# AdwCleaner v1.801 - Logfile created 08/24/2012 at 19:01:51 # Updated 14/08/2012 by Xplode # Operating system : Windows 7 Home Premium (32 bits) # User : Oliwia - OLIWIA-KOMPUTER # Boot Mode : Normal # Running from : D:\OTL\adwcleaner.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** Folder Deleted : C:\Users\Oliwia\AppData\Local\Babylon Folder Deleted : C:\Users\Oliwia\AppData\Local\RewardsArcade Folder Deleted : C:\Users\Oliwia\AppData\Roaming\Babylon Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\Program Files\RewardsArcade File Deleted : C:\user.js ***** [Registry] ***** Key Deleted : HKCU\Software\AppDataLow\Software\RewardsArcade Key Deleted : HKLM\SOFTWARE\Babylon Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL Key Deleted : HKLM\SOFTWARE\Classes\f Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1 Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1 Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1 Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki ***** [Registre - GUID] ***** Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}] ***** [Internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16421 [OK] Registry is clean. -\\ Mozilla Firefox v13.0.1 (pl) Profile name : default File : C:\Users\Oliwia\AppData\Roaming\Mozilla\Firefox\Profiles\pao2frvs.default\prefs.js C:\Users\Oliwia\AppData\Roaming\Mozilla\Firefox\Profiles\pao2frvs.default\user.js ... Deleted ! Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com"); Deleted : user_pref("extensions.BabylonToolbar.admin", false); Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar.babTrack", "affID=100478"); Deleted : user_pref("extensions.BabylonToolbar.bbDpng", 24); Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "pl"); Deleted : user_pref("extensions.BabylonToolbar.dfltSrch", true); Deleted : user_pref("extensions.BabylonToolbar.hmpg", true); Deleted : user_pref("extensions.BabylonToolbar.id", "2456437400000000000078843cc955bd"); Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15311"); Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?AF=100478&babsrc=adbar[...] Deleted : user_pref("extensions.BabylonToolbar.lastDP", 24); Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1713:52:04"); Deleted : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "13.0"); Deleted : user_pref("extensions.BabylonToolbar.newTab", true); Deleted : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_FFUP"); Deleted : user_pref("extensions.BabylonToolbar.noFFXTlbr", false); Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar.propectorlck", 84387076); Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0); Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 1); Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar.ptch_0717", true); Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "tb9"); Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1713:52:04"); Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar_i.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=100478"); Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "2456437400000000000078843cc955bd"); Deleted : user_pref("extensions.BabylonToolbar_i.id", "2456437400000000000078843cc955bd"); Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15311"); Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar_i.newTab", false); Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1713:52:04"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.crossriderapp498.498.InstallationThankYouPage", true); Deleted : user_pref("extensions.crossriderapp498.498.InstallationTime", 1322916830); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.searchUserConifrmation", false); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setHomepage", false); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setNewTab", false); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setSearch", false); Deleted : user_pref("extensions.crossriderapp498.498.active", true); Deleted : user_pref("extensions.crossriderapp498.498.addressbar", ""); Deleted : user_pref("extensions.crossriderapp498.498.affid", "0"); Deleted : user_pref("extensions.crossriderapp498.498.backgroundjs", "\n//------------------ PLUGIN START --[...] Deleted : user_pref("extensions.crossriderapp498.498.backgroundver", 10); Deleted : user_pref("extensions.crossriderapp498.498.certdomaininstaller", ""); Deleted : user_pref("extensions.crossriderapp498.498.changeprevious", false); Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.value", "1322916830"); Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:0[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.value", "%7B%22sub_id%22%3A%22defa[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GM[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.value", "1322916830"); Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 20[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.value", "%221%22"); Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_installer_params.expiration", "Fri Feb 01 203[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_installer_params.value", "%7B%22sub_id%22%3A%[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 0[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.value", "%2212469%22"); Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:0[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_product_id.value", "%221074%22"); Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.value", "%2213266%22"); Deleted : user_pref("extensions.crossriderapp498.498.description", "RewardsArcade is a platform that allows us[...] Deleted : user_pref("extensions.crossriderapp498.498.domain", "www.rewardsarcade.com"); Deleted : user_pref("extensions.crossriderapp498.498.emailsig", ""); Deleted : user_pref("extensions.crossriderapp498.498.enablesearch", false); Deleted : user_pref("extensions.crossriderapp498.498.exposesites", ""); Deleted : user_pref("extensions.crossriderapp498.498.fbremoteurl", ""); Deleted : user_pref("extensions.crossriderapp498.498.group", 0); Deleted : user_pref("extensions.crossriderapp498.498.homepage", ""); Deleted : user_pref("extensions.crossriderapp498.498.iframe", false); Deleted : user_pref("extensions.crossriderapp498.498.js", "\nvar _GPL_PID=18,_GPL_baseCDN=\"contentcache-a.aka[...] Deleted : user_pref("extensions.crossriderapp498.498.manifesturl", ""); Deleted : user_pref("extensions.crossriderapp498.498.name", "RewardsArcade"); Deleted : user_pref("extensions.crossriderapp498.498.newtab", ""); Deleted : user_pref("extensions.crossriderapp498.498.opensearch", ""); Deleted : user_pref("extensions.crossriderapp498.498.premium", true); Deleted : user_pref("extensions.crossriderapp498.498.publisher", "215 Apps"); Deleted : user_pref("extensions.crossriderapp498.498.searchstatus", 0); Deleted : user_pref("extensions.crossriderapp498.498.setnewtab", false); Deleted : user_pref("extensions.crossriderapp498.498.settingsurl", ""); Deleted : user_pref("extensions.crossriderapp498.498.thankyou", "hxxp://www.rewardsarcade.com/r.php?app_id=498[...] Deleted : user_pref("extensions.crossriderapp498.498.updateinterval", 360); Deleted : user_pref("extensions.crossriderapp498.498.ver", 103); Deleted : user_pref("extensions.crossriderapp498.apps", "498"); Deleted : user_pref("extensions.crossriderapp498.bic", "13403fcfc66d8a6c3a6329f537434662"); Deleted : user_pref("extensions.crossriderapp498.cid", 498); Deleted : user_pref("extensions.crossriderapp498.firstrun", false); Deleted : user_pref("extensions.crossriderapp498.hadappinstalled", true); Deleted : user_pref("extensions.crossriderapp498.installationdate", 1322916839); Deleted : user_pref("extensions.crossriderapp498.jsver", 3); Deleted : user_pref("extensions.crossriderapp498.lastcheck", 22430449); Deleted : user_pref("extensions.crossriderapp498.lastcheckitem", 22430451); Deleted : user_pref("extensions.crossriderapp498.misc.lastBgWorkerTimer", "1345827077375"); Deleted : user_pref("extensions.crossriderapp498.misc.lastDomWorkerTimer", "1345827077375"); Deleted : user_pref("extensions.funmoods.aflt", "iron2"); Deleted : user_pref("extensions.funmoods.autoRvrt", false); Deleted : user_pref("extensions.funmoods.cntry", "PL"); Deleted : user_pref("extensions.funmoods.cv", "cv5"); Deleted : user_pref("extensions.funmoods.dfltLng", ""); Deleted : user_pref("extensions.funmoods.dfltSrch", true); Deleted : user_pref("extensions.funmoods.dnsErr", true); Deleted : user_pref("extensions.funmoods.envrmnt", "production"); Deleted : user_pref("extensions.funmoods.excTlbr", false); Deleted : user_pref("extensions.funmoods.hdrMd5", "BF537B62F2EC300746DFFBAAF518B4DE"); Deleted : user_pref("extensions.funmoods.hmpg", true); Deleted : user_pref("extensions.funmoods.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=iron2&chnl=iron2&cd=2Xzut[...] Deleted : user_pref("extensions.funmoods.id", "2456437400000000000078843cc955bd"); Deleted : user_pref("extensions.funmoods.instlDay", "15511"); Deleted : user_pref("extensions.funmoods.instlRef", "iron2"); Deleted : user_pref("extensions.funmoods.isdcmntcmplt", true); Deleted : user_pref("extensions.funmoods.lastVrsnTs", "1.5.23.2221:57:52"); Deleted : user_pref("extensions.funmoods.mntrvrsn", "1.3.0"); Deleted : user_pref("extensions.funmoods.newTab", true); Deleted : user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=iron2&chnl=iron2&cd=2Xz[...] Deleted : user_pref("extensions.funmoods.prdct", "funmoods"); Deleted : user_pref("extensions.funmoods.prtnrId", "funmoods"); Deleted : user_pref("extensions.funmoods.sg", "none"); Deleted : user_pref("extensions.funmoods.smplGrp", "none"); Deleted : user_pref("extensions.funmoods.srchPrvdr", "Search"); Deleted : user_pref("extensions.funmoods.tlbrId", "base"); Deleted : user_pref("extensions.funmoods.tlbrSrchUrl", ""); Deleted : user_pref("extensions.funmoods.vrsn", "1.5.23.22"); Deleted : user_pref("extensions.funmoods.vrsnTs", "1.5.23.2221:57:52"); Deleted : user_pref("extensions.funmoods.vrsni", "1.5.23.22"); Deleted : user_pref("extensions.funmoods_i.newTab", true); Deleted : user_pref("extensions.funmoods_i.smplGrp", "none"); Deleted : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2221:57:52"); -\\ Google Chrome v21.0.1180.83 File : C:\Users\Oliwia\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted : "homepage": "hxxp://start.funmoods.com/?f=1&a=iron2&chnl=iron2&cd=2XzutAtN2Y1L1QzuyBzzzzyEtA0C[...] Deleted : "homepage": "hxxp://start.funmoods.com/?f=1&a=iron2&chnl=iron2&cd=2XzutAtN2Y1L1QzuyBzzzzyEtA0C0Cz[...] ************************* AdwCleaner[R1].txt - [16276 octets] - [24/08/2012 19:01:27] AdwCleaner[S1].txt - [16590 octets] - [24/08/2012 19:01:51] ########## EOF - C:\AdwCleaner[S1].txt - [16719 octets] ##########