# AdwCleaner v4.200 - Logfile created 06/04/2015 at 00:39:12 # Updated 29/03/2015 by Xplode # Database : 2015-03-29.1 [Server] # Operating system : Windows 8.1 (x64) # Username : Andrew - KOMP-ANDRZEJA # Running from : C:\Users\Andrew\Downloads\adwcleaner_4.200.exe # Option : Scan ***** [ Services ] ***** ***** [ Files / Folders ] ***** File Found : C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\558swsb8.default\user.js File Found : C:\WINDOWS\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb File Found : C:\WINDOWS\patsearch.bin File Found : C:\WINDOWS\System32\log\iSafeKrnlCall.log File Found : C:\WINDOWS\System32\roboot64.exe File Found : C:\WINDOWS\SysWOW64\VCL.dll Folder Found : C:\Program Files (x86)\predm Folder Found : C:\Program Files (x86)\SmartTweak Folder Found : C:\ProgramData\9190cf9cbcb8883d Folder Found : C:\Users\Andrew\AppData\Local\PackageAware Folder Found : C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player Folder Found : C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software Folder Found : C:\Users\Andrew\AppData\Roaming\Solvusoft ***** [ Scheduled tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Data Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - Key Found : HKCU\Software\Google\Chrome\Extensions\cflheckfmhopnialghigdlggahiomebp Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh Key Found : HKLM\SOFTWARE\Uniblue ***** [ Web browsers ] ***** -\\ Internet Explorer v11.0.9600.17416 -\\ Mozilla Firefox v34.0 (x86 pl) [558swsb8.default] - Line Found : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html"); [558swsb8.default] - Line Found : user_pref("extensions.enabledAddons", "battlefieldplay4free%40ea.com:1.0.96.0,fftoolbar2014%40etech.com:1.0.0.1025,istart_ffnt%40gmail.com:5.3.7,searchengine%40gmail.com:1.0.0.1027,%7B972ce4c6-7e08-44[...] [558swsb8.default] - Line Found : user_pref("extensions.quick_start.enable_search1", false); [558swsb8.default] - Line Found : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); -\\ Google Chrome v41.0.2272.118 [C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : booedmolknjekdopkepjjeckmjkdpfgl [C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : bopakagnckmlgajfccecajhnimjiiedh [C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : cekcjpgehmohobmdiikfnopibipmgnml [C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : dchmpbaclbiioedakpcldenooikekokm [C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : flpcjncodpafbgdpnkljologafpionhb [C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : mpcknfcdcgpffjddjeceioobdelceffo [C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : cflheckfmhopnialghigdlggahiomebp [C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Default_Search_Provider_Data] : {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}{google:contextualSearchVersion}ie={inputEncoding}", "usage_count": 0 } }, "extensions": { "settings": { "ahfgeienlihckogmohjhadlkjgocpleb": { "active_bit": true, "active_permissions": { "api": [ "management", "system.display", "system.storage", "webstorePrivate", "system.cpu", "system.memory", "system.network" ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "n", "creation_flags": 1, "events": [ ], "from_bookmark": false, "from_webstore": false, "install_time": "13026422558764494", "location": 5, "manifest": { "app": { "launch": { "web_url": "hxxps://chrome.google.com/webstore" }, "urls": [ "hxxps://chrome.google.com/webstore" ] }, "description": "Chrome Web Store", "icons": { "128": "webstore_icon_128.png", "16": "webstore_icon_16.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB", "name": "Sklep", "permissions": [ "webstorePrivate", "management" ], "version": "0.2" }, "page_ordinal": "n", "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\30.0.1599.101\\resources\\web_store", "was_installed_by_default": false }, "aknpkdffaafgjchaibgeefbgmgeghloj": { "active_permissions": { "api": [ "unlimitedStorage" ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "o", "commands": { }, "content_settings": [ ], "creation_flags": 9, "events": [ ], "from_bookmark": false, "from_webstore": true, "granted_permissions": { "api": [ "unlimitedStorage" ] }, "incognito_content_settings": [ ], "incognito_preferences": { }, "install_time": "13069125554766667", "lastpingday": "13072690799700080", "location": 1, "manifest": { "app": { "launch": { "container": "tab", "urls": [ "hxxp://chrome.angrybirds.com" ], "web_url": "hxxp://chrome.angrybirds.com" } }, "current_locale": "pl", "default_locale": "en", "description": "Ptaszyska! Proce! Rozwa\u0142ka! Pi\u00F3ra! Zabawa!", "icons": { "128": "128.png", "16": "16.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6PeQTq1pwDNiqFlcp7UsUUUJQBsjUBcSiboI/+WSmsE93IF5xyd3e6erYAPW7DRBdrCJVDqPW0kv0APgTaCGOhVTBjvYO/1IbBBX86j+1pE58f4slTybPxklVQw04gXEkxe2fLBFriVf1bH20b+X9tagRS+6oqz2glinagc7FVwIDAQAB", "manifest_version": 2, "name": "Angry Birds", "offline_enabled": true, "permissions": [ "unlimitedStorage" ], "update_url": "hxxps://clients2.google.com/service/update2/crx", "version": "1.5.0.8" }, "page_ordinal": "n", "path": "aknpkdffaafgjchaibgeefbgmgeghloj\\1.5.0.8_0", "preferences": { }, "regular_only_preferences": { }, "state": 1, "was_installed_by_default": false, "was_installed_by_oem": false }, "apdfllckaahabafndbhieahigkjlhalf": { "ack_external": true, "active_permissions": { "api": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "x", "commands": { }, "content_settings": [ ], "creation_flags": 137, "events": [ ], "from_bookmark": false, "from_webstore": true, "granted_permissions": { "api": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ], "manifest_permissions": [ ] }, "has_declarative_rules": false, "incognito_content_settings": [ ], "incognito_preferences": { }, "install_time": "13069125550133215", "lastpingday": "13072690799700080", "location": 1, "manifest": { "app": { "launch": { "web_url": "hxxps://drive.google.com/?usp=chrome_app" }, "urls": [ "hxxp://docs.google.com/", "hxxp://drive.google.com/", "hxxps://docs.google.com/", "hxxps://drive.google.com/" ] }, "background": { "allow_js_access": false }, "current_locale": "pl", "default_locale": "en_US", "description": "Dysk Google: zapisuj, udost\u0119pniaj i przechowuj wszystko w jednym miejscu.", "icons": { "128": "128.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIl5KlKwL2TSkntkpY3naLLz5jsN0YwjhZyObcTOK6Nda4Ie21KRqZau9lx5SHcLh7pE2/S9OiArb+na2dn7YK5EvH+aRXS1ec3uxVlBhqLdnleVgwgwlg5fH95I52IeHcoeK6pR4hW/Nv39GNlI/Uqk6O6GBCCsAxYrdxww9BiQIDAQAB", "manifest_version": 2, "name": "Dysk Google", "offline_enabled": true, "options_page": "hxxps://drive.google.com/settings", "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ], "update_url": "hxxps://clients2.google.com/service/update2/crx", "version": "6.4" }, "page_ordinal": "n", "path": "apdfllckaahabafndbhieahigkjlhalf\\6.4_0", "preferences": { }, "regular_only_preferences": { }, "state": 1, "was_installed_by_default": true, "was_installed_by_oem": false }, "bepbmhgboaologfdajaanbcjmnhjmhfn": { "disable_reasons": 1, "state": 0 }, "blpcfgokakmgnkcojhhkbfbldkacnbeo": { "ack_external": true }, "booedmolknjekdopkepjjeckmjkdpfgl": { "active_permissions": { "api": [ "tabs", "webNavigation", "webRequest", "webRequestBlocking" ], "explicit_host": [ "chrome://newtab/*", "chrome://settings-frame/*", "hxxp://*/*", "hxxps://*/*" ], "manifest_permissions": [ ], "scriptable_host": [ "chrome://settings-frame/*" ] }, "creation_flags": 1, "from_bookmark": false, "from_webstore": false, "initial_keybindings_set": true, "install_time": "13034290943406263", "location": 5, "manifest": { "background": { "persistent": true, "scripts": [ "bk.js" ] }, "content_scripts": [ { "js": [ "cs.js" ], "matches": [ "chrome://settings-frame/*" ] } ], "content_security_policy": "default-src 'self'; script-src chrome://resources 'self' chrome://settings-frame 'unsafe-eval'; frame-src 'self' chrome://settings-frame; style-src 'self' 'unsafe-inline';object-src 'self';", "description": "Extutil", "incognito": "spanning", "key": "MIAfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+ea9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB", "manifest_version": 2, "name": "Extutil", "permissions": [ "chrome://newtab/", "tabs", "webNavigation", "hxxp://*/*", "hxxps://*/*", "chrome://settings-frame/" ], "version": "0.1" }, "path": "C:\\Users\\Andrew\\AppData\\Local\\Temp\\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B", "state": 0, "was_installed_by_default": false }, "bopakagnckmlgajfccecajhnimjiiedh": { "ack_external": true, "active_permissions": { "api": [ ], "explicit_host": [ "*://*.adobe.com/*" ], "manifest_permissions": [ ], "scriptable_host": [ "*://*.adobe.com/*" ] }, "content_settings": [ ], "creation_flags": 9, "disable_reasons": 1, "events": [ ], "from_bookmark": false, "from_webstore": true, "incognito_content_settings": [ ], "incognito_preferences": { }, "initial_keybindings_set": true, "install_time": "13041801061721541", "install_warning_on_enable": false, "lastpingday": "13072517973304052", "location": 6, "manifest": { "content_scripts": [ { "js": [ "insert_node.js" ], "matches": [ "*://*.adobe.com/*" ], "run_at": "document_end" } ], "description": "This extension lets Adobe installers to detect McAfee Security Scan+ software on your PC.", "icons": { "128": "128.png" }, "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu828SpvpJLVwfcoIHTuHwDp4t4N1vW+vdd+jiQtz/rJrS4FDssqsXIW1he62DjTpXI58O3Dj/avUUxf+gp1h3KRE86uVOqT1Tv04jneh5g2ACWoCdJGWMzDX/OwWt8Sge9MwfC/WEVVyQtoFxxPgLMDbf0rLvxFvM85UCiQhm8E7xsohA+a2RcmblFbA36wLpHCNeohCgbxoknmILJgunMaiwmhnL+sMnHL+jvecS79IvIYDKEtqmglqqq9OhRghVgcCPbjQdpvPq4FCE43kCZOztezKSLod8inFiFZ/mKasHTNaku1O8STN/nFaody72zNK9ZVEIqWqx9GW51pgwwIDAQAB", "manifest_version": 2, "name": "McAfee Security Scan+", "permissions": [ "*://*.adobe.com/*" ], "short_name": "MSS+ Extension", "update_url": "hxxps://clients2.google.com/service/update2/crx", "version": "3.8.141.12" }, "path": "bopakagnckmlgajfccecajhnimjiiedh\\3.8.141.12_0", "preferences": { }, "regular_only_preferences": { }, "state": 2, "was_installed_by_default": false }, "cekcjpgehmohobmdiikfnopibipmgnml": { "install_time": "13027258331650818", "location": 4, "newAllowFileAccess": true, "path": "C:\\Users\\Andrew\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\cekcjpgehmohobmdiikfnopibipmgnml\\1.3_0", "state": 1, "was_installed_by_default": false }, "cflheckfmhopnialghigdlggahiomebp": { "ack_external": true, "active_permissions": { "api": [ "bookmarks", "contextMenus", "cookies", "geolocation", "history", "idle", "management", "notifications", "plugin", "storage", "tabs", "unlimitedStorage", "webNavigation", "webRequest", "webRequestBlocking", "webRequestInternal" ], "explicit_host": [ "chrome://favicon/*", "hxxp://*/*", "hxxps://*/*" ], "scriptable_host": [ "hxxp://*/*", "hxxps://*/*" ] }, "creation_flags": 1, "disable_reasons": 1, "from_bookmark": false, "from_webstore": false, "has_declarative_rules": false, "initial_keybindings_set": true, "install_time": "13026505900111007", "location": 3, "manifest": { "background": { "page": "js/chromeBackStage.html" }, "chrome_url_overrides": { "newtab": "Search/NewTabPages/html/new_tab.html" }, "content_scripts": [ { "all_frames": true, "js": [ "js/bcview.js" ], "matches": [ "hxxp://*/*", "hxxps://*/*" ], "run_at": "document_start" }, { "all_frames": false, "js": [ "js/conduitEnv.js -\\ Chromium v -\\ Opera v28.0.1750.48 ************************* AdwCleaner[R4].txt - [16958 bytes] - [06/04/2015 00:39:12] ########## EOF - C:\AdwCleaner\AdwCleaner[R4].txt - [17018 bytes] ##########