# AdwCleaner v4.207 - Logfile created 30/06/2015 at 10:25:11 # Updated 21/06/2015 by Xplode # Database : 2015-06-29.1 [Server] # Operating system : Microsoft Windows XP Dodatek Service Pack 3 (x86) # Username : PRZOD1 - PRZOD # Running from : C:\Documents and Settings\PRZOD1\Moje dokumenty\Pobrane\AdwCleaner.exe # Option : Scan ***** [ Services ] ***** ***** [ Files / Folders ] ***** File Found : C:\Documents and Settings\PRZOD1\Dane aplikacji\GDIPFONTCACHEV1.DAT File Found : C:\Documents and Settings\PRZOD1\Dane aplikacji\Mozilla\Firefox\Profiles\kwlm5fyb.default\invalidprefs.js File Found : C:\Documents and Settings\PRZOD1\Dane aplikacji\Mozilla\Firefox\Profiles\kwlm5fyb.default\searchplugins\Babylon.xml File Found : C:\Documents and Settings\PRZOD1\Dane aplikacji\Mozilla\Firefox\Profiles\kwlm5fyb.default\searchplugins\BrowserDefender.xml File Found : C:\Documents and Settings\PRZOD1\Dane aplikacji\Mozilla\Firefox\Profiles\kwlm5fyb.default\searchplugins\delta.xml File Found : C:\Documents and Settings\PRZOD1\Dane aplikacji\Mozilla\Firefox\Profiles\kwlm5fyb.default\user.js File Found : C:\Documents and Settings\PRZOD1\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT Folder Found : C:\Documents and Settings\PRZOD1\Dane aplikacji\Mozilla\Firefox\Profiles\kwlm5fyb.default\Extensions\{da30eff8-ccc6-4162-a20d-67402a26a215} Folder Found : C:\Program Files\GreenTree Applications Folder Found : C:\Program Files\MyPC Backup ***** [ Scheduled tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Data Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - Key Found : HKCU\Software\Conduit Key Found : HKCU\Software\DataMngr_Toolbar Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\MyPC Backup Key Found : HKLM\SOFTWARE\a6dd8bbd3aec10 Key Found : HKLM\SOFTWARE\Description Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup ***** [ Web browsers ] ***** -\\ Internet Explorer v8.0.6001.18702 -\\ Mozilla Firefox v38.0.5 (x86 pl) [kwlm5fyb.default] - Line Found : user_pref("CT1055551.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}"); [kwlm5fyb.default] - Line Found : user_pref("CT1055551.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1055551&SearchSource=2&CUI=UN96373759278249835&q="); [kwlm5fyb.default] - Line Found : user_pref("CT1055551.hxxp___cmg1_conduit_widgets_com_pitsi.STATE.enc", "T1BFTg=="); [kwlm5fyb.default] - Line Found : user_pref("CT1055551.installType", "conduitnsisintegration"); [kwlm5fyb.default] - Line Found : user_pref("CT1055551.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_SEARCH_TERM\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://BestSecurityTips.CommunityToolbars.com[...] [kwlm5fyb.default] - Line Found : user_pref("CT1055551.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1055551&SearchSource=2&CUI=UN96373759278249835&UM=&q="); [kwlm5fyb.default] - Line Found : user_pref("CT1055551.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://BestSecurityTips.CommunityToolbars.com//xpi\"}"); [kwlm5fyb.default] - Line Found : user_pref("CT1055551.smartbar.CTID", "CT1055551"); [kwlm5fyb.default] - Line Found : user_pref("CT1055551.smartbar.Uninstall", "0"); [kwlm5fyb.default] - Line Found : user_pref("CT1055551.smartbar.homepage", true); [kwlm5fyb.default] - Line Found : user_pref("CT1055551.smartbar.isHidden", true); [kwlm5fyb.default] - Line Found : user_pref("CT1055551.smartbar.toolbarName", "Best Security Tips "); [kwlm5fyb.default] - Line Found : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.qasite.com/?CUI=UN96373759278249835&ctid=CT1055551&SearchSource=13"); [kwlm5fyb.default] - Line Found : user_pref("Smartbar.ConduitSearchEngineList", ""); [kwlm5fyb.default] - Line Found : user_pref("Smartbar.ConduitSearchUrlList", ""); [kwlm5fyb.default] - Line Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", ""); [kwlm5fyb.default] - Line Found : user_pref("Smartbar.TBHomepagesList", "hxxp://search.qasite.com/?CUI=UN96373759278249835&ctid=CT1055551&SearchSource=13"); [kwlm5fyb.default] - Line Found : user_pref("Smartbar.TBSearchEngineList", ""); [kwlm5fyb.default] - Line Found : user_pref("Smartbar.TBSearchUrlList", ""); [kwlm5fyb.default] - Line Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT1055551"); [kwlm5fyb.default] - Line Found : user_pref("browser.search.defaultthis.engineName", "Best Security Tips Customized Web Search"); [kwlm5fyb.default] - Line Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1055551&SearchSource=3&q={searchTerms}&CUI=UN96373759278249835"); [kwlm5fyb.default] - Line Found : user_pref("extensions.antigameorigin@antigame.de.AGO_PL_UNI120_106390_Units_Ship", "{\"version\":1,\"33665661\":{\"202\":67,\"203\":170,\"204\":200,\"205\":40,\"206\":100,\"207\":100,\"209\":64,\"210\[...] [kwlm5fyb.default] - Line Found : user_pref("extensions.xpiState", "{\"app-profile\":{\"antigameorigin@antigame.de\":{\"d\":\"C:\\\\Documents and Settings\\\\PRZOD1\\\\Dane aplikacji\\\\Mozilla\\\\Firefox\\\\Profiles\\\\kwlm5fyb.defau[...] [kwlm5fyb.default] - Line Found : user_pref("keyword.URL", "hxxp://trovi.com/ResultsExt.aspx?ctid=CT1055551&SearchSource=2&CUI=UN96373759278249835&UM=&q="); [kwlm5fyb.default] - Line Found : user_pref("plugin.state.npconduitfirefoxplugin", 2); [kwlm5fyb.default] - Line Found : user_pref("smartBar.searchInNewTabOwner", "CT1055551"); [kwlm5fyb.default] - Line Found : user_pref("smartbar.addressBarOwnerCTID", "CT1055551"); [kwlm5fyb.default] - Line Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT1055551&SearchSource=13&CUI=UN96373759278249835,hxxp://search.qasite.com/?ctid=CT1055551&SearchSource=13,hxxp://search.qasi[...] [kwlm5fyb.default] - Line Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1055551&SearchSource=2&CUI=UN96373759278249835&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1[...] [kwlm5fyb.default] - Line Found : user_pref("smartbar.homePageOwnerCTID", "CT1055551"); [kwlm5fyb.default] - Line Found : user_pref("smartbar.homepageList", "hxxp://search.conduit.com/?ctid=CT1055551&SearchSource=13&CUI=UN96373759278249835,hxxp://search.qasite.com/?ctid=CT1055551&SearchSource=13,hxxp://search.qasite.com/[...] [kwlm5fyb.default] - Line Found : user_pref("smartbar.machineId", "SNIRMEENO62CTF6SPSGC0/GLWVI+2DNDCMMHWE8Z63Y+RL6/MG8SYL7JLMCSBHMWYLX6HKFXKFGUSVCZ3MW59W"); [kwlm5fyb.default] - Line Found : user_pref("smartbar.originalHomepage", "www.google.pl"); [kwlm5fyb.default] - Line Found : user_pref("smartbar.originalSearchAddressUrl", ""); [kwlm5fyb.default] - Line Found : user_pref("smartbar.originalSearchEngine", ""); [kwlm5fyb.default] - Line Found : user_pref("smartbar.searchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1055551&SearchSource=2&CUI=UN96373759278249835&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1055551&[...] -\\ Opera v18.0.1284.68 ************************* AdwCleaner[R0].txt - [7541 bytes] - [30/06/2015 10:25:11] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [7600 bytes] ##########