# AdwCleaner v3.007 - Report created 14/10/2013 at 19:19:19 # Updated 09/10/2013 by Xplode # Operating System : Microsoft Windows XP Dodatek Service Pack 3 (32 bits) # Username : Mariush - MARIUSZ-5152694 # Running from : C:\Documents and Settings\Mariush\Ustawienia lokalne\Temporary Internet Files\Content.IE5\MVSFQHYP\adwcleaner_www.INSTALKI.pl[1].exe # Option : Clean ***** [ Services ] ***** Service Deleted : BCUService ***** [ Files / Folders ] ***** Folder Deleted : C:\Documents and Settings\All Users\Dane aplikacji\eSafe Folder Deleted : C:\Program Files\DeviceVM Folder Deleted : C:\DOCUME~1\Mariush\USTAWI~1\Temp\eIntaller Folder Deleted : C:\DOCUME~1\Mariush\USTAWI~1\Temp\CT3225826 Folder Deleted : C:\Documents and Settings\Mariush\Dane aplikacji\Mozilla\Firefox\Profiles\4iym9x7j.default\Smartbar Folder Deleted : C:\Documents and Settings\Mariush\Dane aplikacji\Mozilla\Firefox\Profiles\4iym9x7j.default\CT3225826 Folder Deleted : C:\Documents and Settings\Mariush\Dane aplikacji\Mozilla\Firefox\Profiles\4iym9x7j.default\Extensions\{b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14} ***** [ Shortcuts ] ***** Shortcut Disinfected : C:\Documents and Settings\Mariush\Menu Start\Programy\Internet Explorer.lnk Shortcut Disinfected : C:\Documents and Settings\Mariush\Menu Start\Programy\Akcesoria\Narzędzia systemowe\Internet Explorer (bez dodatków).lnk Shortcut Disinfected : C:\Documents and Settings\Mariush\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Uruchom przeglądarkę Internet Explorer.lnk ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook Key Deleted : HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook.1 Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BCU] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{77AA6435-2488-4A94-9FE5-49519DD2ED9B} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Documents and Settings\All Users\Dane aplikacji\eSafe\eGdpSvc.exe] Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\DeviceVM Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\smartbar Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\Software\DeviceVM Key Deleted : HKLM\Software\qvo6Software ***** [ Browsers ] ***** -\\ Internet Explorer v8.0.6001.18702 Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant] Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [CustomizeSearch] -\\ Mozilla Firefox v [ File : C:\Documents and Settings\Mariush\Dane aplikacji\Mozilla\Firefox\Profiles\4iym9x7j.default\prefs.js ] Line Deleted : user_pref("CT3225826.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM4MTc2NjI2OSwidXVpZCI6Mjg5ODkxMTg0NzQ1NjYzLCJzZXFfaWQiOjEsInNzYiI6MTM4MTc2NjI2OX0="); Line Deleted : user_pref("CT3225826.BT_Usage.enc", "eyJ1dWlkIjoyODk4OTExODQ3NDU2NjMsInNlcV9pZCI6MX0="); Line Deleted : user_pref("CT3225826.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Deleted : user_pref("CT3225826.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Deleted : user_pref("CT3225826.FF19Solved", "true"); Line Deleted : user_pref("CT3225826.FirstTime", "true"); Line Deleted : user_pref("CT3225826.FirstTimeFF3", "true"); Line Deleted : user_pref("CT3225826.PriceSparrowUuid.enc", "MEM0N0VFQjgtRjAxNS00NkFBLTg0NEYtNTdCM0ZFM0NFODRG"); Line Deleted : user_pref("CT3225826.UserID", "UN98264791789788988"); Line Deleted : user_pref("CT3225826.addressBarTakeOverEnabledInHidden", "true"); Line Deleted : user_pref("CT3225826.cbfirsttime.enc", "TW9uIE9jdCAxNCAyMDEzIDE3OjU4OjE2IEdNVCswMjAw"); Line Deleted : user_pref("CT3225826.countryCode", "PL"); Line Deleted : user_pref("CT3225826.defaultSearch", "false"); Line Deleted : user_pref("CT3225826.embeddedsData", "[{\"appId\":\"129830626805552092\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...] Line Deleted : user_pref("CT3225826.enableSearchFromAddressBar", "false"); Line Deleted : user_pref("CT3225826.firstTimeDialogOpened", "true"); Line Deleted : user_pref("CT3225826.fixPageNotFoundErrorByUser", "TRUE"); Line Deleted : user_pref("CT3225826.fixPageNotFoundErrorInHidden", "true"); Line Deleted : user_pref("CT3225826.fullUserID", "UN98264791789788988.IN.20131014174417"); Line Deleted : user_pref("CT3225826.homepageuserchanged", true); Line Deleted : user_pref("CT3225826.hxxp___toolbar_utorrent_com.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPTAsc2F2ZXJlc2l6ZWRzaXplPTAsdGl0bGViYXI9MCxjbG9zZW9uZXh0ZXJuYWxjbGljaz0xLHNhdmVsb2NhdGlvbj0wLG9wZW5wb3NpdGlvbj1vZmZ[...] Line Deleted : user_pref("CT3225826.installDate", "14/10/2013 17:44:21"); Line Deleted : user_pref("CT3225826.installSessionId", "-1"); Line Deleted : user_pref("CT3225826.installSp", "FALSE"); Line Deleted : user_pref("CT3225826.installType", "xpe"); Line Deleted : user_pref("CT3225826.installUsage", "2013-10-14T18:58:26.1379733+03:00"); Line Deleted : user_pref("CT3225826.installUsageEarly", "2013-10-14T18:58:25.62317+03:00"); Line Deleted : user_pref("CT3225826.installerVersion", "1.7.0.9"); Line Deleted : user_pref("CT3225826.isCheckedStartAsHidden", true); Line Deleted : user_pref("CT3225826.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Deleted : user_pref("CT3225826.isFirstTimeToolbarLoading", "false"); Line Deleted : user_pref("CT3225826.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}"); Line Deleted : user_pref("CT3225826.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}"); Line Deleted : user_pref("CT3225826.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3225826&octid=CT3225826&SearchSource=15&CUI=UN98264791789788988&SSPV=&Lay=1&UM=1\"}"); Line Deleted : user_pref("CT3225826.lastVersion", "10.20.0.13"); Line Deleted : user_pref("CT3225826.mam_gk_appStateReportTime.enc", "MTM4MTc2NjI2ODkwOQ=="); Line Deleted : user_pref("CT3225826.mam_gk_appState_CouponBuddy.enc", "b24="); Line Deleted : user_pref("CT3225826.mam_gk_appState_DealPly.enc", "b24="); Line Deleted : user_pref("CT3225826.mam_gk_appState_Easytobook.enc", "b24="); Line Deleted : user_pref("CT3225826.mam_gk_appState_Easytobook_targeted.enc", "b24="); Line Deleted : user_pref("CT3225826.mam_gk_appState_PriceSparrow.enc", "b24="); Line Deleted : user_pref("CT3225826.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IkNvdXBvbkJ1ZGR5IiwidXJsIjoiaHR0cDovL3d3dy5zb2NpYWxncm93dGh0ZWNobm9sb2dpZXMuY29tL2NvdXBvbmJ1ZGR5X3YwMDMvaW5kZXgucGhwP2N0aWQ9RUJUT09MQkFS[...] Line Deleted : user_pref("CT3225826.mam_gk_appsDefaultEnabled.enc", "bnVsbA=="); Line Deleted : user_pref("CT3225826.mam_gk_calledSetupService.enc", "MQ=="); Line Deleted : user_pref("CT3225826.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlU3BhcnJvdyIsImNyaXRlcmlhcyI6W3siY3JpdGVyaWFJZCI6IjQ5MGQ3YzQ1LTBiNWYtNDAxNy1iMDBkLTk0MmU0ZDA5ZjQxOSIsImRvbWFpbnM[...] Line Deleted : user_pref("CT3225826.mam_gk_currentVersion.enc", "MS4xMC40LjA="); Line Deleted : user_pref("CT3225826.mam_gk_existingUsersRecoveryDone.enc", "MQ=="); Line Deleted : user_pref("CT3225826.mam_gk_first_time.enc", "MQ=="); Line Deleted : user_pref("CT3225826.mam_gk_gadgetOpen.enc", "d2VsY29tZQ=="); Line Deleted : user_pref("CT3225826.mam_gk_installer_preapproved.enc", "ZmFsc2U="); Line Deleted : user_pref("CT3225826.mam_gk_lastLoginTime.enc", "MTM4MTc2NjI3MDc3OA=="); Line Deleted : user_pref("CT3225826.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJQb2xpdHlrYSBkb3R5Y3rEhWNhIHRyZcWbY2kifSwibmV3YXBwbGVhcm5tb3JlIjp7IlRleHQiOiJEb3dpZWR6IHNpxJkgd2nEmWNlaiJ9LCJu[...] Line Deleted : user_pref("CT3225826.mam_gk_mamEnabled.enc", "ZmFsc2U="); Line Deleted : user_pref("CT3225826.mam_gk_new_welcome_experience.enc", "MQ=="); Line Deleted : user_pref("CT3225826.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ=="); Line Deleted : user_pref("CT3225826.mam_gk_settings1.10.4.0.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiMTIxXzAiLCJpc1Rlc3QiOnRydWUsIlVzZXJDb3VudHJ5Q29kZSI6IlBMIiwiaXNXZWxjb21lRXhw[...] Line Deleted : user_pref("CT3225826.mam_gk_showWelcomeGadget.enc", "ZmFsc2U="); Line Deleted : user_pref("CT3225826.mam_gk_userId.enc", "MDZhNThjZGQtYmIzMC00NzhhLWE0NzMtZGMzNTNmNDEzYTE4"); Line Deleted : user_pref("CT3225826.mam_gk_user_approval_interacted.enc", "MQ=="); Line Deleted : user_pref("CT3225826.mam_gk_welcomeDialogMode.enc", "MQ=="); Line Deleted : user_pref("CT3225826.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.qvo6.com%2F%3Futm_source%3Db%26utm_medium%3Dcor%26utm_campaign%3DeXQ%26utm_content%3Dsc%[...] Line Deleted : user_pref("CT3225826.openThankYouPage", "true"); Line Deleted : user_pref("CT3225826.openUninstallPage", "false"); Line Deleted : user_pref("CT3225826.revertSettingsEnabled", "FALSE"); Line Deleted : user_pref("CT3225826.search.searchAppId", "129830626805552092"); Line Deleted : user_pref("CT3225826.search.searchCount", "0"); Line Deleted : user_pref("CT3225826.searchInNewTabEnabledByUser", "false"); Line Deleted : user_pref("CT3225826.searchInNewTabEnabledInHidden", "true"); Line Deleted : user_pref("CT3225826.searchRevert", "FALSE"); Line Deleted : user_pref("CT3225826.searchSuggestEnabledByUser", "false"); Line Deleted : user_pref("CT3225826.searchUserMode", "1"); Line Deleted : user_pref("CT3225826.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Deleted : user_pref("CT3225826.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}"); Line Deleted : user_pref("CT3225826.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}"); Line Deleted : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3225826\"}"); Line Deleted : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://BitTorrentControlv12.OurToolbar.com//xpi\"}"); Line Deleted : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"BitTorrentControl_v12 \"}"); Line Deleted : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}"); Line Deleted : user_pref("CT3225826.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}"); Line Deleted : user_pref("CT3225826.serviceLayer_services_Configuration_lastUpdate", "1381766265478"); Line Deleted : user_pref("CT3225826.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1381766266048"); Line Deleted : user_pref("CT3225826.serviceLayer_services_appsMetadata_lastUpdate", "1381766269132"); Line Deleted : user_pref("CT3225826.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1381766265887"); Line Deleted : user_pref("CT3225826.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1381766265526"); Line Deleted : user_pref("CT3225826.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1381766266032"); Line Deleted : user_pref("CT3225826.serviceLayer_services_login_10.20.0.13_lastUpdate", "1381766266244"); Line Deleted : user_pref("CT3225826.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1381766265989"); Line Deleted : user_pref("CT3225826.serviceLayer_services_searchAPI_lastUpdate", "1381766265530"); Line Deleted : user_pref("CT3225826.serviceLayer_services_serviceMap_lastUpdate", "1381766265180"); Line Deleted : user_pref("CT3225826.serviceLayer_services_toolbarContextMenu_lastUpdate", "1381766265836"); Line Deleted : user_pref("CT3225826.serviceLayer_services_toolbarSettings_lastUpdate", "1381766269029"); Line Deleted : user_pref("CT3225826.serviceLayer_services_translation_lastUpdate", "1381766265942"); Line Deleted : user_pref("CT3225826.settingsINI", true); Line Deleted : user_pref("CT3225826.shouldFirstTimeDialog", "false"); Line Deleted : user_pref("CT3225826.showToolbarPermission", "false"); Line Deleted : user_pref("CT3225826.smartbar.CTID", "CT3225826"); Line Deleted : user_pref("CT3225826.smartbar.Uninstall", "0"); Line Deleted : user_pref("CT3225826.smartbar.toolbarName", "BitTorrentControl_v12 "); Line Deleted : user_pref("CT3225826.startPage", "false"); Line Deleted : user_pref("CT3225826.toolbarBornServerTime", "14-10-2013"); Line Deleted : user_pref("CT3225826.toolbarCurrentServerTime", "14-10-2013"); Line Deleted : user_pref("CT3225826.toolbarDisabled", "true"); Line Deleted : user_pref("CT3225826.toolbarLoginClientTime", "Mon Oct 14 2013 17:57:46 GMT+0200"); Line Deleted : user_pref("CT3225826.url_history0001.enc", "aHR0cDovL21haWwudGxlbi5wbC93eWxvZ293YW5vOjo6Y2xpY2toYW5kbGVyOjo6MTM4MTc2NjkyNDkxOCwsLGh0dHA6Ly9tYWlsLnRsZW4ucGwvd3lsb2dvd2Fubzo6OmNsaWNraGFuZGxlcjo6OjEzODE3[...] Line Deleted : user_pref("CT3225826.versionFromInstaller", "10.20.0.13"); Line Deleted : user_pref("CT3225826.xpeMode", "0"); Line Deleted : user_pref("CT3225826_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1381767186551,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]"); Line Deleted : user_pref("browser.newtab.url", "hxxp://www.qvo6.com/newtab/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=nt&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WCAYU858803488034&ts=1381765301"); Line Deleted : user_pref("smartbar.machineId", "YKO+K0C3SN06ODPWB8YBNSFQ+V+EHWBCNC5NVDLTZCY6D/UMTRBOO/Y1TVMKH3FMDLZB+MPECK7+RK7W+IZRIG"); ************************* AdwCleaner[R0].txt - [15826 octets] - [14/10/2013 19:18:42] AdwCleaner[S0].txt - [14543 octets] - [14/10/2013 19:19:19] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14604 octets] ##########