AdwCleaner[R1]

10
# AdwCleaner v3.215 - Report created 09/07/2014 at 12:00:31 # Updated 09/07/2014 by Xplode # Operating System : Windows 7 Home Premium (32 bits) # Username : dipop - DIPOP-PC # Running from : C:\Users\dipop\Downloads\adwcleaner_3.215.exe # Option : Scan ***** [ Services ] ***** Service Found : F06DEFF2-5B9C-490D-910F-35D3A9119622 ***** [ Files / Folders ] ***** File Found : C:\END File Found : C:\Users\dipop\AppData\LocalLow\SkwConfig.bin File Found : C:\Users\dipop\AppData\Roaming\LiveSupport.exe_log.txt File Found : C:\Users\dipop\AppData\Roaming\Mozilla\Firefox\Profiles\6n053yke.de fault\searchplugins\SweetIm.xml File Found : C:\Users\dipop\AppData\Roaming\Mozilla\Firefox\Profiles\6n053yke.de fault\searchplugins\Sweetpacks Search.xml File Found : C:\Users\dipop\AppData\Roaming\Mozilla\Firefox\Profiles\6n053yke.de fault\searchplugins\WebSearch.xml File Found : C:\Users\dipop\AppData\Roaming\Mozilla\Firefox\Profiles\6n053yke.de fault\user.js File Found : C:\Users\dipop\AppData\Roaming\regsvr32.exe_log.txt Folder Found : C:\Program Files\Conduit Folder Found : C:\Program Files\DiguieSaover Folder Found : C:\Program Files\greaatsaver Folder Found : C:\Program Files\NewSaver Folder Found : C:\Program Files\NewSaVer Folder Found : C:\Program Files\sAfeweb Folder Found : C:\Program Files\SaverExtension Folder Found : C:\Program Files\SaverExttensIone Folder Found : C:\Program Files\Settings Manager Folder Found : C:\Program Files\SNT Folder Found : C:\Program Files\YoutubeAdblocker Folder Found : C:\ProgramData\apn Folder Found : C:\ProgramData\DiguieSaover Folder Found : C:\ProgramData\greaatsaver Folder Found : C:\ProgramData\NewSaVer Folder Found : C:\ProgramData\NewSaver Folder Found : C:\ProgramData\sAfeweb Folder Found : C:\ProgramData\SaverExtension Folder Found : C:\ProgramData\SaverExttensIone Folder Found : C:\ProgramData\SNT Folder Found : C:\ProgramData\Trymedia Folder Found : C:\ProgramData\YoutubeAdblocker Folder Found : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Defa ult\Extensions\dnbaflgaakaemeblbeklolanpcedndbp Folder Found : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Defa ult\Extensions\epkjpgofhligjbdggigboijcekpkojbh Folder Found : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Defa ult\Extensions\gbfgoafoaccajobadjlbkfimookaiolc Folder Found : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Defa ult\Extensions\lbpcmkldknmdhmaniaddofacfjcndkpc Folder Found : C:\Users\Administrator\AppData\Local\torch Folder Found : C:\Users\dipop\AppData\Local\Conduit Folder Found : C:\Users\dipop\AppData\Local\torch Folder Found : C:\Users\dipop\AppData\Roaming\Mozilla\Firefox\Profiles\6n053yke. default\ValueApps

description

hvyk313

Transcript of AdwCleaner[R1]

Page 1: AdwCleaner[R1]

# AdwCleaner v3.215 - Report created 09/07/2014 at 12:00:31# Updated 09/07/2014 by Xplode# Operating System : Windows 7 Home Premium (32 bits)# Username : dipop - DIPOP-PC# Running from : C:\Users\dipop\Downloads\adwcleaner_3.215.exe# Option : Scan

***** [ Services ] *****

Service Found : F06DEFF2-5B9C-490D-910F-35D3A9119622

***** [ Files / Folders ] *****

File Found : C:\ENDFile Found : C:\Users\dipop\AppData\LocalLow\SkwConfig.binFile Found : C:\Users\dipop\AppData\Roaming\LiveSupport.exe_log.txtFile Found : C:\Users\dipop\AppData\Roaming\Mozilla\Firefox\Profiles\6n053yke.default\searchplugins\SweetIm.xmlFile Found : C:\Users\dipop\AppData\Roaming\Mozilla\Firefox\Profiles\6n053yke.default\searchplugins\Sweetpacks Search.xmlFile Found : C:\Users\dipop\AppData\Roaming\Mozilla\Firefox\Profiles\6n053yke.default\searchplugins\WebSearch.xmlFile Found : C:\Users\dipop\AppData\Roaming\Mozilla\Firefox\Profiles\6n053yke.default\user.jsFile Found : C:\Users\dipop\AppData\Roaming\regsvr32.exe_log.txtFolder Found : C:\Program Files\ConduitFolder Found : C:\Program Files\DiguieSaoverFolder Found : C:\Program Files\greaatsaverFolder Found : C:\Program Files\NewSaverFolder Found : C:\Program Files\NewSaVerFolder Found : C:\Program Files\sAfewebFolder Found : C:\Program Files\SaverExtensionFolder Found : C:\Program Files\SaverExttensIoneFolder Found : C:\Program Files\Settings ManagerFolder Found : C:\Program Files\SNTFolder Found : C:\Program Files\YoutubeAdblockerFolder Found : C:\ProgramData\apnFolder Found : C:\ProgramData\DiguieSaoverFolder Found : C:\ProgramData\greaatsaverFolder Found : C:\ProgramData\NewSaVerFolder Found : C:\ProgramData\NewSaverFolder Found : C:\ProgramData\sAfewebFolder Found : C:\ProgramData\SaverExtensionFolder Found : C:\ProgramData\SaverExttensIoneFolder Found : C:\ProgramData\SNTFolder Found : C:\ProgramData\TrymediaFolder Found : C:\ProgramData\YoutubeAdblockerFolder Found : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnbaflgaakaemeblbeklolanpcedndbpFolder Found : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\epkjpgofhligjbdggigboijcekpkojbhFolder Found : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbfgoafoaccajobadjlbkfimookaiolcFolder Found : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbpcmkldknmdhmaniaddofacfjcndkpcFolder Found : C:\Users\Administrator\AppData\Local\torchFolder Found : C:\Users\dipop\AppData\Local\ConduitFolder Found : C:\Users\dipop\AppData\Local\torchFolder Found : C:\Users\dipop\AppData\Roaming\Mozilla\Firefox\Profiles\6n053yke.default\ValueApps

Page 2: AdwCleaner[R1]

Folder Found : C:\Users\dipop\AppData\Roaming\OpenCandyFolder Found : C:\Users\dipop\Documents\Optimizer ProFolder Found : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnbaflgaakaemeblbeklolanpcedndbpFolder Found : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\epkjpgofhligjbdggigboijcekpkojbhFolder Found : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbfgoafoaccajobadjlbkfimookaiolcFolder Found : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbpcmkldknmdhmaniaddofacfjcndkpcFolder Found : C:\Users\Guest\AppData\Local\torchFolder Found : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnbaflgaakaemeblbeklolanpcedndbpFolder Found : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\epkjpgofhligjbdggigboijcekpkojbhFolder Found : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbfgoafoaccajobadjlbkfimookaiolcFolder Found : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbpcmkldknmdhmaniaddofacfjcndkpcFolder Found : C:\Users\HomeGroupUser$\AppData\Local\torch

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}Key Found : HKCU\Software\ConduitKey Found : HKCU\Software\IMKey Found : HKCU\Software\ImInstallerKey Found : HKCU\Software\LinkeyKey Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3C5E4013-F1F6-1663-DAC1-8CB1293F356D}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{40A41FDC-CF2B-DF0A-7B2B-84A4F56BB64F}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5950F011-AD1E-65EE-F0DB-981BBEB41452}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6A63A71F-C51F-4D46-611E-0BF0A24416D0}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{93DBF2BB-A2B3-4683-A92E-57E60751F346}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3C5E4013-F1F6-1663-DAC1-8CB1293F356D}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{40A41FDC-CF2B-DF0A-7B2B-84A4F56BB64F}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5950F011-A

Page 3: AdwCleaner[R1]

D1E-65EE-F0DB-981BBEB41452}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6A63A71F-C51F-4D46-611E-0BF0A24416D0}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{93DBF2BB-A2B3-4683-A92E-57E60751F346}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}Key Found : HKCU\Software\SoftonicKey Found : HKCU\Software\SweetIMKey Found : HKCU\Software\VittaliaKey Found : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}Key Found : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}Key Found : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}Key Found : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}Key Found : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}Key Found : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}Key Found : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C5E4013-F1F6-1663-DAC1-8CB1293F356D}Key Found : HKLM\SOFTWARE\Classes\CLSID\{40A41FDC-CF2B-DF0A-7B2B-84A4F56BB64F}Key Found : HKLM\SOFTWARE\Classes\CLSID\{5950F011-AD1E-65EE-F0DB-981BBEB41452}Key Found : HKLM\SOFTWARE\Classes\CLSID\{6A63A71F-C51F-4D46-611E-0BF0A24416D0}Key Found : HKLM\SOFTWARE\Classes\CLSID\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}Key Found : HKLM\SOFTWARE\Classes\DiGiSavuerr.DiGiSavuerrKey Found : HKLM\SOFTWARE\Classes\DiGiSavuerr.DiGiSavuerr.6.7Key Found : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}Key Found : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}Key Found : HKLM\SOFTWARE\Classes\NEewSiaver.NEewSiaverKey Found : HKLM\SOFTWARE\Classes\NEewSiaver.NEewSiaver.1.1Key Found : HKLM\SOFTWARE\Classes\SaaverEEXTension.SaaverEEXTensionKey Found : HKLM\SOFTWARE\Classes\SaaverEEXTension.SaaverEEXTension.1Key Found : HKLM\SOFTWARE\Classes\SaverExtension.SaverExtensionKey Found : HKLM\SOFTWARE\Classes\SaverExtension.SaverExtension.1Key Found : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}Key Found : HKLM\Software\InstallIQKey Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93DBF2BB-A2B3-4683-A92E-57E60751F346}Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCSKey Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancsKey Found : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32Key Found : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCSKey Found : HKLM\SOFTWARE\Microsoft\Tracing\dmwu_rasapi32Key Found : HKLM\SOFTWARE\Microsoft\Tracing\dmwu_rasmancsKey Found : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32Key Found : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCSKey Found : HKLM\SOFTWARE\Microsoft\Tracing\LiveSupport_RASAPI32

Page 4: AdwCleaner[R1]

Key Found : HKLM\SOFTWARE\Microsoft\Tracing\livesupport_rasmancsKey Found : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasapi32Key Found : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasmancsKey Found : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasapi32Key Found : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasmancsKey Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_microsoft-powerpoint_RASAPI32Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_microsoft-powerpoint_RASMANCSKey Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_nero-burning-rom_RASAPI32Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_nero-burning-rom_RASMANCSKey Found : HKLM\SOFTWARE\Microsoft\Tracing\updateWebSparkle_RASAPI32Key Found : HKLM\SOFTWARE\Microsoft\Tracing\updateWebSparkle_RASMANCSKey Found : HKLM\SOFTWARE\Microsoft\Tracing\utilWebSparkle_RASAPI32Key Found : HKLM\SOFTWARE\Microsoft\Tracing\utilWebSparkle_RASMANCSKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflipKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Executi

Page 5: AdwCleaner[R1]

on Options\umbrella.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaroKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteeraKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exeKey Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EC9510D-A439-4950-9399-B6399EDF9EA7}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3C5E4013-F1F6-1663-DAC1-8CB1293F356D}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{40A41FDC-CF2B-DF0A-7B2B-84A4F56BB64F}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5950F011-AD1E-65EE-F0DB-981BBEB41452}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6A63A71F-C51F-4D46-611E-0BF0A24416D0}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7223EDAC-E091-B3C1-BD91-B66CE557800F}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA41BB14-E67B-1653-C57B-5CA99418A866}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-990783876Key Found : HKLM\Software\SweetIMKey Found : HKLM\Software\SystemKValue Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [livesupport]Value Found : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]Value Found : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]Value Found : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]Value Found : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x64]

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7600.16700

-\\ Mozilla Firefox v30.0 (ro)

[ File : C:\Users\dipop\AppData\Roaming\Mozilla\Firefox\Profiles\6n053yke.defaul

Page 6: AdwCleaner[R1]

t\prefs.js ]

Line Found : user_pref("browser.newtab.url", "hxxp://mysearch.sweetpacks.com/?barid=1763663516306898943&src=97&i=48&crg=&ppd=search,36200354322,skype&did=10844&st=23");Line Found : user_pref("browser.search.defaultenginename,S", "WebSearch");Line Found : user_pref("browser.search.defaulturl", "hxxp://websearch.exitingsearch.info/?pid=1481&r=2014/03/18&hid=8518224029682095283&lg=EN&cc=RO&unqvl=50&l=1&q=");Line Found : user_pref("browser.search.order.1", "WebSearch");Line Found : user_pref("browser.search.order.1,S", "WebSearch");Line Found : user_pref("browser.search.selectedEngine,S", "WebSearch");Line Found : user_pref("browser.startup.homepage", "hxxp://mysearch.sweetpacks.com/?barid=1763663516306898943&src=10&i=48&crg=&ppd=search,36200354322,skype&did=10844&st=23");Line Found : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]Line Found : user_pref("extensions.48G.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net[...]Line Found : user_pref("extensions.9SYj05Fp.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorob[...]Line Found : user_pref("extensions.Xxb0wnZE6nT.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumo[...]Line Found : user_pref("extensions.b1C.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net[...]Line Found : user_pref("extensions.i_O.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net[...]Line Found : user_pref("extensions.jeuQg.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.n[...]Line Found : user_pref("extensions.kZicm.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.n[...]Line Found : user_pref("extensions.lcv.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net[...]Line Found : user_pref("extensions.q7iqEJJ4QzuP.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sum[...]Line Found : user_pref("extensions.x8x.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net[...]Line Found : user_pref("keyword.URL", "hxxp://mysearch.sweetpacks.com?src=6&barid=1763663516306898943&i=48&crg=&ppd=search,36200354322,skype&did=10844&st=23&q=");Line Found : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");Line Found : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "hxxp://search.yahoo.com/search?fr=mkg030&p=");Line Found : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");Line Found : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://www.yahoo.com/?ilc=8");Line Found : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.ya

Page 7: AdwCleaner[R1]

hoo.com/search?fr=mkg030&p=");Line Found : user_pref("sweetim.toolbar.urls.homepage", "hxxp://mysearch.sweetpacks.com/?src=10&st=12&i=48&did=10844&ppd=search,36200354322,skype&barid=1763663516306898943");Line Found : user_pref("valueApps.ct3317212./9B+7E+x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E+x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E,x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E,x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E-x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E-x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E.:2z527", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E.:2z527.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E.x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E.x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E/x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E/x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E06CG5EL8:", "6E6D686F6F746D6E7775");Line Found : user_pref("valueApps.ct3317212./9B+7E06CG5EL8:.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E06CG5EL;8I:K", "247E2D2F226A74736E75757A73747D7B242F4B49474F42357D5D5C3D");Line Found : user_pref("valueApps.ct3317212./9B+7E06CG5EL;8I:K.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E0x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E0x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E1x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E1x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E2x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E2x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E3x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E3x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E4x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E4x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E5x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E5x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E6x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E6x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E7x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E7x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E8x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E8x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E9x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E9x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E:x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E:x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E;x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E;x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E<x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E<x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E=x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E=x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E>x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E>x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E?x305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7E?x305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7E@x305", "2423");Line Found : user_pref("valueApps.ct3317212./[email protected]", false);Line Found : user_pref("valueApps.ct3317212./9B+7EAx305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7EAx305.storedInFile", false);

Page 8: AdwCleaner[R1]

Line Found : user_pref("valueApps.ct3317212./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D337D56545138505C");Line Found : user_pref("valueApps.ct3317212./9B+7EBE3G=;D9N9=D.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7EBx305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7EBx305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7ECx305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7ECx305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7EDx305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7EDx305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B+7Etx305", "2423");Line Found : user_pref("valueApps.ct3317212./9B+7Etx305.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B-0?3G>D", "6A6C403E733E43757A76707575207776207825237B517C2A23265625272C26262B295B2D");Line Found : user_pref("valueApps.ct3317212./9B-0?3G>D.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B-0?3G@6:5;", "");Line Found : user_pref("valueApps.ct3317212./9B-0?3G@6:5;.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B-0?3GFA7EF", "2B2E2C3D");Line Found : user_pref("valueApps.ct3317212./9B-0?3GFA7EF.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B-3=3ECCJA=F>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A23282E2E3132333435363B466068576C5E6857705A6C60606B6668563F73796F697861");Line Found : user_pref("valueApps.ct3317212./9B-3=3ECCJA=F>.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B/>01=9A6K6<IM;KRIE@PDAWM", "6E6A68707374757677");Line Found : user_pref("valueApps.ct3317212./9B/>01=9A6K6<IM;[email protected]", false);Line Found : user_pref("valueApps.ct3317212./9B3=>@44I48?", "372C2D32697576334236334148474C213F3E484F4E4D4648502B564B4E2E5959595F4C564F3764535750");Line Found : user_pref("valueApps.ct3317212./9B3=>@44I48?.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B5BA==9CJAG", "676D3C696D6D6F727A7375497A4879774A4E4E4E21");Line Found : user_pref("valueApps.ct3317212./9B5BA==9CJAG.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B6B11G4C56B>F;P;ANR@P", "6E6C716E6B6C71707572787177");Line Found : user_pref("valueApps.ct3317212./9B6B11G4C56B>F;P;[email protected]", false);Line Found : user_pref("valueApps.ct3317212./[email protected];7B=?OFB>>RHIQS", "393F352F3E");Line Found : user_pref("valueApps.ct3317212./[email protected];7B=?OFB>>RHIQS.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B9643G3/9E", "6A");Line Found : user_pref("valueApps.ct3317212./9B9643G3/9E.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B;45>:BI9I7IE", "2B2E2C3D");Line Found : user_pref("valueApps.ct3317212./9B;45>:BI9I7IE.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B<:222H64<", "393F352F3E");Line Found : user_pref("valueApps.ct3317212./9B<:222H64<.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B<:222H64<L8DAJ", "6D70706E7674737975722A797B727D7E75217E");Line Found : user_pref("valueApps.ct3317212./9B<:222H64<L8DAJ.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B=+03EH8H8J?:", "4443");Line Found : user_pref("valueApps.ct3317212./9B=+03EH8H8J?:.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B?+E2A52D8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");Line Found : user_pref("valueApps.ct3317212./9B?+E2A52D8.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9B?B0D:8AJ62<H", "6D");

Page 9: AdwCleaner[R1]

Line Found : user_pref("valueApps.ct3317212./9B?B0D:8AJ62<H.storedInFile", false);Line Found : user_pref("valueApps.ct3317212./9BA@0<0BI6A7GN:6@L?", "6C");Line Found : user_pref("valueApps.ct3317212./9BA@0<0BI6A7GN:6@L?.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.PG_ENABLE", "74727565");Line Found : user_pref("valueApps.ct3317212.PG_ENABLE.storedInFile", false);Line Found : user_pref("valueApps.ct3317212._key_cl_active", "62613932353239352D653064392D343162322D396663662D363563356535333239333135");Line Found : user_pref("valueApps.ct3317212._key_cl_active.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.cb_experience_000", "3232");Line Found : user_pref("valueApps.ct3317212.cb_experience_000.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.cb_firstuse0100", "31");Line Found : user_pref("valueApps.ct3317212.cb_firstuse0100.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.cb_user_id_000", "43423936333639353937363432355F313339343838313736343338355F46697265666F78");Line Found : user_pref("valueApps.ct3317212.cb_user_id_000.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.cbfirsttime", "5765642046656220323620323031342031323A30303A303320474D542B303230302028475442205374616E646172642054696D6529");Line Found : user_pref("valueApps.ct3317212.cbfirsttime.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_appStateReportTime", "31343034383834363233323931");Line Found : user_pref("valueApps.ct3317212.mam_gk_appStateReportTime.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_appState_Clarity_Active", "6F6E");Line Found : user_pref("valueApps.ct3317212.mam_gk_appState_Clarity_Active.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_appsConfig.storedInFile", true);Line Found : user_pref("valueApps.ct3317212.mam_gk_appsDefaultEnabled", "6E756C6C");Line Found : user_pref("valueApps.ct3317212.mam_gk_appsDefaultEnabled.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_calledSetupService", "31");Line Found : user_pref("valueApps.ct3317212.mam_gk_calledSetupService.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_currentVersion", "312E31332E302E3137");Line Found : user_pref("valueApps.ct3317212.mam_gk_currentVersion.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_first_time", "31");Line Found : user_pref("valueApps.ct3317212.mam_gk_first_time.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_lastInstallationSessionGuid", "7B39303131346436302D666265332D343034612D613237392D3230353439386464613432637D");Line Found : user_pref("valueApps.ct3317212.mam_gk_lastInstallationSessionGuid.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_lastLoginTime", "31343034383834363234343539");Line Found : user_pref("valueApps.ct3317212.mam_gk_lastLoginTime.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_localization.storedInFile", true);

Page 10: AdwCleaner[R1]

Line Found : user_pref("valueApps.ct3317212.mam_gk_mamEnabled", "66616C7365");Line Found : user_pref("valueApps.ct3317212.mam_gk_mamEnabled.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_settings1.13.0.17.storedInFile", true);Line Found : user_pref("valueApps.ct3317212.mam_gk_showWelcomeGadget", "66616C7365");Line Found : user_pref("valueApps.ct3317212.mam_gk_showWelcomeGadget.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_stamp", "35345F30");Line Found : user_pref("valueApps.ct3317212.mam_gk_stamp.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_userBornDate", "3230313430323236");Line Found : user_pref("valueApps.ct3317212.mam_gk_userBornDate.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_userId", "64666139666466622D333739352D346339662D383933662D356163363338346336646231");Line Found : user_pref("valueApps.ct3317212.mam_gk_userId.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.mam_gk_user_approval_interacted", "");Line Found : user_pref("valueApps.ct3317212.mam_gk_user_approval_interacted.storedInFile", false);Line Found : user_pref("valueApps.ct3317212.url_history0001", "687474703A2F2F7777772E76657A6973657269616C656F6E6C696E652E696E666F2F7468652D76616D706972652D646961726965732D2F736561736F6E2F353A3A3A636C69636B68616E64[...]Line Found : user_pref("valueApps.ct3317212.url_history0001.storedInFile", true);

-\\ Google Chrome v35.0.1916.153

[ File : C:\Users\dipop\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Found [Search Provider] : hxxp://www.default-search.net/search?sid=476&aid=104&itype=n&ver=13072&tm=403&src=ds&p={searchTerms}Found [Startup_urls] : hxxp://www.default-search.net?sid=476&aid=104&itype=n&ver=13072&tm=403&src=hmpFound [Homepage] : hxxp://www.default-search.net?sid=476&aid=104&itype=n&ver=13072&tm=403&src=hmp

*************************

AdwCleaner[R0].txt - [32248 octets] - [09/07/2014 11:58:59]AdwCleaner[R1].txt - [32759 octets] - [09/07/2014 12:00:31]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [32820 octets] ##########