# AdwCleaner v1.701 - Logfile created 07/07/2012 at 09:55:32 # Updated 02/07/2012 by Xplode # Operating system : Windows 7 Home Premium (32 bits) # User : Dom - DOM-KOMPUTER # Running from : D:\pobierane\adwcleaner.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** Folder Deleted : C:\Users\Mamusia\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847} Folder Deleted : C:\Users\Dom\AppData\Roaming\pdfforge Folder Deleted : C:\Users\Mamusia\AppData\Roaming\Babylon Folder Deleted : C:\Users\Mamusia\AppData\Roaming\BabylonToolbar Folder Deleted : C:\Users\Mamusia\AppData\Roaming\Mozilla\Firefox\Profiles\dm4yk4mq.default\extensions\ffxtlbr@babylon.com Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\Program Files\SweetIM File Deleted : C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\in17m6za.default\searchplugins\Askcom.xml File Deleted : C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\in17m6za.default\searchplugins\Startsear.xml File Deleted : C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\in17m6za.default\searchplugins\web-search.xml File Deleted : C:\Users\Mamusia\AppData\Roaming\Mozilla\Firefox\Profiles\dm4yk4mq.default\searchplugins\SweetIm.xml File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml ***** [Registry] ***** Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0} Key Deleted : HKCU\Software\StartSearch Key Deleted : HKLM\SOFTWARE\Babylon Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1 Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn Key Deleted : HKLM\SOFTWARE\SweetIM ***** [Registre - GUID] ***** Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35D-6118-11DC-9C72-001320C79847} Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}] ***** [Internet Browsers] ***** -\\ Internet Explorer v8.0.7600.16385 Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=110819&tt=060612_5_&babsrc=NT_ss&mntrId=20737af7000000000000485b39ee3336 --> hxxp://www.google.com -\\ Mozilla Firefox v13.0.1 (pl) Profile name : default File : C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\in17m6za.default\prefs.js Deleted : user_pref("browser.search.defaultengine", "Ask.com"); Deleted : user_pref("browser.search.defaultenginename", "Ask.com"); Deleted : user_pref("browser.search.order.1", "Ask.com"); Deleted : user_pref("browser.search.selectedEngine", "Ask.com"); Deleted : user_pref("extensions.vshare@toolbar.update.enabled", false); Deleted : user_pref("vshare.install.date", "1316116566"); Deleted : user_pref("vshare.install.finished", "1.0.0"); Deleted : user_pref("vshare.install.fresh", "false"); Deleted : user_pref("vshare.install.guid", "{ed93286b-bc84-412b-8aaa-b0182bc42124}"); Deleted : user_pref("vshare.install.newtab", false); Profile name : default File : C:\Users\Tatuœ\AppData\Roaming\Mozilla\Firefox\Profiles\u0nt5b59.default\prefs.js Deleted : user_pref("browser.search.defaultenginename", "Web Search..."); Deleted : user_pref("extensions.vshare@toolbar.update.enabled", false); Profile name : default File : C:\Users\Dorka\AppData\Roaming\Mozilla\Firefox\Profiles\unc67o0i.default\prefs.js C:\Users\Dorka\AppData\Roaming\Mozilla\Firefox\Profiles\unc67o0i.default\user.js ... Deleted ! Deleted : user_pref("browser.search.selectedEngine", "Ask.com"); Deleted : user_pref("browser.search.order.1", "Ask.com"); Deleted : user_pref("browser.search.defaultengine", "Ask.com"); Deleted : user_pref("browser.search.defaultenginename", "Ask.com"); Deleted : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=SPC2&o=15000&locale=[...] Deleted : user_pref("extensions.asktb.ff-original-keyword-url", ""); Profile name : default File : C:\Users\Mamusia\AppData\Roaming\Mozilla\Firefox\Profiles\dm4yk4mq.default\prefs.js C:\Users\Mamusia\AppData\Roaming\Mozilla\Firefox\Profiles\dm4yk4mq.default\user.js ... Deleted ! Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com"); Deleted : user_pref("browser.search.defaultenginename", "Ask.com"); Deleted : user_pref("browser.search.order.1", "Ask.com"); Deleted : user_pref("browser.search.selectedEngine", "Ask.com"); Deleted : user_pref("extensions.BabylonToolbar.admin", false); Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar.babTrack", "affID=110819&tt=060612_5_"); Deleted : user_pref("extensions.BabylonToolbar.bbDpng", 19); Deleted : user_pref("extensions.BabylonToolbar.dfltSrch", false); Deleted : user_pref("extensions.BabylonToolbar.hmpg", false); Deleted : user_pref("extensions.BabylonToolbar.id", "20737af7000000000000485b39ee3336"); Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15506"); Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar.lastDP", 19); Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1719:59:16"); Deleted : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "13.0"); Deleted : user_pref("extensions.BabylonToolbar.newTab", true); Deleted : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb"); Deleted : user_pref("extensions.BabylonToolbar.noFFXTlbr", false); Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar.propectorlck", 78689097); Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 1); Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 1); Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar.ptch_0717", true); Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "tb9"); Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1719:59:16"); Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar_i.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110819&tt=060612_5_"); Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "20737af7000000000000485b39ee3336"); Deleted : user_pref("extensions.BabylonToolbar_i.id", "20737af7000000000000485b39ee3336"); Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15506"); Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true); Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=110819&tt=06061[...] Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1719:59:16"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.vshare@toolbar.update.enabled", false); Deleted : user_pref("keyword.URL", "hxxp://search.babylon.com/?affID=110819&tt=060612_5_&babsrc=KW_ss&mntrId=2[...] Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Web Search..."); Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", ""); Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://www.fronda.pl/news/"); Deleted : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?crg=3.1010000&st=12&barid={F2E7[...] Deleted : user_pref("browser.search.defaultengine", "Ask.com"); Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.babylon.com/?affID=110819&tt=06[...] -\\ Google Chrome v20.0.1132.47 File : C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted : "homepage": "hxxp://startsear.ch/?aff=1", Deleted : "urls_to_restore_on_startup": [ "hxxp://startsear.ch/?aff=1" ] Deleted : "keyword": "startsear.ch", Deleted : "name": "Web Search", Deleted : "search_url": "hxxp://startsear.ch/?aff=1&src=sp&cf=45753e7f-00c9-11e1-ada2-485b39ee3336&q={se[...] Deleted : "description": "SweetIm for Facebook", Deleted : "name": "SweetIM for Facebook", Deleted : "homepage": "hxxp://startsear.ch/?aff=1", Deleted : "name": "Winamp Application Detector", Deleted : "name": "Winamp Application Detector" Deleted : "urls_to_restore_on_startup": [ "hxxp://startsear.ch/?aff=1" ] File : C:\Users\Dorka\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted : "description": "vshare.tv plugin", Deleted : "name": "vshare plugin", Deleted : "path": "chvsharetvplg.dll", Deleted : "name": "vShare.tv plug-in", Deleted : "path": "C:\\Users\\Dorka\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\[...] Deleted : "name": "vShare.tv plug-in", Deleted : "path": "C:\\Program Files\\Mozilla Firefox\\plugins\\npvsharetvplg.dll", Deleted : "name": "vShare.tv plug-in" Deleted : "name": "Winamp Application Detector", Deleted : "name": "Winamp Application Detector" ************************* AdwCleaner[R1].txt - [12944 octets] - [07/07/2012 09:55:20] AdwCleaner[S1].txt - [13405 octets] - [07/07/2012 09:55:32] ########## EOF - C:\AdwCleaner[S1].txt - [13534 octets] ##########