# AdwCleaner v2.306 - Log utworzony 27/07/2013 o 13:02:39 # Aktualizacja 19/07/2013 przez Xplode # System operacyjny : Windows Vista (TM) Home Basic Service Pack 2 (32 bits) # Użytkownik : Wadysaw - WADYSAW-PC # Tryb uruchomienia : Normalny # Ścieżka : C:\Users\Wadysaw\Desktop\nie usuwać!! - potrzebne do zniszczenia babylona\adwcleaner.exe # Opcja [Usuń] ***** [Usługi] ***** ***** [Pliki / Foldery] ***** Folder Usunięto : C:\Program Files\Protected Search Folder Usunięto : C:\Program Files\Red Sky Folder Usunięto : C:\Program Files\Zoomex Folder Usunięto : C:\ProgramData\Ask Folder Usunięto : C:\ProgramData\Babylon Folder Usunięto : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DownTango Folder Usunięto : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Protected Search Folder Usunięto : C:\Users\Wadysaw\AppData\Local\DownTango Folder Usunięto : C:\Users\Wadysaw\AppData\LocalLow\SimplyTech Folder Usunięto : C:\Users\Wadysaw\AppData\Roaming\Babylon Plik Désinfected : C:\Users\Wadysaw\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Plik Désinfected : C:\Users\Wadysaw\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Menu Start — skrót.lnk Plik Désinfected : C:\Users\Wadysaw\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart.lnk Plik Désinfected : C:\Users\Wadysaw\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk Plik Désinfected : C:\Users\Wadysaw\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk Plik Désinfected : C:\Users\Wadysaw\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk Plik Désinfected : C:\Users\Wadysaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk Plik Désinfected : C:\Users\Wadysaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Plik Usunięto : C:\Users\Wadysaw\AppData\Roaming\Mozilla\Firefox\Profiles\dnxtgv7z.default-1374915078451\BrowserMngr_extensions.sqlite Plik Usunięto : C:\Users\Wadysaw\AppData\Roaming\Mozilla\Firefox\Profiles\dnxtgv7z.default-1374915078451\browsermngr_prefs.js Usunięto po restarcie : C:\ProgramData\Browser Manager ***** [Rejestr] ***** Dane Usunięto : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\browse~1\22643~1.41\{16cdf~1\browse~1.dll Klucz Usunięto : HKCU\Software\1ClickDownload Klucz Usunięto : HKCU\Software\AppDataLow\SProtector Klucz Usunięto : HKCU\Software\BrowserMngr Klucz Usunięto : HKCU\Software\Conduit Klucz Usunięto : HKCU\Software\DataMngr Klucz Usunięto : HKCU\Software\InstallCore Klucz Usunięto : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Klucz Usunięto : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693} Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0} Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE} Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Protected Search_is1 Klucz Usunięto : HKCU\Software\PrivitizeVPNInstallDates Klucz Usunięto : HKCU\Software\ProtectedSearch Klucz Usunięto : HKCU\Software\StartSearch Klucz Usunięto : HKCU\Software\YahooPartnerToolbar Klucz Usunięto : HKLM\Software\BrowserMngr Klucz Usunięto : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48} Klucz Usunięto : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5} Klucz Usunięto : HKLM\SOFTWARE\Classes\Prod.cap Klucz Usunięto : HKLM\Software\Conduit Klucz Usunięto : HKLM\Software\DataMngr Klucz Usunięto : HKLM\SOFTWARE\Google\Chrome\Extensions\jbpkiefagocgkmemidfngdkamloieekf Klucz Usunięto : HKLM\Software\Iminent Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102} Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Klucz Usunięto : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966 Klucz Usunięto : HKLM\SOFTWARE\Software Klucz Usunięto : HKLM\Software\SProtector Klucz Usunięto : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Klucz Usunięto : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Wartość Usunięto : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] ***** [Przeglądarki Internetowe] ***** -\\ Internet Explorer v9.0.8112.16496 Podmieniono : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com Podmieniono : [HKCU\Software\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2937 --> hxxp://www.google.com Podmieniono : [HKCU\Software\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2937 --> hxxp://www.google.com Podmieniono : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com Podmieniono : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com Podmieniono : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2937 --> hxxp://www.google.com Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2937 --> hxxp://www.google.com Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si=41460&bs=true&tid=2937&q=%s --> hxxp://www.google.com Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2937 --> hxxp://www.google.com Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2937 --> hxxp://www.google.com Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com -\\ Mozilla Firefox v22.0 (pl) Plik : C:\Users\Wadysaw\AppData\Roaming\Mozilla\Firefox\Profiles\1gam1pz2.default-1374913287830\prefs.js Usunięto : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?affID=110819&tt=120812_bandext_331[...] Plik : C:\Users\Wadysaw\AppData\Roaming\Mozilla\Firefox\Profiles\6jycy6q5.default-1374911139949\prefs.js [OK] Plik w porządku. Plik : C:\Users\Wadysaw\AppData\Roaming\Mozilla\Firefox\Profiles\dnxtgv7z.default-1374915078451\prefs.js Usunięto : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?affID=110819&tt=120812_bandext_331[...] Plik : C:\Users\Wadysaw\AppData\Roaming\Mozilla\Firefox\Profiles\yzq30tcc.default\prefs.js Usunięto : user_pref("CT1708250.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Usunięto : user_pref("CT1708250.AllowNonPrivacy", false); Usunięto : user_pref("CT1708250.CTID", "CT1708250"); Usunięto : user_pref("CT1708250.Chat.Meebo.ServerLastCheckTime", "Wed Nov 18 2009 16:49:43 GMT+0100"); Usunięto : user_pref("CT1708250.Chat.Meebo.ServerLastResponseTime", "Wed Nov 18 2009 16:49:44 GMT+0100"); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.2030dff2c5edb1", 43); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.30plusa87dca4f", 44); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.entertainmentc0ed09fb", 1); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.freelunchdesigncommunitychat88b4779c", 12); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.health3693b665", 0); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.musicj375cf270", 11); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.newsxu117b840d", 26); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.recreationab17d1f9", 0); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.spirituality39155c53", 0); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.sports522528d3", 22); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.technology8bb9fd5b", 0); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.teenagers833b8249", 65); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.travel8c2e48db", 4); Usunięto : user_pref("CT1708250.Chat.Meebo.rooms.videogames2fe066e0", 1); Usunięto : user_pref("CT1708250.Chat.ServerLastCheckTime", "Wed Nov 18 2009 16:49:39 GMT+0100"); Usunięto : user_pref("CT1708250.CommunitiesChangesLastCheckTime", "Wed Nov 18 2009 16:49:38 GMT+0100"); Usunięto : user_pref("CT1708250.CommunityChanged", false); Usunięto : user_pref("CT1708250.DialogsAlignMode", "LTR"); Usunięto : user_pref("CT1708250.DownloadDomainsCheckInterval", "168"); Usunięto : user_pref("CT1708250.DownloadDomainsListLastCheckTime", "Wed Nov 18 2009 16:49:38 GMT+0100"); Usunięto : user_pref("CT1708250.DownloadDomainsListLastServerUpdateTime", "1201073583"); Usunięto : user_pref("CT1708250.EMailNotifierPollDate", "Wed Nov 18 2009 16:49:40 GMT+0100"); Usunięto : user_pref("CT1708250.FirstTime", true); Usunięto : user_pref("CT1708250.FirstTimeFF3", true); Usunięto : user_pref("CT1708250.FixPageNotFoundErrors", true); Usunięto : user_pref("CT1708250.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Usunięto : user_pref("CT1708250.Initialize", true); Usunięto : user_pref("CT1708250.InitializeCommonPrefs", true); Usunięto : user_pref("CT1708250.InvalidateCache", false); Usunięto : user_pref("CT1708250.IsGrouping", false); Usunięto : user_pref("CT1708250.IsMulticommunity", true); Usunięto : user_pref("CT1708250.IsOpenThankYouPage", true); Usunięto : user_pref("CT1708250.IsOpenUninstallPage", true); Usunięto : user_pref("CT1708250.LanguagePackLastCheckTime", "Wed Nov 18 2009 16:49:40 GMT+0100"); Usunięto : user_pref("CT1708250.LanguagePackReloadIntervalMM", 1440); Usunięto : user_pref("CT1708250.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Usunięto : user_pref("CT1708250.LastLogin", "Wed Nov 18 2009 16:49:42 GMT+0100"); Usunięto : user_pref("CT1708250.Locale", "en-us"); Usunięto : user_pref("CT1708250.LoginCache", "4"); Usunięto : user_pref("CT1708250.MCDetectTooltipHeight", "83"); Usunięto : user_pref("CT1708250.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Usunięto : user_pref("CT1708250.MCDetectTooltipWidth", "295"); Usunięto : user_pref("CT1708250.RadioIsPodcast", false); Usunięto : user_pref("CT1708250.RadioLastCheckTime", "Wed Nov 18 2009 16:49:46 GMT+0100"); Usunięto : user_pref("CT1708250.RadioLastUpdateIPServer", "4"); Usunięto : user_pref("CT1708250.RadioLastUpdateServer", "128929877726170000"); Usunięto : user_pref("CT1708250.RadioMediaID", "10082384"); Usunięto : user_pref("CT1708250.RadioMediaType", "Media Player"); Usunięto : user_pref("CT1708250.RadioMenuSelectedID", "EBRadioMenu_CT170825010082384"); Usunięto : user_pref("CT1708250.RadioStationName", "Old%20School%20Rap"); Usunięto : user_pref("CT1708250.RadioStationURL", "hxxp://www.1club.fm/go/tunein.aspx?station=rapclassics"); Usunięto : user_pref("CT1708250.SHRINK_TOOLBAR", 1); Usunięto : user_pref("CT1708250.SearchFromAddressBarIsInit", true); Usunięto : user_pref("CT1708250.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT170[...] Usunięto : user_pref("CT1708250.Server", "hxxp://users.conduit.com"); Usunięto : user_pref("CT1708250.SettingsInvalidateCache", false); Usunięto : user_pref("CT1708250.SettingsLastUpdate", "1257928961"); Usunięto : user_pref("CT1708250.ThirdPartyComponentsInterval", "72"); Usunięto : user_pref("CT1708250.ThirdPartyComponentsLastCheck", "Wed Nov 18 2009 16:49:37 GMT+0100"); Usunięto : user_pref("CT1708250.ThirdPartyComponentsLastUpdate", "1253889595"); Usunięto : user_pref("CT1708250.ToolbarAlignMode", "SYSTEM"); Usunięto : user_pref("CT1708250.ToolbarName", "Free Lunch Design"); Usunięto : user_pref("CT1708250.UserID", "UN22318929632645446"); Usunięto : user_pref("CT1708250.VusualLastUpdateTime", "1253889595"); Usunięto : user_pref("CT1708250.WeatherNetwork", ""); Usunięto : user_pref("CT1708250.WeatherPollDate", "Wed Nov 18 2009 16:49:42 GMT+0100"); Usunięto : user_pref("CT1708250.WeatherUnit", "C"); Usunięto : user_pref("CT1708250.clientLogIsEnabled", false); Usunięto : user_pref("CT1708250.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...] Usunięto : user_pref("CT1708250.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...] Usunięto : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...] Usunięto : user_pref("CommunityToolbar.ToolbarsList", "CT1708250"); Usunięto : user_pref("CommunityToolbar.ToolbarsList2", "CT1708250"); Usunięto : user_pref("CommunityToolbar.alert.alertInfoInterval", 60); Usunięto : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Nov 18 2009 16:49:40 GMT+0100"); Usunięto : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Usunięto : user_pref("CommunityToolbar.alert.locale", "en"); Usunięto : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Usunięto : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Nov 18 2009 16:49:34 GMT+0100"); Usunięto : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1234796400"); Usunięto : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Usunięto : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Usunięto : user_pref("CommunityToolbar.alert.showTrayIcon", false); Usunięto : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Usunięto : user_pref("CommunityToolbar.alert.userId", "{9ddb2972-0aa7-40b8-8019-26016247e5d7}"); Usunięto : user_pref("avg.install.userHPSettings", "hxxp://search.babylon.com/?affID=110819&tt=120812_bandext_3[...] Usunięto : user_pref("avg.install.userSPSettings", "Search the web (Babylon)"); Usunięto : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=110819&tt=120812_bandext_3312_4&ba[...] Usunięto : user_pref("browser.search.defaultengine", "Web Search"); Usunięto : user_pref("browser.search.defaultenginename", "Web Search"); Usunięto : user_pref("browser.search.defaultthis.engineName", "Free Lunch Design Customized Web Search"); Usunięto : user_pref("browser.search.order.1", "Web Search"); Usunięto : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?affID=110819&tt=120812_bandext_331[...] Usunięto : user_pref("extensions.BabylonToolbar_i.newTab", true); Usunięto : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=110819&tt=12081[...] Usunięto : user_pref("keyword.URL", "hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q="); Usunięto : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "hxxp://search.conduit.com/ResultsEx[...] Usunięto : user_pref("sweetim.toolbar.urls.homepage", "hxxp://search.babylon.com/?affID=110819&tt=120812_bandex[...] -\\ Google Chrome v [Nie udało się określić wersji] Plik : C:\Users\Wadysaw\AppData\Local\Google\Chrome\User Data\Default\Preferences Usunięto [l.8] : homepage = "hxxp://searchab.com/?aff=7&uid=2152b60a-5cb3-11e2-9fc4-001f3ad603c2", Usunięto [l.225] : homepage = "hxxp://searchab.com/?aff=7&uid=2152b60a-5cb3-11e2-9fc4-001f3ad603c2", ************************* AdwCleaner[R1].txt - [18644 octets] - [27/07/2013 13:01:10] AdwCleaner[S1].txt - [17590 octets] - [27/07/2013 13:02:39] ########## EOF - C:\AdwCleaner[S1].txt - [17651 octets] ##########