# AdwCleaner v3.001 - Report created 26/08/2013 at 22:01:00 # Updated 24/08/2013 by Xplode # Operating System : Windows 7 Starter (32 bits) # Username : Soesje - SOESJE-TOSH # Running from : C:\Users\Soesje\Downloads\AdwCleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\Tarma Installer Folder Deleted : C:\Program Files\SweetIM Folder Deleted : C:\Program Files\sweetpacks bundle uninstaller Folder Deleted : C:\Users\Soesje\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh Folder Deleted : C:\Users\Soesje\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj File Deleted : C:\Users\Soesje\AppData\Roaming\Mozilla\Firefox\Profiles\x4nvsf2a.default\user.js File Deleted : C:\Users\Soesje\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bbjciahceamgodcoidkjpchnokgfpphh_0.localstorage File Deleted : C:\Users\Soesje\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cjpglkicenollcignonpgiafdgfeehoj_0.localstorage ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh Key Deleted : HKCU\Software\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE Key Deleted : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc Key Deleted : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc.1 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsSetup_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsSetup_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Funmoods Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_dla_firefox[1]_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_dla_firefox[1]_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_dla_starter-background-changer_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_dla_starter-background-changer_RASMANCS Key Deleted : HKLM\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A} Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\Softonic Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\Software\InstallCore Key Deleted : HKLM\Software\Tarma Installer ***** [ Browsers ] ***** -\\ Internet Explorer v8.0.7600.17256 Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] -\\ Mozilla Firefox v22.0 (pl) [ File : C:\Users\Soesje\AppData\Roaming\Mozilla\Firefox\Profiles\x4nvsf2a.default\prefs.js ] Line Deleted : user_pref("extensions.funmoods.aflt", "iron2"); Line Deleted : user_pref("extensions.funmoods.autoRvrt", false); Line Deleted : user_pref("extensions.funmoods.cntry", "PL"); Line Deleted : user_pref("extensions.funmoods.cv", "cv5"); Line Deleted : user_pref("extensions.funmoods.dfltLng", ""); Line Deleted : user_pref("extensions.funmoods.dfltSrch", true); Line Deleted : user_pref("extensions.funmoods.dnsErr", true); Line Deleted : user_pref("extensions.funmoods.envrmnt", "production"); Line Deleted : user_pref("extensions.funmoods.excTlbr", false); Line Deleted : user_pref("extensions.funmoods.hdrMd5", "C35E9F9E1BF2B35B8F8E835BB7DCE1F9"); Line Deleted : user_pref("extensions.funmoods.hmpg", true); Line Deleted : user_pref("extensions.funmoods.hmpgUrl", "hxxp://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzuyCzz0AtA0CyEtDyEtDyD0B0ByBtC0CtBtN0D0Tzu0CtAyEyDtN1L2XzutBtFtBtFtCtFyEtDyB&cr=1916509536"); Line Deleted : user_pref("extensions.funmoods.id", "68A3C40405BB71C2"); Line Deleted : user_pref("extensions.funmoods.instlDay", "15685"); Line Deleted : user_pref("extensions.funmoods.instlRef", "iron2"); Line Deleted : user_pref("extensions.funmoods.isdcmntcmplt", true); Line Deleted : user_pref("extensions.funmoods.lastVrsnTs", "1.5.23.220:1:29"); Line Deleted : user_pref("extensions.funmoods.mntrvrsn", "1.3.0"); Line Deleted : user_pref("extensions.funmoods.newTab", true); Line Deleted : user_pref("extensions.funmoods.newTabUrl", "hxxp://searchfunmoods.com/?f=2&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzuyCzz0AtA0CyEtDyEtDyD0B0ByBtC0CtBtN0D0Tzu0CtAyEyDtN1L2XzutBtFtBtFtCtFyEtDyB&cr=1916509536"[...] Line Deleted : user_pref("extensions.funmoods.prdct", "funmoods"); Line Deleted : user_pref("extensions.funmoods.prtnrId", "funmoods"); Line Deleted : user_pref("extensions.funmoods.sg", "none"); Line Deleted : user_pref("extensions.funmoods.smplGrp", "none"); Line Deleted : user_pref("extensions.funmoods.srchPrvdr", "Funmoods"); Line Deleted : user_pref("extensions.funmoods.tlbrId", "base"); Line Deleted : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://searchfunmoods.com/?f=3&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzuyCzz0AtA0CyEtDyEtDyD0B0ByBtC0CtBtN0D0Tzu0CtAyEyDtN1L2XzutBtFtBtFtCtFyEtDyB&cr=191650953[...] Line Deleted : user_pref("extensions.funmoods.vrsn", "1.5.23.22"); Line Deleted : user_pref("extensions.funmoods.vrsnTs", "1.5.23.220:1:29"); Line Deleted : user_pref("extensions.funmoods.vrsni", "1.5.23.22"); Line Deleted : user_pref("extensions.funmoods_i.newTab", true); Line Deleted : user_pref("extensions.funmoods_i.smplGrp", "none"); Line Deleted : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.220:1:29"); -\\ Google Chrome v [ File : C:\Users\Soesje\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [7252 octets] - [26/08/2013 21:55:46] AdwCleaner[S0].txt - [7182 octets] - [26/08/2013 22:01:00] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7242 octets] ##########