Adware.ConduitToolbar
*file
C:\Users\{USERNAME}\AppData\LocalLow\IncrediMail_MediaBar_4\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin\PriceGongIE.dll
C:\Users\{USERNAME}\AppData\LocalLow\IncrediMail_MediaBar_4\tbInc0.dll
C:\Users\{USERNAME}\AppData\LocalLow\IncrediMail_MediaBar_4\sctbInc0.dll
C:\Users\{USERNAME}\AppData\LocalLow\IncrediMail_mediabar_4\sc64tbInc0.dll
C:\Users\{USERNAME}\AppData\LocalLow\IncrediMail_MediaBar_4\prxtbInc0.dll
C:\Users\{USERNAME}\AppData\LocalLow\IncrediMail_MediaBar_4\ldrtbInc0.dll
C:\Users\{USERNAME}\AppData\LocalLow\IncrediMail_MediaBar_4\hktbInc0.dll
C:\Users\{USERNAME}\AppData\LocalLow\IncrediMail_MediaBar_4\hk64tbInc0.dll
C:\Program Files\IncrediMail_MediaBar_4\tbInc1.dll
C:\Program Files\IncrediMail_MediaBar_4\IncrediMail_MediaBar_4ToolbarHelper.exe
C:\Program Files\ConduitEngine\ConduitEngineUninstall.exe
C:\Program Files\ConduitEngine\ConduitEngineHelper.exe
C:\Program Files\IncrediMail_MediaBar_4\UNWISE.EXE
*reg_key
HKCU\Software\AppDataLow\Software\IncrediMail_MediaBar_4
HKCU\Software\AppDataLow\Software\conduitEngine
HKCU\Software\AppDataLow\conduit_CT2878731_CT2878731
HKCU\Software\Classes\CLSID\{90eee664-34b1-422a-a782-779af65cdf6d}
HKCU\Software\Classes\CLSID\{66E8DCC7-97D2-4A89-8E08-D0610FF0878C}
HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2893608250-2205728168-3091723128-1001\Software\IncrediMail_MediaBar_4
HKCU\Software\Microsoft\Internet Explorer\Explorer bars\{07536930-9C38-480F-A5EF-94791153BD98}
HKCU\Software\Microsoft\Windows\CurrentVersionC:\Program Files\Updater By SweetPacks\Ext\Settings\{90eee664-34B1-422A-A782-779AF65CDF6D}
HKCU\Software\Microsoft\Windows\CurrentVersionC:\Program Files\Updater By SweetPacks\Ext\Settings\{8986B387-7D85-42D3-9751-07D056E68A93}
HKCU\Software\Microsoft\Windows\CurrentVersionC:\Program Files\Updater By SweetPacks\Ext\Settings\{07536930-9C38-480F-A5EF-94791153BD98}
HKCU\Software\Microsoft\Windows\CurrentVersionC:\Program Files\Updater By SweetPacks\Ext\settings\{30f9b915-b755-4826-820b-08fba6bd249d}
HKCU\Software\Microsoft\Windows\CurrentVersionC:\Program Files\Updater By SweetPacks\Ext\Stats\{90EEE664-34B1-422A-A782-779AF65CDF6D}
HKCU\Software\Microsoft\Windows\CurrentVersionC:\Program Files\Updater By SweetPacks\Ext\Stats\{8986B387-7D85-42D3-9751-07D056E68A93}
HKCU\Software\Microsoft\Windows\CurrentVersionC:\Program Files\Updater By SweetPacks\Ext\Stats\{07536930-9C38-480F-A5EF-94791153BD98}
HKCU\Software\Microsoft\Windows\CurrentVersionC:\Program Files\Updater By SweetPacks\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
HKLM\SOFTWARE\IncrediMail_MediaBar_4
HKLM\SOFTWARE\ClassesC:\Program Files\SweetIM\Toolbar.CT2878731
HKLM\SOFTWARE\Classes\Clsid\{3ae84ccC-45B7-4DC6-85C1-AA002FE728AB}
HKLM\SOFTWARE\Classes\Clsid\{8986b387-7D85-42D3-9751-07D056E68A93}
HKLM\SOFTWARE\Classes\CLSID\{07536930-9C38-480F-A5EF-94791153BD98}
HKLM\SOFTWARE\Classes\CLSID\{A9B29165-A4ED-4130-9064-A287C4D9D042}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88210949-8B6B-47A9-83C2-DBCBEAB3B1FC}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77056228-0E02-48D2-85C8-1B4FF1700EE9}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersionC:\Program Files\Updater By SweetPacks\Ext\PreApproved\{3AE84CCC-45B7-4DC6-85C1-AA002FE728AB}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersionC:\Program Files\Updater By SweetPacks\Ext\PreApproved\{A9B29165-A4ED-4130-9064-A287C4D9D042}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IncrediMail_MediaBar_4 Toolbar
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
*reg_val
HKCU\Software\Microsoft\Internet Explorer\Approved Extensions | {90EEE664-34B1-422A-A782-779AF65CDF6D}
HKCU\Software\Microsoft\Internet Explorer\Approved Extensions | {8986B387-7D85-42D3-9751-07D056E68A93}
HKCU\Software\Microsoft\Internet Explorer\Approved Extensions | {07536930-9C38-480F-A5EF-94791153BD98}
HKCU\Software\Microsoft\Internet Explorer\Approved Extensions | {30F9B915-B755-4826-820B-08FBA6BD249D}
HKCU\Software\Microsoft\Internet ExplorerC:\Program Files\SweetIM\Toolbar\WebBrowser | {90EEE664-34B1-422A-A782-779AF65CDF6D}
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks | {90eee664-34b1-422a-a782-779af65cdf6d}
HKLM\SOFTWARE\Microsoft\Internet ExplorerC:\Program Files\SweetIM\Toolbar | {90eee664-34b1-422a-a782-779af65cdf6d}
HKLM\SOFTWARE\Microsoft\Internet ExplorerC:\Program Files\SweetIM\Toolbar | {30F9B915-B755-4826-820B-08FBA6BD249D}
HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks | {90eee664-34b1-422a-a782-779af65cdf6d}
PUP.BabylonToolbar
