# AdwCleaner v3.007 - Report created 14/10/2013 at 19:18:42
# Updated 09/10/2013 by Xplode
# Operating System : Microsoft Windows XP Dodatek Service Pack 3 (32 bits)
# Username : Mariush - MARIUSZ-5152694
# Running from : C:\Documents and Settings\Mariush\Ustawienia lokalne\Temporary Internet Files\Content.IE5\MVSFQHYP\adwcleaner_www.INSTALKI.pl[1].exe
# Option : Scan

***** [ Services ] *****

Service Found : BCUService

***** [ Files / Folders ] *****

Folder Found : C:\Documents and Settings\Mariush\Dane aplikacji\Mozilla\Firefox\Profiles\4iym9x7j.default\Extensions\{b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14}
Folder Found C:\DOCUME~1\Mariush\USTAWI~1\Temp\CT3225826
Folder Found C:\DOCUME~1\Mariush\USTAWI~1\Temp\eIntaller
Folder Found C:\Documents and Settings\All Users\Dane aplikacji\eSafe
Folder Found C:\Documents and Settings\Mariush\Dane aplikacji\Mozilla\Firefox\Profiles\4iym9x7j.default\CT3225826
Folder Found C:\Documents and Settings\Mariush\Dane aplikacji\Mozilla\Firefox\Profiles\4iym9x7j.default\Smartbar
Folder Found C:\Program Files\DeviceVM

***** [ Shortcuts ] *****

Shortcut Found : C:\Documents and Settings\Mariush\Menu Start\Programy\Internet Explorer.lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WCAYU858803488034&ts=1381765301 )
Shortcut Found : C:\Documents and Settings\Mariush\Menu Start\Programy\Akcesoria\Narzędzia systemowe\Internet Explorer (bez dodatków).lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WCAYU858803488034&ts=1381765301 )
Shortcut Found : C:\Documents and Settings\Mariush\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Uruchom przeglądarkę Internet Explorer.lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WCAYU858803488034&ts=1381765301 )

***** [ Registry ] *****

Data Found : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WCAYU858803488034&ts=1381765301
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\DeviceVM
Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKCU\Software\smartbar
Key Found : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook
Key Found : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{77AA6435-2488-4A94-9FE5-49519DD2ED9B}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\DeviceVM
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKLM\Software\qvo6Software
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BCU]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Documents and Settings\All Users\Dane aplikacji\eSafe\eGdpSvc.exe]

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WCAYU858803488034&ts=1381765301
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WCAYU858803488034&ts=1381765301
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WCAYU858803488034&ts=1381765301
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WCAYU858803488034&ts=1381765301&type=default&q={searchTerms}
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [CustomizeSearch] - hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WCAYU858803488034&ts=1381765301&type=default&q={searchTerms}

-\\ Mozilla Firefox v

[ File : C:\Documents and Settings\Mariush\Dane aplikacji\Mozilla\Firefox\Profiles\4iym9x7j.default\prefs.js ]

Line Found : user_pref("CT3225826.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM4MTc2NjI2OSwidXVpZCI6Mjg5ODkxMTg0NzQ1NjYzLCJzZXFfaWQiOjEsInNzYiI6MTM4MTc2NjI2OX0=");
Line Found : user_pref("CT3225826.BT_Usage.enc", "eyJ1dWlkIjoyODk4OTExODQ3NDU2NjMsInNlcV9pZCI6MX0=");
Line Found : user_pref("CT3225826.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3225826.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3225826.FF19Solved", "true");
Line Found : user_pref("CT3225826.FirstTime", "true");
Line Found : user_pref("CT3225826.FirstTimeFF3", "true");
Line Found : user_pref("CT3225826.PriceSparrowUuid.enc", "MEM0N0VFQjgtRjAxNS00NkFBLTg0NEYtNTdCM0ZFM0NFODRG");
Line Found : user_pref("CT3225826.UserID", "UN98264791789788988");
Line Found : user_pref("CT3225826.addressBarTakeOverEnabledInHidden", "true");
Line Found : user_pref("CT3225826.cbfirsttime.enc", "TW9uIE9jdCAxNCAyMDEzIDE3OjU4OjE2IEdNVCswMjAw");
Line Found : user_pref("CT3225826.countryCode", "PL");
Line Found : user_pref("CT3225826.defaultSearch", "false");
Line Found : user_pref("CT3225826.embeddedsData", "[{\"appId\":\"129830626805552092\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Line Found : user_pref("CT3225826.enableSearchFromAddressBar", "false");
Line Found : user_pref("CT3225826.firstTimeDialogOpened", "true");
Line Found : user_pref("CT3225826.fixPageNotFoundErrorByUser", "TRUE");
Line Found : user_pref("CT3225826.fixPageNotFoundErrorInHidden", "true");
Line Found : user_pref("CT3225826.fullUserID", "UN98264791789788988.IN.20131014174417");
Line Found : user_pref("CT3225826.homepageuserchanged", true);
Line Found : user_pref("CT3225826.hxxp___toolbar_utorrent_com.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPTAsc2F2ZXJlc2l6ZWRzaXplPTAsdGl0bGViYXI9MCxjbG9zZW9uZXh0ZXJuYWxjbGljaz0xLHNhdmVsb2NhdGlvbj0wLG9wZW5wb3NpdGlvbj1vZmZ[...]
Line Found : user_pref("CT3225826.installDate", "14/10/2013 17:44:21");
Line Found : user_pref("CT3225826.installSessionId", "-1");
Line Found : user_pref("CT3225826.installSp", "FALSE");
Line Found : user_pref("CT3225826.installType", "xpe");
Line Found : user_pref("CT3225826.installUsage", "2013-10-14T18:58:26.1379733+03:00");
Line Found : user_pref("CT3225826.installUsageEarly", "2013-10-14T18:58:25.62317+03:00");
Line Found : user_pref("CT3225826.installerVersion", "1.7.0.9");
Line Found : user_pref("CT3225826.isCheckedStartAsHidden", true);
Line Found : user_pref("CT3225826.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3225826.isFirstTimeToolbarLoading", "false");
Line Found : user_pref("CT3225826.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Found : user_pref("CT3225826.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Found : user_pref("CT3225826.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3225826&octid=CT3225826&SearchSource=15&CUI=UN98264791789788988&SSPV=&Lay=1&UM=1\"}");
Line Found : user_pref("CT3225826.lastVersion", "10.20.0.13");
Line Found : user_pref("CT3225826.mam_gk_appStateReportTime.enc", "MTM4MTc2NjI2ODkwOQ==");
Line Found : user_pref("CT3225826.mam_gk_appState_CouponBuddy.enc", "b24=");
Line Found : user_pref("CT3225826.mam_gk_appState_DealPly.enc", "b24=");
Line Found : user_pref("CT3225826.mam_gk_appState_Easytobook.enc", "b24=");
Line Found : user_pref("CT3225826.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Line Found : user_pref("CT3225826.mam_gk_appState_PriceSparrow.enc", "b24=");
Line Found : user_pref("CT3225826.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IkNvdXBvbkJ1ZGR5IiwidXJsIjoiaHR0cDovL3d3dy5zb2NpYWxncm93dGh0ZWNobm9sb2dpZXMuY29tL2NvdXBvbmJ1ZGR5X3YwMDMvaW5kZXgucGhwP2N0aWQ9RUJUT09MQkFS[...]
Line Found : user_pref("CT3225826.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Line Found : user_pref("CT3225826.mam_gk_calledSetupService.enc", "MQ==");
Line Found : user_pref("CT3225826.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlU3BhcnJvdyIsImNyaXRlcmlhcyI6W3siY3JpdGVyaWFJZCI6IjQ5MGQ3YzQ1LTBiNWYtNDAxNy1iMDBkLTk0MmU0ZDA5ZjQxOSIsImRvbWFpbnM[...]
Line Found : user_pref("CT3225826.mam_gk_currentVersion.enc", "MS4xMC40LjA=");
Line Found : user_pref("CT3225826.mam_gk_existingUsersRecoveryDone.enc", "MQ==");
Line Found : user_pref("CT3225826.mam_gk_first_time.enc", "MQ==");
Line Found : user_pref("CT3225826.mam_gk_gadgetOpen.enc", "d2VsY29tZQ==");
Line Found : user_pref("CT3225826.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Line Found : user_pref("CT3225826.mam_gk_lastLoginTime.enc", "MTM4MTc2NjI3MDc3OA==");
Line Found : user_pref("CT3225826.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJQb2xpdHlrYSBkb3R5Y3rEhWNhIHRyZcWbY2kifSwibmV3YXBwbGVhcm5tb3JlIjp7IlRleHQiOiJEb3dpZWR6IHNpxJkgd2nEmWNlaiJ9LCJu[...]
Line Found : user_pref("CT3225826.mam_gk_mamEnabled.enc", "ZmFsc2U=");
Line Found : user_pref("CT3225826.mam_gk_new_welcome_experience.enc", "MQ==");
Line Found : user_pref("CT3225826.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Line Found : user_pref("CT3225826.mam_gk_settings1.10.4.0.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiMTIxXzAiLCJpc1Rlc3QiOnRydWUsIlVzZXJDb3VudHJ5Q29kZSI6IlBMIiwiaXNXZWxjb21lRXhw[...]
Line Found : user_pref("CT3225826.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Line Found : user_pref("CT3225826.mam_gk_userId.enc", "MDZhNThjZGQtYmIzMC00NzhhLWE0NzMtZGMzNTNmNDEzYTE4");
Line Found : user_pref("CT3225826.mam_gk_user_approval_interacted.enc", "MQ==");
Line Found : user_pref("CT3225826.mam_gk_welcomeDialogMode.enc", "MQ==");
Line Found : user_pref("CT3225826.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.qvo6.com%2F%3Futm_source%3Db%26utm_medium%3Dcor%26utm_campaign%3DeXQ%26utm_content%3Dsc%[...]
Line Found : user_pref("CT3225826.openThankYouPage", "true");
Line Found : user_pref("CT3225826.openUninstallPage", "false");
Line Found : user_pref("CT3225826.revertSettingsEnabled", "FALSE");
Line Found : user_pref("CT3225826.search.searchAppId", "129830626805552092");
Line Found : user_pref("CT3225826.search.searchCount", "0");
Line Found : user_pref("CT3225826.searchInNewTabEnabledByUser", "false");
Line Found : user_pref("CT3225826.searchInNewTabEnabledInHidden", "true");
Line Found : user_pref("CT3225826.searchRevert", "FALSE");
Line Found : user_pref("CT3225826.searchSuggestEnabledByUser", "false");
Line Found : user_pref("CT3225826.searchUserMode", "1");
Line Found : user_pref("CT3225826.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3225826.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Found : user_pref("CT3225826.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Found : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3225826\"}");
Line Found : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://BitTorrentControlv12.OurToolbar.com//xpi\"}");
Line Found : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"BitTorrentControl_v12 \"}");
Line Found : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3225826.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Found : user_pref("CT3225826.serviceLayer_services_Configuration_lastUpdate", "1381766265478");
Line Found : user_pref("CT3225826.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1381766266048");
Line Found : user_pref("CT3225826.serviceLayer_services_appsMetadata_lastUpdate", "1381766269132");
Line Found : user_pref("CT3225826.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1381766265887");
Line Found : user_pref("CT3225826.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1381766265526");
Line Found : user_pref("CT3225826.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1381766266032");
Line Found : user_pref("CT3225826.serviceLayer_services_login_10.20.0.13_lastUpdate", "1381766266244");
Line Found : user_pref("CT3225826.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1381766265989");
Line Found : user_pref("CT3225826.serviceLayer_services_searchAPI_lastUpdate", "1381766265530");
Line Found : user_pref("CT3225826.serviceLayer_services_serviceMap_lastUpdate", "1381766265180");
Line Found : user_pref("CT3225826.serviceLayer_services_toolbarContextMenu_lastUpdate", "1381766265836");
Line Found : user_pref("CT3225826.serviceLayer_services_toolbarSettings_lastUpdate", "1381766269029");
Line Found : user_pref("CT3225826.serviceLayer_services_translation_lastUpdate", "1381766265942");
Line Found : user_pref("CT3225826.settingsINI", true);
Line Found : user_pref("CT3225826.shouldFirstTimeDialog", "false");
Line Found : user_pref("CT3225826.showToolbarPermission", "false");
Line Found : user_pref("CT3225826.smartbar.CTID", "CT3225826");
Line Found : user_pref("CT3225826.smartbar.Uninstall", "0");
Line Found : user_pref("CT3225826.smartbar.toolbarName", "BitTorrentControl_v12 ");
Line Found : user_pref("CT3225826.startPage", "false");
Line Found : user_pref("CT3225826.toolbarBornServerTime", "14-10-2013");
Line Found : user_pref("CT3225826.toolbarCurrentServerTime", "14-10-2013");
Line Found : user_pref("CT3225826.toolbarDisabled", "true");
Line Found : user_pref("CT3225826.toolbarLoginClientTime", "Mon Oct 14 2013 17:57:46 GMT+0200");
Line Found : user_pref("CT3225826.url_history0001.enc", "aHR0cDovL21haWwudGxlbi5wbC93eWxvZ293YW5vOjo6Y2xpY2toYW5kbGVyOjo6MTM4MTc2NjkyNDkxOCwsLGh0dHA6Ly9tYWlsLnRsZW4ucGwvd3lsb2dvd2Fubzo6OmNsaWNraGFuZGxlcjo6OjEzODE3[...]
Line Found : user_pref("CT3225826.versionFromInstaller", "10.20.0.13");
Line Found : user_pref("CT3225826.xpeMode", "0");
Line Found : user_pref("CT3225826_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1381767186551,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Found : user_pref("browser.newtab.url", "hxxp://www.qvo6.com/newtab/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=nt&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WCAYU858803488034&ts=1381765301");
Line Found : user_pref("smartbar.machineId", "YKO+K0C3SN06ODPWB8YBNSFQ+V+EHWBCNC5NVDLTZCY6D/UMTRBOO/Y1TVMKH3FMDLZB+MPECK7+RK7W+IZRIG");

*************************

AdwCleaner[R0].txt - [15684 octets] - [14/10/2013 19:18:42]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [15745 octets] ##########