# AdwCleaner v1.606 - Logfile created 01/01/2005 at 06:38:35 # Updated 10/05/2012 by Xplode # Operating system : Microsoft Windows XP Dodatek Service Pack 3 (32 bits) # User : peelka - LIDIA-51EA6DE69 # Running from : C:\Documents and Settings\peelka\Pulpit\Serwis\2\adwcleaner.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** Folder Deleted : C:\Documents and Settings\peelka\Dane aplikacji\Mozilla\Firefox\Profiles\mm7g7goc.default\extensions\ffxtlbr@babylon.com File Deleted : C:\Program Files\Mozilla Firefox\.autoreg File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml ***** [Registry] ***** [*] Key Deleted : HKCU\Software\XBTB01621 [*] Key Deleted : HKLM\SOFTWARE\Classes\XBTB01621.IEToolbar [*] Key Deleted : HKLM\SOFTWARE\Classes\XBTB01621.IEToolbar.1 [*] Key Deleted : HKLM\SOFTWARE\Classes\XBTB01621.XBTB01621 [*] Key Deleted : HKLM\SOFTWARE\Classes\XBTB01621.XBTB01621.1 Key Deleted : HKCU\Software\Cr_Installer Key Deleted : HKCU\Software\pdfforge Key Deleted : HKCU\Software\Winamp Toolbar Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL ***** [Registre - GUID] ***** Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424C-BB9F-74C6899B9F92} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0974BA1E-64EC-11DE-B2A5-E43756D89593} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B922D405-6D13-4A2B-AE89-08A030DA4402} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0974BA1E-64EC-11DE-B2A5-E43756D89593} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1BB22D38-A411-4B13-A746-C2A4F4EC7344} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402} ***** [Internet Browsers] ***** -\\ Internet Explorer v8.0.6001.18702 [OK] Registry is clean. -\\ Mozilla Firefox v3.6.13 (pl) Profile name : default File : C:\Documents and Settings\peelka\Dane aplikacji\Mozilla\Firefox\Profiles\mm7g7goc.default\prefs.js C:\Documents and Settings\peelka\Dane aplikacji\Mozilla\Firefox\Profiles\mm7g7goc.default\user.js ... Deleted ! Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com"); Deleted : user_pref("browser.search.defaultenginename", "Search the web (Babylon)"); Deleted : user_pref("browser.search.order.1", "Search the web (Babylon)"); Deleted : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?AF=100478&babsrc=HP_ss&mntrId=0e02[...] Deleted : user_pref("extensions.BabylonToolbar.admin", false); Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar.babTrack", "affID=100478"); Deleted : user_pref("extensions.BabylonToolbar.bbDpng", 2); Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "en"); Deleted : user_pref("extensions.BabylonToolbar.dfltSrch", true); Deleted : user_pref("extensions.BabylonToolbar.hmpg", true); Deleted : user_pref("extensions.BabylonToolbar.id", "0e02b921000000000000000d883278c0"); Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15313"); Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?AF=100478&babsrc=adbar[...] Deleted : user_pref("extensions.BabylonToolbar.lastDP", 2); Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1718:46:01"); Deleted : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "3.6"); Deleted : user_pref("extensions.BabylonToolbar.newTab", true); Deleted : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb"); Deleted : user_pref("extensions.BabylonToolbar.noFFXTlbr", false); Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar.propectorlck", 74481667); Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 1); Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 1); Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar.ptch_0717", true); Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "tb9"); Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1718:46:01"); Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar_i.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=100478"); Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "0e02b921000000000000000d883278c0"); Deleted : user_pref("extensions.BabylonToolbar_i.id", "0e02b921000000000000000d883278c0"); Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15313"); Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar_i.newTab", false); Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1718:46:01"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.crossriderapp498.498.InstallationThankYouPage", true); Deleted : user_pref("extensions.crossriderapp498.498.InstallationTime", 1323107153); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.searchUserConifrmation", false); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setHomepage", false); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setNewTab", false); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setSearch", false); Deleted : user_pref("extensions.crossriderapp498.498.active", true); Deleted : user_pref("extensions.crossriderapp498.498.addressbar", ""); Deleted : user_pref("extensions.crossriderapp498.498.affid", "0"); Deleted : user_pref("extensions.crossriderapp498.498.backgroundjs", "\n\n_GPL_PID = 18;\nfunction parse_url(st[...] Deleted : user_pref("extensions.crossriderapp498.498.backgroundver", 9); Deleted : user_pref("extensions.crossriderapp498.498.certdomaininstaller", ""); Deleted : user_pref("extensions.crossriderapp498.498.changeprevious", false); Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.value", "1323107153"); Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:0[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.value", "%7B%22sub_id%22%3A%22defa[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GM[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.value", "1323107153"); Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_geo.expiration", "Sat Jan 08 2005 06:17:49 GM[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_geo.value", "%7B%22geoplugin_request%22%3A%22[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 20[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.value", "%221%22"); Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 0[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.value", "%2212469%22"); Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.value", "%2213326%22"); Deleted : user_pref("extensions.crossriderapp498.498.description", "RewardsArcade is a platform that allows us[...] Deleted : user_pref("extensions.crossriderapp498.498.domain", "www.rewardsarcade.com"); Deleted : user_pref("extensions.crossriderapp498.498.emailsig", ""); Deleted : user_pref("extensions.crossriderapp498.498.enablesearch", false); Deleted : user_pref("extensions.crossriderapp498.498.exposesites", ""); Deleted : user_pref("extensions.crossriderapp498.498.fbremoteurl", ""); Deleted : user_pref("extensions.crossriderapp498.498.group", 0); Deleted : user_pref("extensions.crossriderapp498.498.homepage", ""); Deleted : user_pref("extensions.crossriderapp498.498.iframe", false); Deleted : user_pref("extensions.crossriderapp498.498.js", "\n\nvar _GPL_PID = 18;\n\n(function($) { \n\n $.[...] Deleted : user_pref("extensions.crossriderapp498.498.manifesturl", ""); Deleted : user_pref("extensions.crossriderapp498.498.name", "RewardsArcade"); Deleted : user_pref("extensions.crossriderapp498.498.newtab", ""); Deleted : user_pref("extensions.crossriderapp498.498.opensearch", ""); Deleted : user_pref("extensions.crossriderapp498.498.premium", true); Deleted : user_pref("extensions.crossriderapp498.498.publisher", "215 Apps"); Deleted : user_pref("extensions.crossriderapp498.498.searchstatus", 0); Deleted : user_pref("extensions.crossriderapp498.498.setnewtab", false); Deleted : user_pref("extensions.crossriderapp498.498.settingsurl", ""); Deleted : user_pref("extensions.crossriderapp498.498.thankyou", "hxxp://www.rewardsarcade.com/r.php?app_id=498[...] Deleted : user_pref("extensions.crossriderapp498.498.updateinterval", 360); Deleted : user_pref("extensions.crossriderapp498.498.ver", 82); Deleted : user_pref("extensions.crossriderapp498.apps", "498"); Deleted : user_pref("extensions.crossriderapp498.bic", "1370b1cc5f93856a50a75858b1039ef0"); Deleted : user_pref("extensions.crossriderapp498.cid", 498); Deleted : user_pref("extensions.crossriderapp498.firstrun", false); Deleted : user_pref("extensions.crossriderapp498.hadappinstalled", true); Deleted : user_pref("extensions.crossriderapp498.installationdate", 1335921264); Deleted : user_pref("extensions.crossriderapp498.jsver", 3); Deleted : user_pref("extensions.crossriderapp498.lastcheck", 22265354); Deleted : user_pref("extensions.crossriderapp498.lastcheckitem", 18409278); Deleted : user_pref("extensions.crossriderapp498.misc.lastBgWorkerTimer", "1335921613841"); Deleted : user_pref("extensions.crossriderapp498.misc.lastDomWorkerTimer", "1335921613839"); Deleted : user_pref("keyword.URL", "hxxp://search.babylon.com/?AF=100478&babsrc=adbartrp&mntrId=0e02b921000000[...] Profile name : default File : C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\gww3l444.default\prefs.js [OK] File is clean. ************************* AdwCleaner[R1].txt - [11787 octets] - [01/01/2005 06:27:49] AdwCleaner[S1].txt - [12100 octets] - [01/01/2005 06:38:35] ########## EOF - C:\AdwCleaner[S1].txt - [12229 octets] ##########