johnnykaty

15 juli 2013

Zoek.exe Version 4.0.0.4 Updated 14-July-2013

Tool run by Katy on 15-07-13 at 16:30:08,08.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

==== Older Logs ======================

C:\zoek-results13-07-13-1826.log 16354 bytes

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\prefs.js:

user_pref("browser.startup.homepage", "http://search.conduit.com/?ctid=CT1060933&SearchSource=13");

user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=3&q={searchTerms}");

user_pref("browser.search.selectedEngine", "Freecorder Customized Web Search");

user_pref("keyword.URL", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=2&CUI=SB_CUI&UM=UM_ID&q=");

Added to C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\prefs.js:

ProfilePath: C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default

user.js not found

---- Lines CT1060933 removed from prefs.js ----

---- Lines CT1060933 modified from prefs.js ----

---- Lines conduit removed from prefs.js ----

---- Lines conduit modified from prefs.js ----

---- Lines Web Search removed from prefs.js ----

---- Lines Web Search modified from prefs.js ----

---- Lines Customized removed from prefs.js ----

---- Lines Customized modified from prefs.js ----

---- Lines CommunityToolbar removed from prefs.js ----

---- Lines CommunityToolbar modified from prefs.js ----

---- FireFox user.js and prefs.js backups ----

user__1820_.backup

prefs__1633_.backup

prefs__1820_.backup

==== Deleting Files \ Folders ======================

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\searchplugins\conduit.xml" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\CT1060933" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\conduitCommon" deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default

- Visualisateur 3D de 20-20 - %ProfilePath%\extensions\2020Player@2020Technologies.com

- Visualisateur 3D de 20-20 - %ProfilePath%\extensions\2020Player_IKEA@2020Technologies.com

- Freecorder Community Toolbar - %ProfilePath%\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}

- DVDVideoSoftTB Community Toolbar - %ProfilePath%\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}

- HP Detect - %ProfilePath%\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2}

- Belgium eID - %ProfilePath%\extensions\belgiumeid@eid.belgium.be.xpi

- Freecorder YouTube Download Wizard - %ProfilePath%\extensions\ytvdw@pgport.com.xpi

- DVDVideoSoft YouTube MP3 and Video Download - %ProfilePath%\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi

- Easy YouTube Video Downloader - %ProfilePath%\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi

- QuickJava - %ProfilePath%\extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox

- Undetermined - %AppDir%\extensions\belgiumeid@eid.belgium.be

- Skype Click to Call - %AppDir%\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

- Java Console - %AppDir%\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}

- Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default

3D76B5C0E02ECC19C1F5756E8FD97F72 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll - Shockwave Flash

6CD3A99DCEDE9C2D7D3BFBF6D4902F5F - C:\Windows\SysWOW64\npdeployJava1.dll - Java Deployment Toolkit 6.0.350.10

10737B44923217BC0E67D26A9FC1F0AA - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll - RealNetworks Chrome Background Extension Plug-In (32-bit)

2645990C521342DCD08963D2DF6CD0D2 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll - RealPlayer HTML5VideoShim Plug-In (32-bit)

1BB1021A875B010EE26D539053B0F894 - C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\extensions\2020Player_IKEA@2020Technologies.com\plugins\NP_2020Player_IKEA.dll - 20-20 3D Viewer for IKEA

15E298B5EC5B89C5994A59863969D9FF - C:\Windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

jfmjfhklogoienhpfnppmbcbjfjnkonk - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx[13-05-12 23:18]

lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[02-10-12 13:14]

RealPlayer HTML5Video Downloader Extension - Katy - Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.be/"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.be/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{8FC7DD8E-64DD-46EE-988C-48663EF19D42}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{0A6BCCF9-C2E6-4BC4-8D77-BE14E3F8F369} Zinio Url="http://www.zinio.com/search/index.jsp?s={searchTerms}&rf=sonyie8search"

{3881495F-B4F0-435F-A016-0B6058F520CE} eBay Url="http://rover.ebay.com/rover/1/1346-81661-16445-1/4?satitle={searchTerms}"

{5B2EDEB8-7C10-4E1B-B1AB-38801804CDC4} Yahoo//fr.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=901452&p={searchTerms}"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

{8FC7DD8E-64DD-46EE-988C-48663EF19D42} Google Url="http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SVEC_nlBE373BE373"

==== shortcuts on Users Desktops ======================

C:\Users\Katy\Desktop\Albelli.be Fotoboeken.lnk - C:\Users\Katy\AppData\Local\Albelli.be Fotoboeken\apc.exe

C:\Users\Katy\Desktop\Audacity 1.3 Beta (Unicode).lnk - C:\Program Files (x86)\Audacity 1.3 Beta (Unicode)\audacity.exe

C:\Users\Katy\Desktop\Computer - Snelkoppeling.lnk -

C:\Users\Katy\Desktop\eID Viewer.lnk - C:\Program Files (x86)\Belgium Identity Card\EidViewer\eID Viewer.exe

C:\Users\Katy\Desktop\HiJackThis.lnk - C:\Users\Katy\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

C:\Users\Katy\Desktop\Microsoft Office Excel 2007.lnk - C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe

C:\Users\Katy\Desktop\Microsoft Office OneNote 2007.lnk - C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe

C:\Users\Katy\Desktop\Microsoft Office PowerPoint 2007.lnk - C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe

C:\Users\Katy\Desktop\Microsoft Office Word 2007.lnk - C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe

C:\Users\Katy\Desktop\Microsoft SkyDrive.lnk - C:\Users\Katy\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

C:\Users\Katy\Desktop\Mihov Image Resizer.lnk - C:\Program Files (x86)\Mihov Image Resizer\Resizer.exe

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe

C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk - C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe

C:\Users\Public\Desktop\Free AVI Video Converter.lnk - C:\Program Files (x86)\DVDVideoSoft\Free AVI Video Converter\FreeAVIVideoConverter.exe

C:\Users\Public\Desktop\HP Solution Center.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\Hpqdirec.exe

C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

C:\Users\Public\Desktop\Media Go.lnk - C:\Program Files (x86)\SONY\Media Go\MediaGo.exe

C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Users\Public\Desktop\Nitro Reader.lnk - C:\Program Files (x86)\Nitro PDF\Reader 2\NitroPDFReader.exe

C:\Users\Public\Desktop\Picasa 3.lnk - C:\Program Files (x86)\Picasa2\Picasa3.exe

C:\Users\Public\Desktop\QuickTime Player.lnk - C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe

C:\Users\Public\Desktop\RealPlayer.lnk - C:\Program Files (x86)\Real\RealPlayer\realplay.exe /launch:desktop

C:\Users\Public\Desktop\Skype.lnk - C:\Windows\Installer\{EA17F4FC-FDBF-4CF8-A529-2D983132D053}\SkypeIcon.exe

C:\Users\Public\Desktop\Zune.lnk - C:\Program Files (x86)\Zune\Zune.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Katy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Albelli.be Fotoboeken\Albelli.be Fotoboeken.lnk - C:\Users\Katy\AppData\Local\Albelli.be Fotoboeken\apc.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belgium - eID\eID Viewer.lnk - C:\Program Files (x86)\Belgium Identity Card\EidViewer\eID Viewer.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belgium - eID\Utilities\MS Office 2010 XAdES XL signature configuration.lnk - C:\Program Files (x86)\Belgium Identity Card\beidoffice2010_XAdES_XL.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belgium - eID\Utilities\MS Outlook registry configuration.lnk - C:\Program Files (x86)\Belgium Identity Card\beidoutlooksnc.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware Help.lnk - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.chm

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Verwijder Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes' Anti-Malware\unins001.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\chameleon.chm

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\Silverlight.Configuration.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Panda Global Protection 2011.lnk - C:\Program Files (x86)\Panda Security\Panda Global Protection 2011\Iface.exe

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Panda Global Protection 2011.lnk - C:\Program Files (x86)\Panda Security\Panda Global Protection 2011\Iface.exe

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Katy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gestionnaire de Connexion.lnk - C:\Program Files (x86)\SFR\Gestionnaire de Connexion\SFR_Gestionnaire_connexion.exe

C:\Users\Katy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Users\Katy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk - H:\fotobewerking\PhotoScape\PhotoScape.exe

C:\Users\Katy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Katy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Katy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe

C:\Users\Katy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Calculator.lnk - C:\Windows\system32\calc.exe

C:\Users\Katy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Users\Katy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe

C:\Users\Katy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Katy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Katy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\users\Katy\AppData\Local\Mozilla\Firefox\Profiles\pk016m86.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\users\Katy\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\Katy\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 15-07-13 at 16:42:21,60 ======================

- - - Updated - - -

dit is trouwens altijd die pagina die opent als ik Mozilla opstart. zelfs nu nog steeds

http://search.conduit.com/?ctid=CT1060933&SearchSource=13

- - - Updated - - -

nog even dit vermelden,

als ik bij extra de startpagina verander naar google, dan gaat het goed voor een keer of 3, 4 en daarna is de bovenstaande link weer mijn startpagina.

14 juli 2013

Ik zie in het logbestand dat er redelijk veel verwijderd is. Maar als ik Mozilla firefox opstart dan opent die nog steeds met een andere opstartscherm dan dat ik zou willen, ik heb al meermaals google opgegeven als opstartscherm maar dat wil niet lukken. Dus om een antwoord te geven op jouw vraag of het al beter gaat nu, is mijn antwoord NEE. Jammer genoeg.

13 juli 2013

hier het gevraagde logbestand

Zoek.exe Version 4.0.0.4 Updated 10-July-2013

Tool run by Katy on 13-07-13 at 18:16:03,79.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

==== System Restore Info ======================

13-07-13 18:16:31 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} deleted successfully

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} deleted successfully

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{bee9ae08-b4e5-4021-ae8b-0befc64d537b} deleted successfully

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

HKEY_USERS\S-1-5-21-1790741306-3834919164-2770277406-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

==== Deleting Services ======================

==== FireFox Fix ======================

ProfilePath: C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default

---- Lines BabylonToolbar removed from prefs.js ----

user_pref("extensions.BabylonToolbar_i.newTab", true);

user_pref("extensions.BabylonToolbar_i.newTabUrl", "http://isearch.claro-search.com/?affID=114164&tt=3412_2&babsrc=NT_iclro&mntrId=32877d390000000000002a8158f8141d");

---- Lines BabylonToolbar modified from prefs.js ----

---- Lines BabylonToolbar removed from user.js ----

---- Lines claro removed from prefs.js ----

---- Lines claro modified from prefs.js ----

---- Lines claro removed from user.js ----

user_pref("extensions.claro.id", "32877d390000000000002a8158f8141d");

user_pref("extensions.claro.instlDay", "15578");

user_pref("extensions.claro.vrsn", "1.6.4.1");

user_pref("extensions.claro.vrsni", "1.6.4.1");

user_pref("extensions.claro_i.vrsnTs", "1.6.4.120:04:50");

user_pref("extensions.claro.prtnrId", "claro");

user_pref("extensions.claro.prdct", "claro");

user_pref("extensions.claro.aflt", "babsst");

user_pref("extensions.claro_i.smplGrp", "none");

user_pref("extensions.claro.tlbrId", "iclaro");

user_pref("extensions.claro.instlRef", "sst");

user_pref("extensions.claro.dfltLng", "en");

user_pref("extensions.claro.excTlbr", false);

user_pref("extensions.claro.admin", false);

---- Lines CT1060933 removed from prefs.js ----

---- Lines CT1060933 modified from prefs.js ----

---- Lines CT2269050 removed from prefs.js ----

---- Lines CT2269050 modified from prefs.js ----

---- Lines conduit removed from prefs.js ----

---- Lines conduit modified from prefs.js ----

---- Lines search.com removed from prefs.js ----

---- Lines search.com modified from prefs.js ----

---- Lines Web Search removed from prefs.js ----

---- Lines Web Search modified from prefs.js ----

---- Lines Customized removed from prefs.js ----

---- Lines Customized modified from prefs.js ----

---- Lines CommunityToolbar removed from prefs.js ----

---- Lines CommunityToolbar modified from prefs.js ----

---- Lines 33e0daa6-3af3-d8b5-6752-10e949c61516 removed from prefs.js ----

---- Lines 33e0daa6-3af3-d8b5-6752-10e949c61516 modified from prefs.js ----

---- FireFox user.js and prefs.js backups ----

user__1820_.backup

prefs__1820_.backup

==== Deleting Files \ Folders ======================

"C:\user.js" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\searchplugins\conduit.xml" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\searchplugins\Web Search.xml" deleted

"C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml" deleted

"C:\Program Files (x86)\Mozilla Firefox\searchplugins\Search_Results.xml" deleted

"C:\Users\Katy\Downloads\SoftonicDownloader_voor_free-video-dub.exe" deleted

"C:\Users\Katy\Downloads\SoftonicDownloader_voor_virtualdub.exe" deleted

"C:\windows\SysNative\Tasks\Express FilesUpdate" deleted

"C:\user.js" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\searchplugins\Search_Results.xml" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\searchplugins\Web Search.xml" deleted

"C:\Users\Public\Desktop\YTD Video Downloader.lnk" deleted

"C:\Users\Katy\AppData\Roaming\WinAVI" deleted

"C:\Program Files (x86)\smartdl" deleted

"C:\Program Files (x86)\ParetoLogic" deleted

"C:\Program Files (x86)\Common Files\ParetoLogic" deleted

"C:\Program Files (x86)\Common Files\DVDVideoSoft\bin" deleted

"C:\Program Files (x86)\Optimizer Pro" deleted

"C:\Program Files (x86)\Wondershare" deleted

"C:\Program Files (x86)\Conduit" deleted

"C:\Users\Katy\AppData\Roaming\Complitly" deleted

"C:\Users\Katy\AppData\Roaming\ExpressFiles" deleted

"C:\Users\Katy\AppData\Roaming\DVDVideoSoftIEHelpers" deleted

"C:\Users\Katy\AppData\Roaming\ParetoLogic" deleted

"C:\Users\Katy\AppData\Roaming\DriverCure" deleted

"C:\Users\Katy\AppData\Roaming\Babylon" deleted

"C:\Users\Katy\AppData\Roaming\OpenCandy" deleted

"C:\ProgramData\Partner" deleted

"C:\ProgramData\boost_interprocess" deleted

"C:\ProgramData\ParetoLogic" deleted

"C:\ProgramData\Babylon" deleted

"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader" deleted

"C:\Users\Katy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ParetoLogic" deleted

"C:\Users\Katy\AppData\Local\Conduit" deleted

"C:\Users\Katy\AppData\LocalLow\PHPNukeDU" deleted

"C:\Users\Katy\AppData\LocalLow\DataMngr" deleted

"C:\Users\Katy\AppData\LocalLow\searchquband" deleted

"C:\Users\Katy\AppData\LocalLow\Conduit" deleted

"C:\Users\Katy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\CT1060933" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\CT2269050" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\extensions\ffxtlbr@claro.com" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\CT1060933" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\CT2269050" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\conduit" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\conduitCommon" deleted

"C:\Users\Katy\AppData\Roaming\Mozilla\Firefox\Profiles\pk016m86.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}" deleted