AdwCleaner (C1)

# AdwCleaner v5.
029 - Logfile created 12/03/2016 at 19:44:03

# Updated 11/01/2016 by Xplode
# Database : 2016-01-11.2 [Local]
# Operating system : Windows 7 Ultimate (x86)
# Username : user - USER-PC
# Running from : E:\aaaaaaaaaaaaaaaaaa\Adwcleaner v5.029 (Portable) [jaydevdesai
].exe
# Option : Cleaning
# Support : http://toolslib.net/forum
***** [ Services ] *****
[-] Service Deleted : DatamngrCoordinator
[-] Service Deleted : PCFasterSvc_{PCFaster_4.0.0.0}
[-] Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A9119622
***** [ Folders ] *****
[-] Folder Deleted : C:\Program Files\BearShare Applications
[#] Folder Deleted : C:\Program Files\Music Toolbar
[-] Folder Deleted : C:\ProgramData\wincert
[-] Folder Deleted : C:\users\user\AppData\Local\Popajar
[-] Folder Deleted : C:\Users\user\AppData\Local\Temp\AskSearch
[-] Folder Deleted : C:\users\user\AppData\LocalLow\searchresultstb
[-] Folder Deleted : C:\users\user\AppData\Roaming\OpenCandy
[-] Folder Deleted : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2dqa
aglq.default\Extensions\8hffxtbr@Allin1Convert_8h.com
aglq.default\Extensions\9tffxtbr@InternetSpeedTracker_9t.com
aglq.default\Extensions\gcffxtbr@WeatherBlink.com
***** [ Files ] *****
[-] File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\Ask.xm
l
[-] File Deleted : C:\Users\Public\Desktop\Free Games.lnk
[-] File Deleted : C:\Users\Public\Desktop\iLivid.lnk
[-] File Deleted : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2dqaag
lq.default\invalidprefs.js
lq.default\searchplugins\Ask.xml
lq.default\searchplugins\ask-web-search.xml
***** [ DLLs ] *****
***** [ Shortcuts ] *****
***** [ Scheduled tasks ] *****
***** [ Registry ] *****

[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [UpdateCh
ecker]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\DiscoveryHelper.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\GIFAnimator.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\IMTrProgress.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\IMWeb.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\Launcher.EXE
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\WMHelper.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\BearShareIEHelper.DNSGuard.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery
[-] Key Deleted : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\imweb.imwebcontrol
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image Fi
le Execution Options\bitguard.exe
le Execution Options\bprotect.exe
le Execution Options\browserdefender.exe
le Execution Options\browserprotect.exe
[-] Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDll
s [x64]
s [x86]
s [x64]
s [x86]
[!] Value Not Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Ap
pCertDlls [x64]
[!] Value Not Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Ap
pCertDlls [x86]
[-] Key Deleted : HKLM\SOFTWARE\Classes\WMHelperiMesh.WMHelper
[-] Key Deleted : HKLM\SOFTWARE\Classes\WMHelperiMesh.WMHelper.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FC41815-FA4C-4F8B-B143-2C045C8EA
2FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{21493C1F-D071-496A-9C27-450578888
291}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB0905319
4F7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608
B48}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{756C097C-6BDB-45DE-A8F1-83E01AB86
BA4}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415C-8A37-763AE183E
7E4}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF
6F6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5
581}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{74322BF9-DF26-493F-B0DA-6D2FC5E64
29E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2
839}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E
71F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B6F8DA9F-2696-419E-A8A3-19BE41EF5
1BD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1A42EA66-2898-4E93-8128-D9A450B27
D1D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5D637FAD-E202-48D1-8F18-5B9C459BD
1E3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF29
64B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C
4AD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF7
85A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8
F8A5AF3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13
A11FFEA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C5
8165C10}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581
A26B2B2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{596BB86E-F1E5-A1DE-3363-41AB6
34E77EF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A3492A3A-6715-9371-F8DB-1C48C
C4DAAA1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053
194F7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C24586
08B48}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C
1D27B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4C4F1F4-3074-4CB6-9FB8-0A64273
166F0}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F0CF944C-F160-4F65-8F0A-2773322
FF357}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D402
7C7F-154A-4066-A1AD-4243D8127440}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7
4322BF9-DF26-493F-B0DA-6D2FC5E6429E}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D
4027C7F-154A-4066-A1AD-4243D8127440}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved
\{7C3B01BC-53A5-48A0-A43B-0C67731134B9}
\{872F3C0B-4462-424C-BB9F-74C6899B9F92}
\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\Elevation
Policy\{0ABE0FED-50E7-4E42-A125-57C0A11DBCDE}
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
[{D4027C7F-154A-4066-A1AD-4243D8127440}]
[-] Key Deleted : HKCU\Software\APN PIP
[-] Key Deleted : HKCU\Software\APNDTX
[-] Key Deleted : HKCU\Software\DataMngr
[-] Key Deleted : HKCU\Software\Popajar
[-] Key Deleted : HKCU\Software\SmileysWeLove
[-] Key Deleted : HKLM\SOFTWARE\DataMngr
[-] Key Deleted : HKLM\SOFTWARE\zgametb
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\zgame
tb
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B9F
A5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1
[-] Key Deleted : HKU\.DEFAULT\Software\DataMngr
le Execution Options\bprotect.exe
le Execution Options\bpsvc.exe
le Execution Options\browserdefender.exe
le Execution Options\browserprotect.exe
le Execution Options\browsersafeguard.exe
le Execution Options\dprotectsvc.exe
le Execution Options\protectedsearch.exe
le Execution Options\searchinstaller.exe
le Execution Options\searchprotection.exe
le Execution Options\searchprotector.exe
le Execution Options\searchsettings.exe
le Execution Options\searchsettings64.exe
le Execution Options\snapdo.exe
le Execution Options\stinst32.exe
le Execution Options\stinst64.exe
le Execution Options\umbrella.exe
le Execution Options\utiljumpflip.exe
le Execution Options\websteroids.exe
le Execution Options\websteroidsservice.exe
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File E
xecution Options\jumpflip
le Execution Options\bitguard.exe
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F
0E-0596-4008-AEE0-45D47E3A8F0E}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [Defa
ultScope]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C
17-9C68-4BB3-B188-DD9AF0FD2002}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C
17-9C68-4BB3-B188-DD9AF0FD2002}
[-] Key Deleted : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes
\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}
***** [ Web browsers ] *****
[-] [C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2dqaaglq.default\pre
fs.js] [Preference] Deleted : user_pref("browser.search.order.1", "Ask.com");
fs.js] [Preference] Deleted : user_pref("browser.startup.homepage", "hxxp://home
.tb.ask.com/index.jhtml?ptb=F31514AB-7BCD-4E2D-B066-185509C6B57D&n=780bb471&p2=^
XN^xdm246^YYAîd&si=CH_WEAT_INTL_INDO_45");
fs.js] [Preference] Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled",
true);
fs.js] [Preference] Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hx
xp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=133&systemid=2&v=n11099-239&apn_
dtid=IME002&apn_ptnrs=AG2&apn_uid=4807543614124432&o=APN10641&q=");
fs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._8hMembers
_.BUTTON_STRUCTURE", "[{\"b\":221360012,\"c\":\"mindspark.magnify\",\"p\":\"L.0\
"},{\"b\":221360013,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
_.browser.search.defaultenginename.prev", "Search The Web");
_.browser.search.defaultenginename.savedPrev", "true");
_.browser.search.defaultenginename.tb", "Ask Web Search");
_.browser.search.selectedEngine.prev", "Search The Web");
_.browser.search.selectedEngine.savedPrev", "true");
_.browser.search.selectedEngine.tb", "Ask Web Search");
_.browser.startup.homepage.prev", "hxxp://www.search.ask.com/?o=APN10641A&gct=hp
&d=2-133&v=n11099-239&t=4");
_.browser.startup.homepage.savedPrev", "true");
_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=0A2E9E15
-2B33-448D-AE50-6B228164A29B&n=780bb470&p2=ÂYY^xdm071^YYAîd&si=flvru[...]
_.browser.startup.page.savedPrev", 1);
_.browser.startup.page.tb", 1);
_.firstKnownVersion", "6.33.3.42841");
_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=0A2E9E15-2B33-448D-AE50-6B2
28164A29B&n=780bb470&p2=ÂYY^xdm071^YYAîd&si=flvrunner");
_.hp.enabled", true);
_.hp.lastGuardTime", 1625327222);
_.hp.numGuards", 1);
_.initialized", true);
_.installKeysSource", "LocalStorage");
_.installType", "XPI");
_.installation.contextKey", "");
_.installation.installDate", "2014033008");
_.installation.partnerId", "ÂYY^xdm071^YYAîd");
_.installation.partnerSubId", "flvrunner");
_.installation.pixelUrl", "hxxp://allin1convert.dl.tb.ask.com/install_pixels.jht
ml?partner=ÂYY^xdm071^YYAîd&coId=ed1a74313a524877bc45a9b5c73f3200&ca[...]
_.installation.success", true);
_.installation.toolbarId", "0A2E9E15-2B33-448D-AE50-6B228164A29B");
_.isCompliantUninstallImplementation", true);
_.lastActivePing", "1406079634427");
_.lastKnownVersion", "6.33.3.42841");
_.options.defaultSearch", true);
_.options.homePageEnabled", true);
_.options.keywordEnabled", true);
_.options.tabEnabled", true);
_.partnerPixelFired", true);
_.searchHistory", "cara download game candy cruchmotor yamaha jupiter mxfb");
_.successUrl", "hxxp://flvrunner.com/thankyou.php");
_.toolbarCollapsed", true);
_.weather.location", "10001");
fs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._9tMembers
_.browser.search.defaultenginename.prev", "Ask.com");
_.browser.search.selectedEngine.prev", "Ask.com");
_.browser.startup.homepage.prev", "hxxp://home.tb.ask.com/index.jhtml?ptb=F31514
AB-7BCD-4E2D-B066-185509C6B57D&n=780bb471&p2=^XN^xdm246^YYAîd&si=CH_W[...]
_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=440045D3
-DEB6-4729-9136-18B67A8DD2FA&n=780bb4d7&p2=^BBQ^xdm039^YYAîd&si=D2DID[...]
_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=440045D3-DEB6-4729-9136-18B
67A8DD2FA&n=780bb4d7&p2=^BBQ^xdm039^YYAîd&si=D2DID");
_.installation.partnerId", "^BBQ^xdm039^YYAîd");
_.installation.partnerSubId", "D2DID");
_.installation.pixelUrl", "hxxp://internetspeedtracker.dl.tb.ask.com/install_pix
els.jhtml?partner=^BBQ^xdm039^YYAîd&coId=320b459243d942518606f1f33b29[...]
_.installation.toolbarId", "440045D3-DEB6-4729-9136-18B67A8DD2FA");
_.lastActivePing", "1406079634695");
_.successUrl", "hxxp://speedtest4.me/thanks-intl.php");
fs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._gcMembers
_.browser.search.defaultenginename.prev", "Ask.com");
_.browser.search.selectedEngine.prev", "Ask.com");
_.browser.startup.homepage.prev", "hxxp://home.tb.ask.com/index.jhtml?ptb=0A2E9E
15-2B33-448D-AE50-6B228164A29B&n=780bb470&p2=ÂYY^xdm071^YYAîd&si=flv[...]
_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=F31514AB
-7BCD-4E2D-B066-185509C6B57D&n=780bb471&p2=^XN^xdm246^YYAîd&si=CH_WEA[...]
_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=F31514AB-7BCD-4E2D-B066-185
509C6B57D&n=780bb471&p2=^XN^xdm246^YYAîd&si=CH_WEAT_INTL_INDO_45");
_.installation.partnerId", "^XN^xdm246^YYAîd");
_.installation.partnerSubId", "CH_WEAT_INTL_INDO_45");
_.installation.pixelUrl", "hxxp://weatherblink.dl.tb.ask.com/install_pixels.jhtm
l?partner=^XN^xdm246^YYAîd&coId=281591250f054003a1f5fefa5186a183&cake[...]
_.installation.toolbarId", "F31514AB-7BCD-4E2D-B066-185509C6B57D");
_.lastActivePing", "1406079635548");
_.searchHistory", "game candy cruchmotor yamaha jupiter mx");
_.successUrl", "hxxp://download.weatherblink.com/installComplete.jhtml");
fs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled
", false);
fs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled
.guid", "");
fs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark.lastInstal
led", "internetspeedtracker@mindspark.com");
fs.js] [Preference] Deleted : user_pref("keyword.URL", "hxxp://search.tb.ask.com
/search/GGmain.jhtml?st=kwd&ptb=440045D3-DEB6-4729-9136-18B67A8DD2FA&n=780bb4d7&
ind=2014033111&p2=^BBQ^xdm039^YYAîd&si=D2DID&searchfor=");
fs.js] [Preference] Deleted : user_pref("urlclassifier.keyupdatetime.hxxps://sb-
ssl.google.com/safebrowsing/newkey", 1408671631);
[-] [C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Sear
ch Provider] Deleted : aol.com
ch Provider] Deleted : ask.com
ch Provider] Deleted : Search The Web
ch Provider] Deleted : ask.com
*************************
:: "Tracing" keys removed
:: Winsock settings cleared
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [38742 bytes] ##########

AdwCleaner (C1)

Caricato da

Informazioni sul documento

Titolo originale

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

AdwCleaner (C1)

Caricato da

Copyright:

Formati disponibili

# AdwCleaner v5.

029 - Logfile created 12/03/2016 at 19:44:03

* [ Shortcuts ] *

* [ Scheduled tasks ] *

* [ Registry ] *

Potrebbero piacerti anche