# AdwCleaner v4.111 - Logfile created 27/02/2015 at 10:30:38 # Updated 18/02/2015 by Xplode # Database : 2015-02-18.3 [Local] # Operating system : Windows 7 Home Premium Service Pack 1 (x64) # Username : Pio - PIO-KOMPUTER # Running from : C:\Users\Pio\Downloads\adwcleaner_4.111.exe # Option : Scan ***** [ Services ] ***** Service Found : iSafeKrnl Service Found : iSafeKrnlBoot Service Found : iSafeKrnlKit Service Found : iSafeKrnlR3 Service Found : iSafeNetFilter Service Found : iSafeService Service Found : iSafeKrnlMon ***** [ Files / Folders ] ***** File Found : C:\Users\Pio\AppData\Roaming\Mozilla\Firefox\Profiles\f90mt9ml.default\searchplugins\delta.xml File Found : C:\Windows\System32\Drivers\iSafeNetFilter.sys Folder Found : C:\Program Files (x86)\Elex-tech Folder Found : C:\Users\Pio\AppData\Roaming\Elex-tech ***** [ Scheduled tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428A-92C9-0CFC28B9D1BF} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF} Key Found : HKLM\SOFTWARE\Elex-tech Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe ***** [ Web browsers ] ***** -\\ Internet Explorer v11.0.9600.17631 Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.delta-homes.com/?type=hp&ts=1418887371&from=wpm12173&uid=ST9750420AS_5WS4KMJ4XXXX5WS4KMJ4 Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.delta-homes.com/?type=hp&ts=1418887371&from=wpm12173&uid=ST9750420AS_5WS4KMJ4XXXX5WS4KMJ4 Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.delta-homes.com/?type=hp&ts=1418887371&from=wpm12173&uid=ST9750420AS_5WS4KMJ4XXXX5WS4KMJ4 Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.delta-homes.com/?type=hp&ts=1418887371&from=wpm12173&uid=ST9750420AS_5WS4KMJ4XXXX5WS4KMJ4 Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.delta-homes.com/?type=hp&ts=1418887371&from=wpm12173&uid=ST9750420AS_5WS4KMJ4XXXX5WS4KMJ4 -\\ Mozilla Firefox v [f90mt9ml.default] - Line Found : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3331322&octid=EB_ORIGINAL_CTID&ISID=MDBF20F81-9441-4CE3-801E-0D2812DE1DEA&SearchSource=69&CUI=&SSPV=&Lay=1&UM=8&UP=SP06FD1741-EA99-4EA[...] [f90mt9ml.default] - Line Found : user_pref("browser.search.selectedEngine", "Trovi search"); [f90mt9ml.default] - Line Found : user_pref("extensions.EaEm8luaPeSXmImk.url", "hxxp://veterants.org/sync2/?q=hfZ9ofqJCNmTtNbPhd96qHCMg708BNmGWj8njchGheDUojw9rjsEpdw7rdw9rihIC7n0rjnFrTa5rjgErTn7tNhVCT94tMVKhd9Grjn6qdYHqTn6tNqHhd98pjUH[...] [f90mt9ml.default] - Line Found : user_pref("extensions.ORJ-SPE.domain", "\"www.search.ask.com\""); [f90mt9ml.default] - Line Found : user_pref("extensions.ORJ-SPE.hpr_ff", "\"hxxp://www.search.ask.com/?tpid=ORJ-SPE&o=APN11409&pf=V7&trgb=FF&p2=%5EBBH%5EOSJ000%5EYY%5EPL&gct=hp&apn_ptnrs=BBH&apn_dtid=%5EOSJ000%5EYY%5EPL&apn_dbr=ff_34.[...] [f90mt9ml.default] - Line Found : user_pref("extensions.ORJ-SPE.newTabSearchURL", "\"hxxp://www.search.ask.com/web?o=APN11409&p2=%5EBBH%5EOSJ000%5EYY%5EPL&tpid=ORJ-SPE&gct=tab&apn_uid=F78A04FF-554A-48EF-8EC8-235C33B635FE&apn_ptnrs=BBH[...] [f90mt9ml.default] - Line Found : user_pref("extensions.ORJ-SPE.searchURL", "\"hxxp://www.search.ask.com/web?o=APN11409&p2=%5EBBH%5EOSJ000%5EYY%5EPL&tpid=ORJ-SPE&gct=bar&apn_uid=F78A04FF-554A-48EF-8EC8-235C33B635FE&apn_ptnrs=BBH&apn_d[...] [f90mt9ml.default] - Line Found : user_pref("extensions.a172cfb0d00604ca2807d96193776c90fc73dda8c44c58a81f097dcom65759.65759.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.co.uk%22%2C%[...] [f90mt9ml.default] - Line Found : user_pref("extensions.a172cfb0d00604ca2807d96193776c90fc73dda8c44c58a81f097dcom65759.65759.internaldb.__ICM_LITE__fifty_test_rules.value", "%7B%22DE%22%3A%7B%22ALL%22%3A%5B%22anastasiadate.com%22%2C%2[...] [f90mt9ml.default] - Line Found : user_pref("extensions.a172cfb0d00604ca2807d96193776c90fc73dda8c44c58a81f097dcom65759.65759.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22[...] [f90mt9ml.default] - Line Found : user_pref("extensions.aROUAILDE73397174UXGZI17268980com65123.65123.internaldb.Resources_meta.value", "%7B%22handlebars.js%22%3A%7B%22id%22%3A838651%2C%22ver%22%3A1%2C%22status%22%3A1%2C%22name%22%3A%2[...] [f90mt9ml.default] - Line Found : user_pref("extensions.aROUAILDE73397174UXGZI17268980com65123.65123.internaldb.Resources_resource_838660.value", "%22function%20startAskCom%28e%2Ct%2Cr%29%7Bfunction%20a%28e%29%7Bvar%20t%3Dnew%20RegExp[...] [f90mt9ml.default] - Line Found : user_pref("extensions.aROUAILDE73397174UXGZI17268980com65123.65123.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22[...] [f90mt9ml.default] - Line Found : user_pref("extensions.ad9676068985d4d81bb390a7be93ab3c8e144f694a0509d5com65743.65743.internaldb.Resources_meta.value", "%7B%2219x19.png%22%3A%7B%22id%22%3A853130%2C%22ver%22%3A1%2C%22status%22%3A1%2C%[...] [f90mt9ml.default] - Line Found : user_pref("extensions.ad9676068985d4d81bb390a7be93ab3c8e144f694a0509d5com65743.65743.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.co.uk%22%2C%22amaz[...] [f90mt9ml.default] - Line Found : user_pref("extensions.ad9676068985d4d81bb390a7be93ab3c8e144f694a0509d5com65743.65743.internaldb.__ICM_LITE__fifty_test_rules.value", "%7B%22DE%22%3A%7B%22ALL%22%3A%5B%22anastasiadate.com%22%2C%22optio[...] [f90mt9ml.default] - Line Found : user_pref("extensions.ad9676068985d4d81bb390a7be93ab3c8e144f694a0509d5com65743.65743.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D[...] [f90mt9ml.default] - Line Found : user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.co.uk%22%2C%22amazon.com%22%2C%22anthropologi[...] [f90mt9ml.default] - Line Found : user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.__ICM_LITE__fifty_test_rules.value", "%7B%22DE%22%3A%7B%22ALL%22%3A%5B%22anastasiadate.com%22%2C%22optionweb.com%22%2C%22pctools.co[...] [f90mt9ml.default] - Line Found : user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%3A%7B%22[...] [f90mt9ml.default] - Line Found : user_pref("extensions.crossrider.bic", "149b43bd06d7fce25678a2cec83cab5b"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.admin", false); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.aflt", "babsst"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.autoRvrt", "false"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.dfltLng", "en"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.excTlbr", false); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.ffxUnstlRst", true); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.id", "f240738b000000000000685d436c4289"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.instlDay", "15901"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.instlRef", "sst"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.newTab", false); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.prdct", "delta"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.prtnrId", "delta"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.rvrt", "false"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.smplGrp", "none"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.tlbrId", "base"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.tlbrSrchUrl", ""); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.vrsn", "1.8.21.5"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.vrsnTs", "1.8.21.57:41:09"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta.vrsni", "1.8.21.5"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta_i.babExt", ""); [f90mt9ml.default] - Line Found : user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=4944"); [f90mt9ml.default] - Line Found : user_pref("extensions.delta_i.srcExt", "ss"); [f90mt9ml.default] - Line Found : user_pref("extensions.quick_start.enable_search1", false); [f90mt9ml.default] - Line Found : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); [f90mt9ml.default] - Line Found : user_pref("extensions.xpiState", "{\"app-profile\":{\"IplextoALL@ALLPlayer.org\":{\"d\":\"C:\\\\Users\\\\Pio\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\f90mt9ml.default\\\\extensions\\[...] -\\ Google Chrome v15.0.874.120 -\\ Opera v27.0.1689.76 ************************* AdwCleaner[R0].txt - [45803 bytes] - [27/02/2015 09:24:19] AdwCleaner[R1].txt - [10714 bytes] - [27/02/2015 10:30:39] AdwCleaner[S0].txt - [43887 bytes] - [27/02/2015 09:26:56] ########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [10834 bytes] ##########