Malware or Virus

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by herdfan, Oct 27, 2014.

  1. herdfan

    herdfan Private E-2

    Hi all,

    I have a Toshiba Satellite C655 laptop running Window 7 home edition and it is infected with something. Its a hand me down laptop so exactly when and what occurred is hard to say. Some symptoms are: extremely slow browsing, pop ups coming from everywhere, home page is a generic search engine, and blue screen when trying to run AVG virus scan.


    I have read and completed the READ & RUN ME FIRST MALWARE REMOVAL GUIDE and will post everything it says to.

    Those are ones I have/could find. I was worried about running some of the scans twice because I think it says not to? I can run them again if need be.

    Any help or feedback would be greatly appreciated.

    Thanks. Go Herd!
     

    Attached Files:

    herdfan, Oct 27, 2014
    #1
  2. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Welcome to MajorGeeks

    No, only run them once per the instructions.
    *Still need the RogueKiller and C:\MGlogs.zip to be attached.
     
    dr.moriarty, Oct 27, 2014
    #2
  3. herdfan

    herdfan Private E-2

    Thanks for having me!

    I cant seem to find those specific files, although I know I ran all of the programs?
     
    herdfan, Oct 27, 2014
    #3
  4. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    The RogueKiller log will be named something like "RKreport_SCN_10272014_xxxxxx" and should be on your desktop. The MGlogs.zip should either be on your desktop or directly under your root folder C:\, if that's the drive your boot from.

    If they aren't found - disconnect from the internet, disable your anti-virus, then re-run those two appls. *Make sure that you don't close MGTool.exe before it has completed its scan. Attach those logs, please.
     
    dr.moriarty, Oct 27, 2014
    #4
  5. herdfan

    herdfan Private E-2

    Ok re-ran them both and they are attached
     

    Attached Files:

    herdfan, Oct 28, 2014
    #5
  6. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Hello, herdfan

    You have two anti-virus applications installed:
    AVG Internet Security 2015
    Norton Internet Security

    This creates software conflicts and you need to uninstall one of the above now.

    Now shut down your protection software (antivirus, antispyware...etc) to avoid possible conflicts. *Re-enable them before physically reconnecting to your ISP.

    Using "Programs & Features" uninstall: (If you do not find it or it will not uninstall, just keep going.)
    DomaIQ
    LessTabs
    Java(TM) 6 Update 25
    Strongvault Online Backup
    Search Protect by conduit
    Optimizer Pro v3.0
    PC Health Kit v3.2

    Rerun RogueKiller and run a scan. After it finishes the scan, select the Registry tab and then select any of the below that exist and then click the Delete button.
    • [Suspicious.Path] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | SMessaging : "C:\Users\Tanya\AppData\Local\Strongvault Online Backup\SMessaging.exe" -> Found
    • [Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\Microsoft\Windows\CurrentVersion\Run | SearchProtect : C:\Users\Tanya\AppData\Roaming\SearchProtect\bin\cltmng.exe -> Found
    • [Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\Microsoft\Windows\CurrentVersion\Run | WebCake Desktop : "C:\Users\Tanya\AppData\Roaming\WebCake\WebCakeDesktop.exe" -> Found
    • [Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\Microsoft\Windows\CurrentVersion\Run | SearchProtect : C:\Users\Tanya\AppData\Roaming\SearchProtect\bin\cltmng.exe -> Found
    • [Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\Microsoft\Windows\CurrentVersion\Run | WebCake Desktop : "C:\Users\Tanya\AppData\Roaming\WebCake\WebCakeDesktop.exe" -> Found
    • [Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-1627135294-1033330144-1872847641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Windows\CurrentVersion\Run | SearchProtect : C:\Users\Tanya\AppData\Roaming\SearchProtect\bin\cltmng.exe -> Found
    • [Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-1627135294-1033330144-1872847641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Windows\CurrentVersion\Run | WebCake Desktop : "C:\Users\Tanya\AppData\Roaming\WebCake\WebCakeDesktop.exe" -> Found
    • [Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-1627135294-1033330144-1872847641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Windows\CurrentVersion\Run | SearchProtect : C:\Users\Tanya\AppData\Roaming\SearchProtect\bin\cltmng.exe -> Found
    • [Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-1627135294-1033330144-1872847641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Windows\CurrentVersion\Run | WebCake Desktop : "C:\Users\Tanya\AppData\Roaming\WebCake\WebCakeDesktop.exe" -> Found
    Then select the Files tab and if the below exist, click the Delete button again.
    • [Suspicious.Path][File] StrongVaultApp.lnk -- C:\Users\Tanya\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StrongVaultApp.lnk [LNK@] C:\Users\Tanya\AppData\Local\STRONG~1\STRONG~1.EXE -> Found
    Then immediately reboot your PC.

    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista or Win 7, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    • O2 - BHO: LessTabs - {3178A392-8963-471E-B7A2-969CB58D6496} - C:\Program Files (x86)\LessTabs\IE32\LessTabsClientIE.dll
    • O2 - BHO: DownloadTerms - {2C4BA31C-0C15-11E2-90C7-9BFCBEB168B3} - C:\Users\Tanya\AppData\Local\DownloadTerms\temp.dat
    • O2 - BHO: DefaultTabBHO - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\Tanya\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll (file missing)
    • O4 - HKLM\..\Run: [SearchProtectAll] C:\Program Files (x86)\SearchProtect\bin\cltmng.exe
    • O4 - HKLM\..\Run: [SMessaging] "C:\Users\Tanya\AppData\Local\Strongvault Online Backup\SMessaging.exe"
    • O4 - HKCU\..\Run: [SearchProtect] C:\Users\Tanya\AppData\Roaming\SearchProtect\bin\cltmng.exe
    • O4 - HKCU\..\Run: [BackupAgent] C:\Program Files (x86)\Strongvault Online Backup\BackupAgent.exe
    • O4 - HKCU\..\Run: [PC Health Kit] C:\Program Files (x86)\PC Health Kit\PCHKLauncher.exe
    • O4 - HKCU\..\Run: [WebCake Desktop] "C:\Users\Tanya\AppData\Roaming\WebCake\WebCakeDesktop.exe"
    • O23 - Service: Search Protect by Conduit Updater (CltMngSvc) - Conduit - C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe

    After clicking Fix, exit HJT.

    Please download OTM by Old Timer and save it to your Desktop.
    • Run OTM.exe by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select Run As Administrator).
    • Copy the lines from the below codebox to the clipboard by highlighting ALL of them and pressing CTRL + C
      (or, after highlighting, right-click and choose Copy): Do not include the word Code: which is just a title line of
      the code box
    Code:
    :Services
CltMngSvc
:Files
C:\Users\Tanya\AppData\Local\Temp\DIQM\FlashPlayer_151\software\lesstabs-setup.exe
C:\Users\Tanya\AppData\Local\Temp\DIQM\FlashPlayer_151
C:\Users\Tanya\AppData\Local\Temp\DIQM\internet-explorer_210\software\Webcake.exe
C:\Users\Tanya\AppData\Local\Temp\DIQM\internet-explorer_210
C:\Users\Tanya\AppData\Local\Temp\DIQM
C:\Users\Tanya\AppData\Roaming\WebCake\WebCakeDesktop.exe
C:\Program Files (x86)\SearchProtect\bin\ChromeModule.dll
C:\Program Files (x86)\SearchProtect\bin\cltmng.exe
C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe 
C:\Program Files (x86)\SearchProtect\bin\FirefoxModule.dll
C:\Program Files (x86)\SearchProtect\bin\InternetExplorerModule.dll
C:\Program Files (x86)\SearchProtect\bin\SPHook32.dll
C:\Program Files (x86)\SearchProtect\bin\SPRunner.exe 
C:\Program Files (x86)\SearchProtect\bin\uninstall.exe
C:\Program Files (x86)\SearchProtect\bin
C:\Program Files (x86)\SearchProtect\Dialogs\dialogsApi.js 
C:\Program Files (x86)\SearchProtect\Dialogs\lib\jquery.min.js 
C:\Program Files (x86)\SearchProtect\Dialogs\lib\json2.js
C:\Program Files (x86)\SearchProtect\Dialogs\lib
C:\Program Files (x86)\SearchProtect\Dialogs\spbd\bubble.css 
C:\Program Files (x86)\SearchProtect\Dialogs\spbd\bubble.js 
C:\Program Files (x86)\SearchProtect\Dialogs\spbd\images\information.png 
C:\Program Files (x86)\SearchProtect\Dialogs\spbd\images\x-default-LTR.png 
C:\Program Files (x86)\SearchProtect\Dialogs\spbd\images\x-default-RTL.png
C:\Program Files (x86)\SearchProtect\Dialogs\spbd\images\x-mouseover-LTR.png 
C:\Program Files (x86)\SearchProtect\Dialogs\spbd\images\x-mouseover-RTL.png
C:\Program Files (x86)\SearchProtect\Dialogs\spsd\images\ok-button.png 
C:\Program Files (x86)\SearchProtect\Dialogs\spsd\images\separation-line.png 
C:\Program Files (x86)\SearchProtect\Dialogs\spsd\images\warning.png
C:\Program Files (x86)\SearchProtect\Dialogs\spsd\images
C:\Program Files (x86)\SearchProtect\Dialogs\spsd\main.html 
C:\Program Files (x86)\SearchProtect\Dialogs\spsd\SearchProtector.css 
C:\Program Files (x86)\SearchProtect\Dialogs\spsd\settings.js
C:\Program Files (x86)\SearchProtect\Dialogs\spsd
C:\Program Files (x86)\SearchProtect\Dialogs
C:\Program Files (x86)\SearchProtect\ffprotect\abstraction.js 
C:\Program Files (x86)\SearchProtect\ffprotect\application.js 
C:\Program Files (x86)\SearchProtect\ffprotect\nsprotector.js 
C:\Program Files (x86)\SearchProtect\ffprotect
C:\Program Files (x86)\SearchProtect\Install-20130602214034.606.log
C:\Program Files (x86)\SearchProtect
C:\Users\Tanya\AppData\Roaming\SearchProtect\bin\cltmng.exe
C:\Users\Tanya\AppData\Roaming\SearchProtect\bin\CltMngSvc.exe
C:\Users\Tanya\AppData\Roaming\SearchProtect\bin\rep.dat 
C:\Users\Tanya\AppData\Roaming\SearchProtect\bin\SPHook32.dll
C:\Users\Tanya\AppData\Roaming\SearchProtect\bin\SPRunner.exe
C:\Users\Tanya\AppData\Roaming\SearchProtect\bin\uninstall.exe
C:\Users\Tanya\AppData\Roaming\SearchProtect\bin
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\dialogsApi.js 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\lib
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\lib\jquery.min.js 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\lib\json2.js 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spbd\bubble.css 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spbd\bubble.js 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spbd\images
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spbd\images\information.png 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spbd\images\x-default-LTR.png 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spbd\images\x-default-RTL.png 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spbd\images\x-mouseover-LTR.png 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spbd\images\x-mouseover-RTL.png 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spbd\main.html 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spsd\images
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spsd\images\ok-button.png 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spsd\images\separation-line.png 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spsd\images\warning.png 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spsd\main.html 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spsd\SearchProtector.css
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spsd\settings.js 
C:\Users\Tanya\AppData\Roaming\SearchProtect\Dialogs\spsd
C:\Users\Tanya\AppData\Roaming\SearchProtect\ffprotect
C:\Users\Tanya\AppData\Roaming\SearchProtect\ffprotect\abstraction.js
C:\Users\Tanya\AppData\Roaming\SearchProtect\ffprotect\application.js 
C:\Users\Tanya\AppData\Roaming\SearchProtect\ffprotect\nsprotector.js 
C:\Users\Tanya\AppData\Roaming\SearchProtect
C:\Users\Tanya\AppData\Roaming\skype.ini
C:\Program Files (x86)\Conduit\Community Alerts\Alert.dll
C:\Program Files (x86)\Conduit\Community Alerts\Alert0.dll
C:\Program Files (x86)\Conduit\Community Alerts
C:\Program Files (x86)\Conduit
C:\Users\Tanya\AppData\Local\APN\GoogleCRXs\aaaanijiojpcccpkjdjjmjghddcgcbfj_7.17.6.0.crx
C:\Users\Tanya\AppData\Local\APN\GoogleCRXs
C:\Users\Tanya\AppData\Local\APN
C:\Users\Tanya\AppData\Local\Conduit
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.1000082.currentList.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.1000082.localStations.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.1000082.nowPlaying.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.1000082.publisherStations.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.130136188834341299.search.selectedEngineId.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.130136188834341299.search.settings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.appOptions.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.installUsage.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.installUsageEarly.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.NOTIFICATION_ID.notifications-repository.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.NOTIFICATION_ID.notifications-service_1787910.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.NOTIFICATION_ID.notifications-servicemap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.NotificationSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.pg_conf_global.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998.searchProtectorData.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_appsMetadata.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_appTrackingFirstTime.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_location.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_searchAPI.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_toolbarContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_translation.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.509.serviceLayer_services_userApps.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_appTrackingFirstTime.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_location.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_searchAPI.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_toolbarContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_translation.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_10.16.2.9.serviceLayer_services_userApps.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_RAW.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_RAW.serviceLayer_services_appTrackingFirstTime.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_RAW.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_RAW.serviceLayer_services_location.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_RAW.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_RAW.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_RAW.serviceLayer_services_searchAPI.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_RAW.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_RAW.serviceLayer_services_toolbarContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_RAW.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository\CT3302998_RAW.serviceLayer_services_translation.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco\Repository
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\dfpeccndonehkbgpokgbphhnmjjoboco
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.1000082.currentList.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.1000082.localStations.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.1000082.nowPlaying.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.1000082.publisherStations.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.130068661007799818.search.selectedEngineId.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.130068661007799818.search.settings.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.appOptions.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.installUsage.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.installUsageEarly.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.NOTIFICATION_ID.notifications-repository.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.NOTIFICATION_ID.notifications-service_1774897.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.NOTIFICATION_ID.notifications-servicemap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.NotificationSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.pg_conf_global.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.savedPositions.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847.searchProtectorData.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_appTrackingFirstTime.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_location.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_searchAPI.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_toolbarContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_translation.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.1.24.serviceLayer_services_userApps.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_appTrackingFirstTime.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_Configuration.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_searchAPI.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_toolbarContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_translation.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_10.16.4.512.serviceLayer_services_userApps.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_appsMetadata.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_appTrackingFirstTime.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_Configuration.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_location.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_searchAPI.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_toolbarContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\CT3289847_RAW.serviceLayer_services_translation.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\serviceLayer_userApps_added.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\serviceLayer_userApps_removed.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\toolbar_initializing_logger.txt.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\ToolbarFullUserID.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\ToolbarUserID.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\uninstallData.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository\uninstallUrl.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi\Repository
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\klibnahbojhkanfgaglnlalfkgpcppfi
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.10000002.search.selectedEngineId.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.10000002.search.settings.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.1000082.currentList.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.1000082.localStations.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.1000082.nowPlaying.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.1000082.publisherStations.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.appOptions.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.installUsage.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.installUsageEarly.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.NOTIFICATION_ID.notifications-repository.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.NOTIFICATION_ID.notifications-service_1772454.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.NOTIFICATION_ID.notifications-servicemap.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.NotificationSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.pg_conf_global.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375.searchProtectorData.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_appTrackingFirstTime.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_location.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_searchAPI.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_toolbarContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_translation.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.21.serviceLayer_services_userApps.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_appTrackingFirstTime.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_location.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_searchAPI.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_toolbarContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_translation.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.1.521.serviceLayer_services_userApps.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_appsMetadata.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_appTrackingFirstTime.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_location.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_login.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_searchAPI.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_toolbarContextMenu.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_translation.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.2.512.serviceLayer_services_userApps.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_appTrackingFirstTime.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_Configuration.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_otherAppsContextMenu.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_searchAPI.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_toolbarContextMenu.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_translation.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.3.532.serviceLayer_services_userApps.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_appTrackingFirstTime.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_Configuration.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_login.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_searchAPI.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_toolbarContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_toolbarSettings.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_translation.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_10.16.4.512.serviceLayer_services_userApps.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_appsMetadata.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_appTrackingFirstTime.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_Configuration.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_location.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_otherAppsContextMenu.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_searchAPI.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_toolbarContextMenu.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\CT3287375_RAW.serviceLayer_services_translation.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\serviceLayer_userApps_added.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\serviceLayer_userApps_removed.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\toolbar_initializing_logger.txt.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\ToolbarFullUserID.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\ToolbarUserID.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\uninstallData.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository\uninstallUrl.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.1000034.Settings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.1000082.currentList.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.1000082.localStations.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.1000082.nowPlaying.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.1000082.publisherStations.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.130067724014616498.search.selectedEngineId.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.130067724014616498.search.settings.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.appOptions.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.installUsage.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.installUsageEarly.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.NOTIFICATION_ID.notifications-repository.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.NOTIFICATION_ID.notifications-service_1774717.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.NOTIFICATION_ID.notifications-servicemap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.NotificationSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663.searchProtectorData.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.23.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.23.serviceLayer_services_appTrackingFirstTime.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.23.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.23.serviceLayer_services_location.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.23.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.23.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.23.serviceLayer_services_searchAPI.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.23.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.23.serviceLayer_services_toolbarContextMenu.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.23.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.23.serviceLayer_services_translation.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.523.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.523.serviceLayer_services_appTrackingFirstTime.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.523.serviceLayer_services_gottenAppsContextMenu.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.523.serviceLayer_services_location.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.523.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.523.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.523.serviceLayer_services_searchAPI.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.523.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.523.serviceLayer_services_toolbarContextMenu.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.523.serviceLayer_services_toolbarSettings.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.15.2.523.serviceLayer_services_translation.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.16.4.512.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.16.4.512.serviceLayer_services_appTrackingFirstTime.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.16.4.512.serviceLayer_services_Configuration.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.16.4.512.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.16.4.512.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.16.4.512.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.16.4.512.serviceLayer_services_searchAPI.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.16.4.512.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.16.4.512.serviceLayer_services_toolbarContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.16.4.512.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_10.16.4.512.serviceLayer_services_translation.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_appsMetadata.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_appTrackingFirstTime.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_Configuration.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_gottenAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_location.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_login.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_otherAppsContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_searchAPI.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_serviceMap.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_toolbarContextMenu.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_toolbarSettings.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\CT3289663_RAW.serviceLayer_services_translation.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\toolbar_initializing_logger.txt.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\ToolbarFullUserID.txt
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\ToolbarUserID.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\uninstallData.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\nemfjadlboooiffmcelkafilagddogim\Repository\uninstallUrl.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki\Repository
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData\neebgdeaohaofdhldpobdpfocdonmgki
C:\Users\Tanya\AppData\LocalLow\Conduit\ChromeExtData
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\AppNotification.js 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\close.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\close.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\closeBtn.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Next.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Next_hover.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\powered-by.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Prev.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Prev_hover.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\settings.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\settingsBtn.png
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\close.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\closeBtn.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Next.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Next_hover.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\powered-by.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Prev.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Prev_hover.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\settings.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\settingsBtn.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Thumbs.db 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\like.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Next.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Next_hover.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\powered-by.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Prev.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Prev_hover.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\settings.png 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Thumbs.db 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\initialNotification.html 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\main.html 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\NotificationDialogStyle.css 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\NotificationDialogStyleIE9.css 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\sampleNotification.html 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\DialogsAPI.js 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\PIE.htc 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\settings.js 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs\version.txt 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Dialogs
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1772454_1762995_US.xml 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1774717_1765258_US.xml 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1774897_1765438_US.xml 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1787910_1778451_US.xml 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\Feeds
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\LanguagePacks
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts\LanguagePacks\en.xml 
C:\Users\Tanya\AppData\LocalLow\Conduit\Community Alerts
C:\Users\Tanya\AppData\LocalLow\Conduit
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\1.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\18228.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\2229.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\25993.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\4489.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\450.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\6124.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\6148.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\6927.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\83.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\a.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\b.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\c.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\d.txt
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\e.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\f.txt
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\g.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\h.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\i.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\j.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\k.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\l.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\m.txt
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\mru.xml 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\n.txt
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\o.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\p.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\q.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\r.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\s.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\t.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\u.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\v.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\w.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\wlu.txt
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\x.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\y.txt 
C:\Users\Tanya\AppData\LocalLow\PriceGong\Data\z.txt
C:\Users\Tanya\AppData\LocalLow\PriceGong
C:\Users\Tanya\Local Settings\Temp\AskSearch
C:\Windows\Tasks\AmiUpdXp.job
C:\Users\Tanya\Desktop\PC Health Kit.lnk
C:\ProgramData\Tarma Installer
C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit
C:\Program Files (x86)\LessTabs
C:\Program Files (x86)\PC Health Kit
C:\Program Files (x86)\Strongvault Online Backup
C:\Program Files (x86)\WebCake
:Reg
[-HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect]
[-HKLM\SOFTWARE\Wow6432Node\SearchProtect]
[-HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}]
[-HKLM\SOFTWARE\Classes\speedupmypc]
[-HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}]
[-HKLM\SOFTWARE\Classes\Updater.AmiUpd.1]
[-HKLM\SOFTWARE\Classes\Updater.AmiUpd]
[-HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}]
[-HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}]
[-HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}]
[-HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}]
[-HKLM\SOFTWARE\DomaIQ]
[-HKLM\SOFTWARE\Tarma Installer\Components\{8D8654CD-7FBC-4C7E-84E9-371BFA8DB04E}]
[-HKLM\SOFTWARE\Tarma Installer\Components\{9307081B-7444-494C-8CF6-2FA7C0E92BFB}]
[-HKLM\SOFTWARE\Tarma Installer\Components\{9D9785E5-3424-40B6-A287-BA143AD53109}]
[-HKLM\SOFTWARE\Tarma Installer\Components\{B6783DFA-B8C8-4CB6-AB9F-EF1A1F7F7AE8}]
[-HKLM\SOFTWARE\Tarma Installer\Components\{F5F971A9-DBF8-4EEC-81E3-5F1660573E6C}]
[-HKLM\SOFTWARE\Wow6432Node\Conduit]
[-HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1]
[-HKLM\SYSTEM\ControlSet001\services\CltMngSvc]
[-HKLM\SYSTEM\ControlSet002\services\CltMngSvc]
[-HKLM\SYSTEM\CurrentControlSet\services\CltMngSvc]
[-HKU\.DEFAULT\Software\Conduit]
[-HKU\.DEFAULT\Software\SmartBar]
[-HKU\S-1-5-18\Software\Conduit]
[-HKU\S-1-5-18\Software\SmartBar]
[-HKU\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\AppDataLow\Software\Conduit]
[-HKU\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\AppDataLow\Software\PriceGong]
[-HKU\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\AppDataLow\Software\SmartBar]
[-HKU\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\Conduit]
[-HKU\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com]
[-HKU\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BFEAE4F3-1CBB-4B59-A8F3-D3747859820B}]
[-HKU\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\Microsoft\Internet Explorer\SearchScopes\{D3B877C1-320F-4F58-8CDC-EB323EBA1AF3}]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3178A392-8963-471E-B7A2-969CB58D6496}]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C4BA31C-0C15-11E2-90C7-9BFCBEB168B3}]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SearchProtect"=-
"PC Health Kit"=-
"WebCake Desktop"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentVersion\Run]
"SearchProtectAll"=-
[HKEY_LOCAL_MACHINE\software\Wow6432Node\microsoft\windows\currentVersion\Run]
"SearchProtectAll"=-
[HKEY_USERS\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\Microsoft\Windows\CurrentVersion\run]
"SearchProtect"=-
"PC Health Kit"=-
"WebCake Desktop"=-
:Commands
[purity]
[EmptyTemp]
[start explorer]
[Reboot]
    • Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
    • Now click the large [​IMG] button.
    • If OTM asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.
    • Close OTM.
    Now navigate to the C:\_OTM\MovedFiles folder ( assuming your Windows drive is C). This is where your log will be
    saved in the form of Date and Time mmddyyyy_hhmmss.log. Just look for the most recent .log file. Attach
    this log file to your next message.

    Now please download Junkware Removal Tool to your desktop.
    • Make sure to shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Note: That JRT may reset your home page to a google default so you will need to restore your home page setting if this happens.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach JRT.txt to your next message.

    Next download AdwCleaner by Xplode and save to your Desktop.
    • Double click on AdwCleaner.exe to run the tool.
      Vista/Windows 7/8 users right-click and select Run As Administrator
    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • When it's done you'll see: Pending: Please uncheck elements you don't want removed.
    • Now click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
    • Look over the log especially under Files/Folders for any program you want to save.
    • If there's a program you may want to save, just uncheck it from AdwCleaner.
    • If you're not sure, post the log for review. (all items found are either adware/spyware/foistware)
    • If you're ready to clean it all up.....click the Clean button.
    • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
    • Attach that logfile to your next reply.
    • A copy of all logfiles are saved in the C:\AdwCleaner folder which are created when running the tool.

    Now install the current version of Sun Java from:
    Make sure that when you install the new version of Java that you uncheck the Install the Ask Toolbar junkware checkbox. You do not want to add the stuff junk that most people consider malware to your PC. Also just in case Oracle changes the Java installation in the future to possible install other junk, uncheck all but just installing Java.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select "Run As Administrator").

    Then attach the below logs:
    • the C:\_OTM\MovedFiles log
    • the JRT.TXT log
    • C:\MGlogs.zip
    • AdwCleaner[R#].txt
    Make sure you tell me how things are working now!
     
    dr.moriarty, Oct 28, 2014
    #6
  7. herdfan

    herdfan Private E-2

    Hi,

    I got all the way up to and past the junkware removal, but now it is saying I am unable to connect to the proxy server ( I'm sending this from my tablet ). I have restarted my laptop and it still won't connect.
     
    herdfan, Oct 29, 2014
    #7
  8. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Please use your tablet to download the remaining tools. Transfer them to the laptop and run them, then re-boot.

    Is your connection back?
     
    dr.moriarty, Oct 29, 2014
    #8
  9. herdfan

    herdfan Private E-2


    I was able to transfer and run them successfully but my connection is not yet back.
     

    Attached Files:

    herdfan, Oct 29, 2014
    #9
  10. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Re-run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista or Win 7, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    • R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:49183;https=127.0.0.1:49183
    • R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>

    After clicking Fix, exit HJT.

    We need to use OTM by OldTimer again.
    • Run OTM.exe by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select Run As Administrator).
    • Copy the lines from the below codebox to the clipboard by highlighting ALL of them and pressing CTRL + C
      (or, after highlighting, right-click and choose Copy): Do not include the word Code: which is just a title line of
      the code box
    Code:
    :Reg
[HKEY_USERS\S-1-5-21-1627135294-1033330144-1872847641-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable"=dword:00000000
"ProxyServer"=-
:Commands
[EmptyTemp]
[start explorer]
[Reboot]
    • Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
    • Now click the large [​IMG] button.
    • If OTM asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.
    • Close OTM.
    Now navigate to the C:\_OTM\MovedFiles folder ( assuming your Windows drive is C). This is where your log will be saved in the form of Date and Time mmddyyyy_hhmmss.log. Just look for the most recent .log file. Attach this log file to your next message.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select "Run As Administrator").

    Then attach the below logs:
    • the most recent C:\_OTM\MovedFiles log
    • updated C:\MGlogs.zip
    How things are working now?
     
    dr.moriarty, Oct 29, 2014
    #10
  11. herdfan

    herdfan Private E-2

    Finished running the two scans and now I am able to browse again, thanks! Computer is running wayyyy better thank you for all your help. Should I keep these programs I downloaded in case I need them in the future?

    Also, I have another virus related question about something I'm seeing in my icon panel? Should I start a new thread or post in this one?

    Thanks again!
     

    Attached Files:

    herdfan, Oct 30, 2014
    #11
  12. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    You're welcome.

    Some special notes about the tools used are given in my cleanup steps, but let's see if I can help with "another virus related question about something I'm seeing in my icon panel". Please explain the problem.
     
    dr.moriarty, Oct 30, 2014
    #12
  13. herdfan

    herdfan Private E-2

    Sure.

    Under the solve PC issues flag it has a link to click on that says "Remove the Alureon Virus".
     
    herdfan, Oct 30, 2014
    #13
  14. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    ;) TDSSKiller would have detected and removed Alureon if it was present, but I see nothing relating to it. Clearing that notification from the Action Center is something that I'll send you to our Software Forum to resolve.

    ____________________________

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase it, it provide no protection. It do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. Go back to step 6 of the READ ME and re-enable your Disk Emulation software with Defogger if you had disabled it.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista, Win 7/8 - it is time to make sure you have re-enabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. Go to the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    7. If you are running Win 7/8, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 7 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    8. After doing the above, you should work through the below link:
    Safe surfing! [​IMG]
     
    dr.moriarty, Oct 30, 2014
    #14

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds