# AdwCleaner v2.000 - Logfile created 09/08/2012 at 16:41:54 # Updated 30/08/2012 by Xplode # Operating system : Windows 7 Professional (64 bits) # User : Marcin - MARCIN-NOTEBOOK # Boot Mode : Normal # Running from : C:\Users\Marcin\Downloads\adwcleaner.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** Folder Deleted : C:\Program Files (x86)\StartSearch plugin Folder Deleted : C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbiamblgmkgbcgbcgejjgebalncpmhnp ***** [Registry] ***** Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31} Key Deleted : HKCU\Software\Softonic Key Deleted : HKCU\Software\StartSearch Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pbiamblgmkgbcgbcgejjgebalncpmhnp Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}] ***** [Internet Browsers] ***** -\\ Internet Explorer v8.0.7600.16385 Restored : [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://startsear.ch/?aff=2&cf=15ded3d6-f240-11e0-813c-00a0c6000000 --> hxxp://www.google.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://startsear.ch/?aff=2&cf=15ded3d6-f240-11e0-813c-00a0c6000000 --> hxxp://www.google.com -\\ Mozilla Firefox v14.0.1 (pl) Profile name : default File : C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\pms3dzvo.default\prefs.js Deleted : user_pref("browser.search.defaultengine", "Web Search"); Deleted : user_pref("browser.search.defaultenginename", "Web Search"); Deleted : user_pref("browser.search.order.1", "Web Search"); Deleted : user_pref("browser.search.selectedEngine", "Web Search"); Deleted : user_pref("browser.startup.homepage", "hxxp://startsear.ch/?aff=2&cf=15ded3d6-f240-11e0-813c-00a0c60[...] Deleted : user_pref("keyword.URL", "hxxp://startsear.ch/?aff=2&src=sp&cf=15ded3d6-f240-11e0-813c-00a0c6000000&[...] -\\ Google Chrome v21.0.1180.89 File : C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted [l.13] : homepage = "hxxp://startsear.ch/?aff=2&cf=15ded3d6-f240-11e0-813c-00a0c6000000", Deleted [l.70] : keyword = "startsear.ch", Deleted [l.73] : search_url = "hxxp://startsear.ch/?aff=1&src=sp&cf=15ded3d6-f240-11e0-813c-00a0c6000000&q={searchTerms}", Deleted [l.1412] : homepage = "hxxp://startsear.ch/?aff=2&cf=15ded3d6-f240-11e0-813c-00a0c6000000", ************************* AdwCleaner[S1].txt - [4208 octets] - [08/09/2012 16:41:54] ########## EOF - C:\AdwCleaner[S1].txt - [4268 octets] ##########