# AdwCleaner v1.702 - Logfile created 07/15/2012 at 17:10:47 # Updated 13/07/2012 by Xplode # Operating system : Windows 7 Starter Service Pack 1 (32 bits) # User : Aneta - ANETA-KOMPUTER # Running from : C:\Users\Aneta\Desktop\adwcleaner.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** Folder Deleted : C:\Users\Aneta\AppData\Local\Babylon Folder Deleted : C:\Users\Aneta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia Folder Deleted : C:\Users\Aneta\AppData\Roaming\Babylon Folder Deleted : C:\Users\Aneta\AppData\Roaming\Mozilla\Firefox\Profiles\h8jfl3oq.default\extensions\ffxtlbr@babylon.com Folder Deleted : C:\Users\Aneta\AppData\Roaming\Mozilla\Firefox\Profiles\h8jfl3oq.default\extensions\staged Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\Program Files\VshareComplete File Deleted : C:\Users\Public\Desktop\eBay.lnk ***** [Registry] ***** Key Deleted : HKCU\Software\StartSearch Key Deleted : HKLM\SOFTWARE\Babylon Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL Key Deleted : HKLM\SOFTWARE\DT Soft ***** [Registre - GUID] ***** Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC} ***** [Internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16421 [OK] Registry is clean. -\\ Mozilla Firefox v10.0.2 (pl) Profile name : default File : C:\Users\Aneta\AppData\Roaming\Mozilla\Firefox\Profiles\h8jfl3oq.default\prefs.js C:\Users\Aneta\AppData\Roaming\Mozilla\Firefox\Profiles\h8jfl3oq.default\user.js ... Deleted ! Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com"); Deleted : user_pref("browser.search.defaultenginename", "Search the web (Babylon)"); Deleted : user_pref("browser.search.selectedEngine", "Search the web (Babylon)"); Deleted : user_pref("extensions.BabylonToolbar.admin", false); Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar.babTrack", "affID=100481"); Deleted : user_pref("extensions.BabylonToolbar.bbDpng", 15); Deleted : user_pref("extensions.BabylonToolbar.dfltSrch", false); Deleted : user_pref("extensions.BabylonToolbar.hmpg", false); Deleted : user_pref("extensions.BabylonToolbar.id", "d4006a0d000000000000ccaf781c3de0"); Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15328"); Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar.lastDP", 15); Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1720:23:11"); Deleted : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "10.0"); Deleted : user_pref("extensions.BabylonToolbar.newTab", true); Deleted : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb"); Deleted : user_pref("extensions.BabylonToolbar.noFFXTlbr", false); Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar.propectorlck", 80925530); Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 1); Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0); Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar.ptch_0717", true); Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "tb9"); Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1720:23:11"); Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar_i.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=100481"); Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "d4006a0d000000000000ccaf781c3de0"); Deleted : user_pref("extensions.BabylonToolbar_i.id", "d4006a0d000000000000ccaf781c3de0"); Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15328"); Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true); Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=100481&babsrc=NT_s[...] Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1720:23:11"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.enabledAddons", "ffxtlbr@babylon.com:1.1.9,{972ce4c6-7e08-4474-a285-3208198ce6[...] -\\ Google Chrome v20.0.1132.57 File : C:\Users\Aneta\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted : "homepage": "hxxp://startsear.ch/?aff=1&cf=87e71468-12cc-11e1-909a-e89a8f1e79cf", Deleted : "urls_to_restore_on_startup": [ "hxxp://startsear.ch/?aff=1&cf=87e71468-12cc-11e1-909a-e89a[...] Deleted : "keyword": "startsear.ch", Deleted : "name": "Web Search", Deleted : "search_url": "hxxp://startsear.ch/?aff=1&src=sp&cf=87e71468-12cc-11e1-909a-e89a8f1e79cf&q={se[...] Deleted : "homepage": "hxxp://startsear.ch/?aff=1&cf=87e71468-12cc-11e1-909a-e89a8f1e79cf", Deleted : "name": "vShare.tv plug-in", Deleted : "path": "C:\\Users\\Aneta\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\[...] Deleted : "name": "vShare.tv plug-in", Deleted : "path": "C:\\Program Files\\Mozilla Firefox\\plugins\\npvsharetvplg.dll", Deleted : "name": "vShare.tv plug-in" Deleted : "urls_to_restore_on_startup": [ "hxxp://startsear.ch/?aff=1&cf=87e71468-12cc-11e1-909a-e89a8f1[...] ************************* AdwCleaner[S1].txt - [8660 octets] - [15/07/2012 17:10:47] ########## EOF - C:\AdwCleaner[S1].txt - [8788 octets] ##########