# AdwCleaner v1.701 - Logfile created 07/10/2012 at 12:40:42 # Updated 02/07/2012 by Xplode # Operating system : Windows 7 Ultimate Service Pack 1 (32 bits) # User : Piotrusia - PIOTRUS # Running from : C:\Users\Piotrusia\Downloads\adwcleaner.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** Folder Deleted : C:\Users\Piotruœ\AppData\Local\Conduit Folder Deleted : C:\Users\Piotruœ\AppData\Local\ConduitEngine Folder Deleted : C:\Users\Piotrusia\AppData\Local\Babylon Folder Deleted : C:\Users\Piotrusia\AppData\Local\Conduit Folder Deleted : C:\Users\Aœq xD\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif Folder Deleted : C:\Users\Gry\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif Folder Deleted : C:\Users\Piotruœ\AppData\LocalLow\BabylonToolbar Folder Deleted : C:\Users\Piotruœ\AppData\LocalLow\Conduit Folder Deleted : C:\Users\Piotruœ\AppData\LocalLow\ConduitEngine Folder Deleted : C:\Users\Piotruœ\AppData\LocalLow\facemoods.com Folder Deleted : C:\Users\Piotruœ\AppData\LocalLow\SweetIM Folder Deleted : C:\Users\Piotrusia\AppData\LocalLow\BabylonToolbar Folder Deleted : C:\Users\Piotrusia\AppData\LocalLow\Conduit Folder Deleted : C:\Users\Piotrusia\AppData\LocalLow\ConduitEngine Folder Deleted : C:\Users\Piotrusia\AppData\LocalLow\facemoods.com Folder Deleted : C:\Users\Piotrusia\AppData\LocalLow\PriceGong Folder Deleted : C:\Users\Aœq xD\AppData\LocalLow\4shared.com Folder Deleted : C:\Users\Aœq xD\AppData\LocalLow\BabylonToolbar Folder Deleted : C:\Users\Aœq xD\AppData\LocalLow\Conduit Folder Deleted : C:\Users\Aœq xD\AppData\LocalLow\ConduitEngine Folder Deleted : C:\Users\Aœq xD\AppData\LocalLow\facemoods.com Folder Deleted : C:\Users\Aœq xD\AppData\LocalLow\PriceGong Folder Deleted : C:\Users\Aœq xD\AppData\LocalLow\SweetIM Folder Deleted : C:\Users\Gry\AppData\LocalLow\4shared.com Folder Deleted : C:\Users\Gry\AppData\LocalLow\BabylonToolbar Folder Deleted : C:\Users\Gry\AppData\LocalLow\Conduit Folder Deleted : C:\Users\Gry\AppData\LocalLow\ConduitEngine Folder Deleted : C:\Users\Gry\AppData\LocalLow\facemoods.com Folder Deleted : C:\Users\Gry\AppData\LocalLow\PriceGong Folder Deleted : C:\Users\Gry\AppData\LocalLow\SweetIM Folder Deleted : C:\Users\Piotrusia\AppData\Roaming\Babylon Folder Deleted : C:\Users\Piotrusia\AppData\Roaming\OpenCandy Folder Deleted : C:\Users\Piotruœ\AppData\Roaming\Mozilla\Firefox\Profiles\u2c409aa.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} Folder Deleted : C:\Users\Piotruœ\AppData\Roaming\Mozilla\Firefox\Profiles\u2c409aa.default\extensions\DTToolbar@toolbarnet.com Folder Deleted : C:\Users\Piotruœ\AppData\Roaming\Mozilla\Firefox\Profiles\u2c409aa.default\extensions\engine@conduit.com Folder Deleted : C:\Users\Piotruœ\AppData\Roaming\Mozilla\Firefox\Profiles\u2c409aa.default\extensions\ffxtlbr@Facemoods.com Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\ProgramData\SweetIM Folder Deleted : C:\Program Files\Conduit Folder Deleted : C:\Program Files\ConduitEngine Folder Deleted : C:\Program Files\DAEMON Tools Toolbar Folder Deleted : C:\Program Files\SweetIM File Deleted : C:\Users\Piotruœ\AppData\Roaming\Mozilla\Firefox\Profiles\u2c409aa.default\searchplugins\SweetIm.xml File Deleted : C:\Users\Piotruœ\AppData\Roaming\Mozilla\Firefox\Profiles\u2c409aa.default\searchplugins\SweetIM Search.xml ***** [Registry] ***** [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1098640 [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2233703 [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2776682 [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2786678 [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3031817 Key Deleted : HKCU\Software\AppDataLow\Software\conduitEngine Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong Key Deleted : HKCU\Software\AppDataLow\Toolbar Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\facemoods.com Key Deleted : HKCU\Software\Headlight Key Deleted : HKCU\Software\Softonic Key Deleted : HKCU\Software\SweetIm Key Deleted : HKLM\SOFTWARE\Babylon Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine Key Deleted : HKLM\SOFTWARE\Classes\esrv.escrtSrvc Key Deleted : HKLM\SOFTWARE\Classes\esrv.escrtSrvc.1 Key Deleted : HKLM\SOFTWARE\Classes\facemoods.xtrnl Key Deleted : HKLM\SOFTWARE\Classes\facemoods.xtrnl.1 Key Deleted : HKLM\SOFTWARE\Classes\facemoodsApp.appCore Key Deleted : HKLM\SOFTWARE\Classes\facemoodsApp.appCore.1 Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1 Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1 Key Deleted : HKLM\SOFTWARE\Classes\sim-packages Key Deleted : HKLM\SOFTWARE\Conduit Key Deleted : HKLM\SOFTWARE\conduitEngine Key Deleted : HKLM\SOFTWARE\facemoods.com Key Deleted : HKLM\SOFTWARE\Google\chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\noebaifjopccondbkcieccphcpijhdne Key Deleted : HKLM\SOFTWARE\Iminent Key Deleted : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine Key Deleted : HKLM\SOFTWARE\SweetIM Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SweetIM] ***** [Registre - GUID] ***** Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A5B99E41-E157-4209-8AAC-DB003A816079} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AD20D01C-C939-4DD2-8C55-56935A48987E} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E95EAD3F-18C6-4304-9DC6-BD6FD8E11D37} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{12A5F606-B1EC-474C-83ED-95E99FD8058E} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4F05-9A6E-5D3B778EC567} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35D-6118-11DC-9C72-001320C79847} Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{09EC805C-CB2E-4D53-B0D3-A75A428B81C7}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{09EC805C-CB2E-4D53-B0D3-A75A428B81C7}] ***** [Internet Browsers] ***** -\\ Internet Explorer v8.0.7601.17514 Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://start.facemoods.com/?a=nv1&f=2 --> hxxp://www.google.com -\\ Mozilla Firefox v9.0.1 (pl) Profile name : default File : C:\Users\Piotruœ\AppData\Roaming\Mozilla\Firefox\Profiles\u2c409aa.default\prefs.js Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://home.sweetim.com"); Deleted : user_pref("browser.startup.homepage", "hxxp://home.sweetim.com"); Deleted : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com"); Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "SweetIM Search"); Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", ""); Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "SweetIM Search"); Deleted : user_pref("browser.search.selectedEngine", "SweetIM Search"); Deleted : user_pref("browser.search.defaultenginename", "SweetIM Search"); Deleted : user_pref("extensions.facemoods.tlbrSrchUrl","hxxp://start.facemoods.com/?a=nv1&f=3"); Deleted : user_pref("extensions.facemoods.hmpgUrl", "hxxp://start.facemoods.com/?a=nv1"); Deleted : user_pref("extensions.facemoods.id", "84794968000000000000d85d4c932d8e"); Deleted : user_pref("extensions.facemoods.sid", "c14ad6544311449fb89ac65750239a6a"); Deleted : user_pref("extensions.facemoods.instlDay", "15331"); Deleted : user_pref("extensions.facemoods.vrsn", "1.4.17.11"); Deleted : user_pref("extensions.facemoods.prtnrId", "facemoods.com"); Deleted : user_pref("extensions.facemoods.aflt", "nv1"); Deleted : user_pref("extensions.facemoods.DNSErrUrl","hxxp://start.facemoods.com/?a=nv1&f=5"); Deleted : user_pref("extensions.facemoods.mntz",""); Deleted : user_pref("extensions.facemoods.hmpg", true); Deleted : user_pref("extensions.facemoods.dfltSrch", true); Deleted : user_pref("extensions.facemoods.searchProviderAdded", true); Deleted : user_pref("extensions.facemoods.dfltSrchPrvdr", "Facemoods Search"); Deleted : user_pref("extensions.facemoods.dnsErr", true); Deleted : user_pref("extensions.facemoods.newTab", true); Deleted : user_pref("extensions.facemoods.newTabUrl", "hxxp://start.facemoods.com/?a=nv1&f=2"); Deleted : user_pref("extensions.facemoods.firstRun", true); Deleted : user_pref("browser.startup.homepage", "hxxp://my.daemon-search.com/|hxxp://home.sweetim.com"); Profile name : default File : C:\Users\Piotrusia\AppData\Roaming\Mozilla\Firefox\Profiles\fzryhhvg.default\prefs.js [OK] File is clean. Profile name : default File : C:\Users\Aœq xD\AppData\Roaming\Mozilla\Firefox\Profiles\tqbs3wug.default\prefs.js [OK] File is clean. -\\ Google Chrome v20.0.1132.47 File : C:\Users\Piotruœ\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted : "homepage": "hxxp://start.facemoods.com/?a=nv1", Deleted : "urls_to_restore_on_startup": [ "hxxp://search.conduit.com/?ctid=CT2786678&SearchSource=48"[...] Deleted : "homepage": "hxxp://start.facemoods.com/?a=nv1", Deleted : "urls_to_restore_on_startup": [ "hxxp://search.conduit.com/?ctid=CT2786678&SearchSource=48" ] File : C:\Users\Piotrusia\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted : "icon_url": "hxxp://search.conduit.com/fav.ico", Deleted : "keyword": "search.conduit.com", Deleted : "name": "Conduit", Deleted : "search_url": "hxxp://search.conduit.com/Results.aspx?q={searchTerms}&hl=en&SelfSearch=1&Searc[...] Deleted : "suggest_url": "hxxp://search.conduit.com/" Deleted : "path": "C:\\Users\\Piotrusia\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\npUnity3D32.dll[...] File : C:\Users\Aœq xD\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted : "path": "plugins/ConduitChromeApiPlugin.dll", Deleted : "update_url": "hxxp://autoupdate.chromewebtb.conduit-services.com/sb/?productId=CT293[...] Deleted : "default_icon": "facemoods/img/16.png", Deleted : "default_popup": "facemoods/dropdown.html", Deleted : "128": "facemoods/img/128.png", Deleted : "32": "facemoods/img/32.png", Deleted : "48": "facemoods/img/48.png" Deleted : "name": "Facemoods", Deleted : "update_url": "hxxp://facemoods.com/public/download/chrome/update.xml", Deleted : "name": "Conduit Chrome Plugin", Deleted : "path": "C:\\Users\\A\u015Bq xD\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Exten[...] Deleted : "name": "Conduit Chrome Plugin" File : C:\Users\Gry\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted : "name": "Facemoods", Deleted : "update_url": "hxxp://facemoods.com/public/download/chrome/update.xml", ************************* AdwCleaner[S1].txt - [17330 octets] - [10/07/2012 12:40:42] ########## EOF - C:\AdwCleaner[S1].txt - [17459 octets] ##########