy_dar]

Malwarebytes anti-rootkit is running... not sure how long this one takes....

 

dar

[peachy_dar]

Jeff:

 

Malwarebytes Anti-Rootkit found one malware - I clicked on clean up.  It did not ask me to reboot, so I did not.  I am running it again to make sure all is well!! 

 

I will be back...

 

dar

[jeffce]

Hi,

 

It there is a log produced by MBAR please post that.  

[peachy_dar]

Jeff:

 

I ran malawarebytes anti-rootkit again - it found nothing this time.  I did reboot, and it seems to be improving.  Altho it is still slow to boot up...would there be too something in the startup file and/or config.sys that might be stangeling it?

 

I can run more this evening if your up to it!

 

dar

[peachy_dar]

I got so excited, I forgot to post this one!!

 

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2014.03.02.09

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Road Queen :: GATEWAY [administrator]

Protection: Enabled

3/2/2014 1:34:11 PM
mbam-log-2014-03-02 (13-34-11).txt

Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 170023
Time elapsed: 1 hour(s), 46 minute(s), 9 second(s) [aborted]

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\RECYCLER\S-1-5-21-3909265270-4093740595-4061975602-1009\Dc2\adobe reader formerly acrobat reader setup(1).exe (PUP.Optional.BundleInstaller.A) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-3909265270-4093740595-4061975602-1009\Dc2\adobe reader formerly acrobat reader setup.exe (PUP.Optional.BundleInstaller.A) -> Quarantined and deleted successfully.

(end)
 

[jeffce]

Oh we still have work to do....  
 
Just out of curiosity....what are your plans on using this operating system when it is no longer supported on April 8th??
 
Please read through these instructions to familarize yourself with what to expect when this tool runs
 
Download ComboFix from one of these locations:
 
Link 1
Link 2
 
* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools.  Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs
• Double click on ComboFix.exe & follow the prompts.
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal.  It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.
 

 
Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
 

 
Click on Yes, to continue scanning for malware.
 
When finished, it shall produce a log for you.  Please include the C:\ComboFix.txt in your next reply.
 
Notes:
 
1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. CF disconnects your machine from the internet.  The connection is automatically restored before CF completes its run.  If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
4. If you get a message saying "Illegal operation attempted on a registry key that has been marked for deletion", please restart your computer.
----------

[peachy_dar]

Jeff:

 

You know i"m having trouble with the CD drive in this pc - I simply cannot get this computer to read that Kaspersky disk.  So I tried to install the Kodak printer, and it read that disk!!!  But it won't read the Kaspersky disk!!

 

I exited out, I did not follow thru with installing it.

 

I"m going down for dinner...bbl!

 

dar

 

[jeffce]

Hi,

 

Don't overlook post 10

[peachy_dar]

 

Jeff:  I will follow #10 post after dinner...should keep me out of trouble!!

 

This old XP computer is going to end up with  my hubby where he works.  He is in a heated garage and on his lunch he watches movies, checks his e-mail, surfs on ebay, that's about it.  He is not going to be doing any printing, no networking, no power hungry software.  Just movies, ebay and email.  I know they won't support XP after early April, but it will still run good enough for what he is going to be using it for.  I personally won't be using it at all!!  It should be good enough, right?

 

dar

[jeffce]

Hi,
 
Well.....that is debatable....you might want to give this a read though.  
 
http://www.malwarere...84#.UxPKquNdXuW

[peachy_dar]

Hi,
 
Well.....that is debatable....you might want to give this a read though.  
 
http://www.malwarere...84#.UxPKquNdXuW

I think I will advise him to use it ONLY for watching movies on CD - no email, no ebay..just use it for movies and don't get on the internet with it.  I know he uses his phone as a hot spot to get online - I assume that will be a bad idea after april 8th - somehow they will manage to get to his phone thru the hot spot.

 

what do ya think?

 

dar