# AdwCleaner v1.501 - Logfile created 03/15/2012 at 16:32:42 # Updated 04/03/2012 by Xplode # Operating system : Windows 7 Home Premium Service Pack 1 (64 bits) # User : Majka - MAJKA-KOMPUTER # Running from : C:\Users\Majka\Downloads\adwcleaner.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\Users\Majka\AppData\Roaming\Babylon Folder Deleted : C:\Users\Majka\AppData\Local\Babylon Folder Deleted : C:\Users\Majka\AppData\Local\RewardsArcade Folder Deleted : C:\Program Files (x86)\RewardsArcade Folder Deleted : C:\Users\Majka\AppData\Roaming\Mozilla\Firefox\Profiles\z5gkoio4.default\extensions\ffxtlbr@babylon.com File Deleted : C:\Program Files (x86)\Mozilla Firefox\.autoreg File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml ***** [H. Navipromo] ***** ***** [Registry] ***** Key Deleted : HKCU\Software\Cr_Installer Key Deleted : HKCU\Software\AppDataLow\Software\RewardsArcade Key Deleted : HKLM\SOFTWARE\Babylon Key Deleted : HKLM\SOFTWARE\Classes\RewardsArcade.BHO.1 Key Deleted : HKLM\SOFTWARE\Classes\RewardsArcade.FBApi Key Deleted : HKLM\SOFTWARE\Classes\RewardsArcade.FBApi.1 Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{597A9974-8CB0-4f41-B61F-ED065738A397} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{25514C64-8321-494e-BD3E-3DBAB3F8CEBA} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6427058B-217C-4C7F-A6CE-C7934C0BDCEB} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{60BE6B2E-F2F5-4404-AA1E-4381D4A6EEA2} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49dd-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{597A9974-8CB0-4F41-B61F-ED065738A397} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{597A9974-8CB0-4f41-B61F-ED065738A397} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4ccf-834A-2DDA4E29E39E} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{597A9974-8CB0-4F41-B61F-ED065738A397} ***** [Registry (x64)] ***** Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6427058B-217C-4C7F-A6CE-C7934C0BDCEB} ***** [Internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16421 Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?AF=100478&babsrc=HP_ss&mntrId=7c4e86d40000000000001c659d7c9053 --> hxxp://www.google.fr -\\ Mozilla Firefox v4.0 (pl) Profile : z5gkoio4.default File : C:\Users\Majka\AppData\Roaming\Mozilla\Firefox\Profiles\z5gkoio4.default\prefs.js C:\Users\Majka\AppData\Roaming\Mozilla\Firefox\Profiles\z5gkoio4.default\user.js ... Deleted ! Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com"); Deleted : user_pref("browser.search.defaultenginename", "Search the web (Babylon)"); Deleted : user_pref("browser.search.order.1", "Search the web (Babylon)"); Deleted : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?babsrc=HP_Prot"); Deleted : user_pref("extensions.BabylonToolbar.admin", false); Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar.babTrack", "affID=100478"); Deleted : user_pref("extensions.BabylonToolbar.bbDpng", 15); Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "en"); Deleted : user_pref("extensions.BabylonToolbar.dfltSrch", true); Deleted : user_pref("extensions.BabylonToolbar.hmpg", true); Deleted : user_pref("extensions.BabylonToolbar.id", "7c4e86d40000000000001c659d7c9053"); Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15312"); Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?AF=100478&babsrc=adbar[...] Deleted : user_pref("extensions.BabylonToolbar.lastDP", 15); Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1721:47:47"); Deleted : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "4.0"); Deleted : user_pref("extensions.BabylonToolbar.newTab", true); Deleted : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb"); Deleted : user_pref("extensions.BabylonToolbar.noFFXTlbr", false); Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar.propectorlck", 70385567); Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0); Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 1); Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar.ptch_0717", true); Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "tb9"); Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1721:47:47"); Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar_i.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=100478"); Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "7c4e86d40000000000001c659d7c9053"); Deleted : user_pref("extensions.BabylonToolbar_i.id", "7c4e86d40000000000001c659d7c9053"); Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15312"); Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar_i.newTab", false); Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1721:47:47"); Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); Deleted : user_pref("extensions.crossriderapp498.498.InstallationThankYouPage", true); Deleted : user_pref("extensions.crossriderapp498.498.InstallationTime", 1323031689); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.searchUserConifrmation", false); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setHomepage", false); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setNewTab", false); Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setSearch", false); Deleted : user_pref("extensions.crossriderapp498.498.active", true); Deleted : user_pref("extensions.crossriderapp498.498.addressbar", ""); Deleted : user_pref("extensions.crossriderapp498.498.affid", "0"); Deleted : user_pref("extensions.crossriderapp498.498.backgroundjs", "\n\n_GPL_PID = 18;\nfunction parse_url(st[...] Deleted : user_pref("extensions.crossriderapp498.498.backgroundver", 9); Deleted : user_pref("extensions.crossriderapp498.498.certdomaininstaller", ""); Deleted : user_pref("extensions.crossriderapp498.498.changeprevious", false); Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.value", "1323031689"); Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:0[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.value", "%7B%22sub_id%22%3A%22defa[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GM[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_aoi.value", "1323031689"); Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_geo.expiration", "Tue Mar 20 2012 21:08:45 GM[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_geo.value", "%7B%22geoplugin_city%22%3Anull%2[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 20[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.value", "%221%22"); Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 0[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.value", "%2212469%22"); Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00[...] Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.value", "%2213289%22"); Deleted : user_pref("extensions.crossriderapp498.498.description", "RewardsArcade is a platform that allows us[...] Deleted : user_pref("extensions.crossriderapp498.498.domain", "www.rewardsarcade.com"); Deleted : user_pref("extensions.crossriderapp498.498.emailsig", ""); Deleted : user_pref("extensions.crossriderapp498.498.enablesearch", false); Deleted : user_pref("extensions.crossriderapp498.498.exposesites", ""); Deleted : user_pref("extensions.crossriderapp498.498.fbremoteurl", ""); Deleted : user_pref("extensions.crossriderapp498.498.group", 0); Deleted : user_pref("extensions.crossriderapp498.498.homepage", ""); Deleted : user_pref("extensions.crossriderapp498.498.iframe", false); Deleted : user_pref("extensions.crossriderapp498.498.js", "\n\nvar _GPL_PID = 18;\n\n(function($) { \n\n $.[...] Deleted : user_pref("extensions.crossriderapp498.498.manifesturl", ""); Deleted : user_pref("extensions.crossriderapp498.498.name", "RewardsArcade"); Deleted : user_pref("extensions.crossriderapp498.498.newtab", ""); Deleted : user_pref("extensions.crossriderapp498.498.opensearch", ""); Deleted : user_pref("extensions.crossriderapp498.498.premium", true); Deleted : user_pref("extensions.crossriderapp498.498.publisher", "215 Apps"); Deleted : user_pref("extensions.crossriderapp498.498.searchstatus", 0); Deleted : user_pref("extensions.crossriderapp498.498.setnewtab", false); Deleted : user_pref("extensions.crossriderapp498.498.settingsurl", ""); Deleted : user_pref("extensions.crossriderapp498.498.thankyou", "hxxp://www.rewardsarcade.com/r.php?app_id=498[...] Deleted : user_pref("extensions.crossriderapp498.498.updateinterval", 360); Deleted : user_pref("extensions.crossriderapp498.498.ver", 80); Deleted : user_pref("extensions.crossriderapp498.apps", "498"); Deleted : user_pref("extensions.crossriderapp498.bic", "13450a56249a1655b8cdf9f60926c7fb"); Deleted : user_pref("extensions.crossriderapp498.cid", 498); Deleted : user_pref("extensions.crossriderapp498.firstrun", false); Deleted : user_pref("extensions.crossriderapp498.hadappinstalled", true); Deleted : user_pref("extensions.crossriderapp498.installationdate", 1324202943); Deleted : user_pref("extensions.crossriderapp498.jsver", 3); Deleted : user_pref("extensions.crossriderapp498.lastcheck", 22197017); Deleted : user_pref("extensions.crossriderapp498.lastcheckitem", 22197092); Deleted : user_pref("extensions.crossriderapp498.misc.lastBgWorkerTimer", "1331825563567"); Deleted : user_pref("extensions.crossriderapp498.misc.lastDomWorkerTimer", "1331825563555"); Deleted : user_pref("extensions.enabledAddons", "ffxtlbr@babylon.com:1.2.0,crossriderapp498@crossrider.com:0.7[...] Deleted : user_pref("keyword.URL", "hxxp://search.babylon.com/?AF=100478&babsrc=adbartrp&mntrId=7c4e86d4000000[...] -\\ Google Chrome v17.0.963.79 File : C:\Users\Majka\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted : "icon_url": "hxxp://www.babylon.com/favicon.ico", Deleted : "keyword": "babylon.com", Deleted : "name": "Search the web (Babylon)", Deleted : "search_url": "hxxp://search.babylon.com/?q={searchTerms}&AF=100478&babsrc=SP_ss&mntrId=7c4e86[...] ************************* AdwCleaner[S1].txt - [13238 octets] - [15/03/2012 16:32:42] ########## EOF - C:\AdwCleaner[S1].txt - [13367 octets] ##########