# AdwCleaner v4.207 - Logfile created 25/06/2015 at 17:19:11 # Updated 21/06/2015 by Xplode # Database : 2015-06-23.1 [Server] # Operating system : Windows 7 Home Premium Service Pack 1 (x64) # Username : woint - EFBECE # Running from : C:\Users\woint\Desktop\naprawa komputera\adwcleaner_4.207.exe # Option : Scan ***** [ Services ] ***** Service Found : IHProtect Service Service Found : WindowsMangerProtect ***** [ Files / Folders ] ***** File Found : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml File Found : C:\Users\woint\AppData\Roaming\Mozilla\Firefox\Profiles\age6egv9.default\searchplugins\avg-secure-search.xml File Found : C:\Users\woint\AppData\Roaming\Mozilla\Firefox\Profiles\age6egv9.default\searchplugins\istartsurf.xml File Found : C:\Users\woint\AppData\Roaming\Mozilla\Firefox\Profiles\age6egv9.default\user.js Folder Found : C:\Program Files (x86)\miuitab Folder Found : C:\ProgramData\AVG Security Toolbar Folder Found : C:\ProgramData\IHProtectUpDate Folder Found : C:\ProgramData\WindowsMangerProtect Folder Found : C:\Users\woint\AppData\Roaming\pdfforge ***** [ Scheduled tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Data Found : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1435158611&z=a38133dd797d088e1623d86gfzec0w1gew7bfqde7b&from=smt&uid=395049983_1052499_04FC3128 Key Found : HKCU\Software\Avg Secure Update Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance Key Found : HKCU\Software\Mozilla\Extends Key Found : [x64] HKCU\Software\Avg Secure Update Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} Key Found : HKLM\SOFTWARE\Avg Secure Update Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Key Found : HKLM\SOFTWARE\Classes\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556} Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Key Found : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8} Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994} Key Found : HKLM\SOFTWARE\IHProtect Key Found : HKLM\SOFTWARE\istartsurfSoftware Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} Key Found : HKLM\SOFTWARE\searchult Key Found : HKLM\SOFTWARE\SupDp Key Found : HKLM\SOFTWARE\SupTab Key Found : HKLM\SOFTWARE\supWindowsMangerProtect Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8} Key Found : HKU\.DEFAULT\Software\Avg Secure Update Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [sweetsearch@gmail.com] ***** [ Web browsers ] ***** -\\ Internet Explorer v11.0.9600.17840 Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.istartsurf.com/web/?type=dspp&ts=1435158635&z=cdef9ca9fe3c6bf4a9f9cc7g3z4ccw0g1w5b8qdc1o&from=smt&uid=395049983_1052499_04FC3128&q={searchTerms} Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.istartsurf.com/?type=hppp&ts=1435158635&z=cdef9ca9fe3c6bf4a9f9cc7g3z4ccw0g1w5b8qdc1o&from=smt&uid=395049983_1052499_04FC3128 Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.istartsurf.com/?type=hppp&ts=1435158635&z=cdef9ca9fe3c6bf4a9f9cc7g3z4ccw0g1w5b8qdc1o&from=smt&uid=395049983_1052499_04FC3128 Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.istartsurf.com/web/?type=dspp&ts=1435158635&z=cdef9ca9fe3c6bf4a9f9cc7g3z4ccw0g1w5b8qdc1o&from=smt&uid=395049983_1052499_04FC3128&q={searchTerms} Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.istartsurf.com/web/?type=ds&ts=1435158611&z=a38133dd797d088e1623d86gfzec0w1gew7bfqde7b&from=smt&uid=395049983_1052499_04FC3128&q={searchTerms} Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.istartsurf.com/?type=hppp&ts=1435158635&z=cdef9ca9fe3c6bf4a9f9cc7g3z4ccw0g1w5b8qdc1o&from=smt&uid=395049983_1052499_04FC3128 Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.istartsurf.com/?type=hppp&ts=1435158635&z=cdef9ca9fe3c6bf4a9f9cc7g3z4ccw0g1w5b8qdc1o&from=smt&uid=395049983_1052499_04FC3128 Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.istartsurf.com/web/?type=ds&ts=1435158611&z=a38133dd797d088e1623d86gfzec0w1gew7bfqde7b&from=smt&uid=395049983_1052499_04FC3128&q={searchTerms} Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.istartsurf.com/web/?type=ds&ts=1435158611&z=a38133dd797d088e1623d86gfzec0w1gew7bfqde7b&from=smt&uid=395049983_1052499_04FC3128&q={searchTerms} Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.istartsurf.com/?type=hppp&ts=1435158635&z=cdef9ca9fe3c6bf4a9f9cc7g3z4ccw0g1w5b8qdc1o&from=smt&uid=395049983_1052499_04FC3128 Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.istartsurf.com/?type=hppp&ts=1435158635&z=cdef9ca9fe3c6bf4a9f9cc7g3z4ccw0g1w5b8qdc1o&from=smt&uid=395049983_1052499_04FC3128 Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.istartsurf.com/web/?type=ds&ts=1435158611&z=a38133dd797d088e1623d86gfzec0w1gew7bfqde7b&from=smt&uid=395049983_1052499_04FC3128&q={searchTerms} -\\ Mozilla Firefox v38.0.5 (x86 pl) [age6egv9.default] - Line Found : user_pref("browser.search.searchengine.alias", "istartsurf"); [age6egv9.default] - Line Found : user_pref("browser.search.searchengine.iconURL", "hxxp://www.istartsurf.com/web/favicon.ico"); [age6egv9.default] - Line Found : user_pref("browser.search.searchengine.name", "istartsurf"); [age6egv9.default] - Line Found : user_pref("browser.search.searchengine.url", "hxxp://www.istartsurf.com/web/?type=dspp&ts=1435158635&z=cdef9ca9fe3c6bf4a9f9cc7g3z4ccw0g1w5b8qdc1o&from=smt&uid=395049983_1052499_04FC3128&q={searchTerms[...] [age6egv9.default] - Line Found : user_pref("browser.search.selectedEngine", "istartsurf"); [age6egv9.default] - Line Found : user_pref("extensions.quick_start.enable_search1", false); [age6egv9.default] - Line Found : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); ************************* AdwCleaner[R0].txt - [8459 bytes] - [25/06/2015 17:19:11] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [8518 bytes] ##########