# AdwCleaner v2.005 - Logfile created 10/27/2012 at 11:30:16 # Updated 14/10/2012 by Xplode # Operating system : Windows 7 Home Premium (64 bits) # User : Zbigniew - KOMPUTER # Boot Mode : Normal # Running from : C:\Users\Zbigniew\Desktop\adwcleaner.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** File Deleted : C:\user.js Folder Deleted : C:\Program Files (x86)\Conduit Folder Deleted : C:\ProgramData\Ask Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\ProgramData\Tarma Installer Folder Deleted : C:\Users\Zbigniew\AppData\Local\Conduit Folder Deleted : C:\Users\Zbigniew\AppData\Local\Temp\CT2670199 Folder Deleted : C:\Users\Zbigniew\AppData\LocalLow\BabylonToolbar Folder Deleted : C:\Users\Zbigniew\AppData\LocalLow\Conduit Folder Deleted : C:\Users\Zbigniew\AppData\Roaming\Babylon Folder Deleted : C:\Users\Zbigniew\AppData\Roaming\Mozilla\Firefox\Profiles\a6fhgh0d.default\CT2670199 Folder Deleted : C:\Users\Zbigniew\AppData\Roaming\Mozilla\Firefox\Profiles\a6fhgh0d.default\extensions\{a5ae8924-4036-420f-b7f6-a47e4b8f692e} Folder Deleted : C:\Users\Zbigniew\AppData\Roaming\Mozilla\Firefox\Profiles\a6fhgh0d.default\extensions\staged Folder Deleted : C:\Users\Zbigniew\AppData\Roaming\Mozilla\Firefox\Profiles\a6fhgh0d.default\Smartbar ***** [Registry] ***** Key Deleted : HKCU\Software\AppDataLow\Software\Conduit Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} Key Deleted : HKCU\Software\Softonic Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKLM\Software\Babylon Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2670199 Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Key Deleted : HKLM\SOFTWARE\Tarma Installer Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] ***** [Internet Browsers] ***** -\\ Internet Explorer v8.0.7600.16385 Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT2670199&SSPV=IEOB04 --> hxxp://www.google.com Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=113676&tt=010812_newm_3112_1&babsrc=NT_ss&mntrId=dcc47c0f0000000000001c659d5edc74 --> hxxp://www.google.com -\\ Mozilla Firefox v11.0 (pl) Profile name : default File : C:\Users\Zbigniew\AppData\Roaming\Mozilla\Firefox\Profiles\a6fhgh0d.default\prefs.js C:\Users\Zbigniew\AppData\Roaming\Mozilla\Firefox\Profiles\a6fhgh0d.default\user.js ... Deleted ! Deleted : user_pref("CT2670199.1000082.isPlayDisplay", "true"); Deleted : user_pref("CT2670199.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...] Deleted : user_pref("CT2670199.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}"); Deleted : user_pref("CT2670199.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...] Deleted : user_pref("CT2670199.FirstTime", "true"); Deleted : user_pref("CT2670199.FirstTimeFF3", "true"); Deleted : user_pref("CT2670199.GK_ICY_NOTIF_SENT", "sent"); Deleted : user_pref("CT2670199.InstallationDate0.2180191645578123", "1349201057829"); Deleted : user_pref("CT2670199.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT267[...] Deleted : user_pref("CT2670199.UserID", "UN08439065151917069"); Deleted : user_pref("CT2670199.addressBarTakeOverEnabledInHidden", "true"); Deleted : user_pref("CT2670199.autoDisableScopes", -1); Deleted : user_pref("CT2670199.browser.search.defaultthis.engineName", true); Deleted : user_pref("CT2670199.cbcountry_001", "PL"); Deleted : user_pref("CT2670199.cbfirsttime", "Tue Oct 02 2012 20:04:18 GMT+0200"); Deleted : user_pref("CT2670199.defaultSearch", "true"); Deleted : user_pref("CT2670199.embeddedsData", "[{\"appId\":\"129210744565641873\",\"apiPermissions\":{\"cross[...] Deleted : user_pref("CT2670199.enableAlerts", "always"); Deleted : user_pref("CT2670199.enableSearchFromAddressBar", "true"); Deleted : user_pref("CT2670199.firstTimeDialogOpened", "true"); Deleted : user_pref("CT2670199.fixPageNotFoundError", "true"); Deleted : user_pref("CT2670199.fixPageNotFoundErrorInHidden", "true"); Deleted : user_pref("CT2670199.fixUrls", true); Deleted : user_pref("CT2670199.hxxp___www_socialgrowthtechnologies_com_couponbuddy_v001.APP_WIN_FEATURES", "op[...] Deleted : user_pref("CT2670199.installId", "icytower"); Deleted : user_pref("CT2670199.installType", "ConduitNSISIntegration"); Deleted : user_pref("CT2670199.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}"); Deleted : user_pref("CT2670199.isNewTabEnabled", true); Deleted : user_pref("CT2670199.isPerformedSmartBarTransition", "true"); Deleted : user_pref("CT2670199.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}"); Deleted : user_pref("CT2670199.keyword", true); Deleted : user_pref("CT2670199.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...] Deleted : user_pref("CT2670199.openThankYouPage", "false"); Deleted : user_pref("CT2670199.openUninstallPage", "true"); Deleted : user_pref("CT2670199.search.searchAppId", "129210744565641873"); Deleted : user_pref("CT2670199.search.searchCount", "0"); Deleted : user_pref("CT2670199.searchInNewTabEnabledInHidden", "true"); Deleted : user_pref("CT2670199.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}"); Deleted : user_pref("CT2670199.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...] Deleted : user_pref("CT2670199.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...] Deleted : user_pref("CT2670199.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...] Deleted : user_pref("CT2670199.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...] Deleted : user_pref("CT2670199.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...] Deleted : user_pref("CT2670199.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...] Deleted : user_pref("CT2670199.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...] Deleted : user_pref("CT2670199.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1349201052458"); Deleted : user_pref("CT2670199.serviceLayer_services_appsMetadata_lastUpdate", "1349201052065"); Deleted : user_pref("CT2670199.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1349201055401"); Deleted : user_pref("CT2670199.serviceLayer_services_login_10.10.27.6_lastUpdate", "1349201057399"); Deleted : user_pref("CT2670199.serviceLayer_services_optimizer_lastUpdate", "1349201054841"); Deleted : user_pref("CT2670199.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1349201055434"); Deleted : user_pref("CT2670199.serviceLayer_services_searchAPI_lastUpdate", "1349201050932"); Deleted : user_pref("CT2670199.serviceLayer_services_serviceMap_lastUpdate", "1349201050706"); Deleted : user_pref("CT2670199.serviceLayer_services_toolbarContextMenu_lastUpdate", "1349201055370"); Deleted : user_pref("CT2670199.serviceLayer_services_toolbarSettings_lastUpdate", "1349201051133"); Deleted : user_pref("CT2670199.serviceLayer_services_translation_lastUpdate", "1349201054848"); Deleted : user_pref("CT2670199.settingsINI", true); Deleted : user_pref("CT2670199.shouldFirstTimeDialog", "false"); Deleted : user_pref("CT2670199.smartbar.CTID", "CT2670199"); Deleted : user_pref("CT2670199.smartbar.Uninstall", "0"); Deleted : user_pref("CT2670199.smartbar.homepage", true); Deleted : user_pref("CT2670199.smartbar.toolbarName", "Free Lunch Design TB "); Deleted : user_pref("CT2670199.toolbarAppHeartbeat", "{\"129683387486428226\":1349201589269}"); Deleted : user_pref("CT2670199.toolbarBornServerTime", "2-10-2012"); Deleted : user_pref("CT2670199.toolbarCurrentServerTime", "2-10-2012"); Deleted : user_pref("CT2670199.toolbarNotificationHeartbeat", "{\"type\":\"heartbeat\",\"time\":1349201599020,[...] Deleted : user_pref("CT2670199.toolbarNotificationQueue", "[{\"app\":0.2180191645578123,\"args\":{\"id\":0.218[...] Deleted : user_pref("CT2670199.toolbarNotificationSettings", "{\"sendNotifications\":{\"all\":true,\"apps\":{\[...] Deleted : user_pref("CT2670199.toolbarNotificationUserId", "7826668311"); Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2670199&SearchSource=1[...] Deleted : user_pref("Smartbar.ConduitSearchEngineList", "Free Lunch Design TB Customized Web Search"); Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2670199[...] Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.babylon.com/?affID=113676&tt=01081[...] Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT2670199"); Deleted : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=113676&tt=010812_newm_3112_1&babsr[...] Deleted : user_pref("browser.search.order.1", "Search the web (Babylon)"); Deleted : user_pref("browser.search.selectedEngine", "Free Lunch Design TB Customized Web Search"); Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT2670199&SearchSource=13"); Deleted : user_pref("extensions.BabylonToolbar.admin", false); Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "en"); Deleted : user_pref("extensions.BabylonToolbar.excTlbr", false); Deleted : user_pref("extensions.BabylonToolbar.id", "dcc47c0f0000000000001c659d5edc74"); Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15557"); Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "base"); Deleted : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://www.google.com/search?babsrc=TB_ggl&q="); Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.6.4.6"); Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.6.4.6"); Deleted : user_pref("extensions.BabylonToolbar_i.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=113676&tt=010812_newm_3112_1"); Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true); Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=113676&tt=01081[...] Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.4.620:25:47"); Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2670199&SearchSource=2&q=[...] -\\ Google Chrome v [Unable to get version] File : C:\Users\Zbigniew\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted [l.47] : icon_url = "hxxp://www.babylon.com/favicon.ico", Deleted [l.50] : keyword = "babylon.com", Deleted [l.53] : search_url = "hxxp://search.babylon.com/?q={searchTerms}&affID=113676&tt=010812_newm_3112_1&babsrc=SP_ss&mntrId=dcc47c0f0000000000001c659d5edc74", -\\ Opera v11.62.1347.0 File : C:\Users\Zbigniew\AppData\Roaming\Opera\Opera\operaprefs.ini [OK] File is clean. ************************* AdwCleaner[S1].txt - [13509 octets] - [27/10/2012 11:30:16] ########## EOF - C:\AdwCleaner[S1].txt - [13570 octets] ##########