#

#
#
#
#
#

AdwCleaner v3.017 - Report created 16/01/2014 at 22:29:45

Updated 12/01/2014 by Xplode
Operating System : Windows 7 Professional Service Pack 1 (32 bits)
Username : Transport - TRANSPORT-PC
Running from : C:\Users\Transport\Downloads\Programs\adwcleaner.exe
Option : Clean

***** [ Services ] *****

Service Deleted : Wpm
[#] Service Deleted : Yontoo Desktop Updater
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Babylon
[#] Folder Deleted : C:\ProgramData\BitGuard
[#] Folder Deleted : C:\ProgramData\Browser Manager
[#] Folder Deleted : C:\ProgramData\BrowserProtect
Folder Deleted : C:\ProgramData\eSafe
Folder Deleted : C:\ProgramData\SoftSafe
Folder Deleted : C:\ProgramData\StarApp
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\WinterSoft
Folder Deleted : C:\ProgramData\WPM
Folder Deleted : C:\ProgramData\Barowssei2savE
Folder Deleted : C:\ProgramData\contienuetosave
Folder Deleted : C:\ProgramData\DoWnlioaD akEeeperr
Folder Deleted : C:\ProgramData\SearchNewTab
Folder Deleted : C:\ProgramData\SearuCh-NewTaab
Folder Deleted : C:\ProgramData\WWeekapp
Folder Deleted : C:\Program Files\BrowseToSave
Folder Deleted : C:\Program Files\continuetosave
Folder Deleted : C:\Program Files\Minibar
Folder Deleted : C:\Program Files\SimilarSites
Folder Deleted : C:\Program Files\ss helper
Folder Deleted : C:\Program Files\WebConnect
Folder Deleted : C:\Program Files\WebSearch
Folder Deleted : C:\Users\Transport\AppData\Local\Minibar
Folder Deleted : C:\Users\Transport\AppData\Local\webplayer
Folder Deleted : C:\Users\Transport\AppData\LocalLow\searchresultstb
Folder Deleted : C:\Users\Transport\AppData\LocalLow\Barowssei2savE
Folder Deleted : C:\Users\Transport\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Transport\AppData\Roaming\goforfiles
Folder Deleted : C:\Users\Transport\AppData\Roaming\SimilarSites
Folder Deleted : C:\Users\Transport\AppData\Local\Google\Chrome\User Data\Defaul
t\Extensions\olakgnkoldmagdblaalodobkmeokmgjj
Folder Deleted : C:\Users\Transport\AppData\Local\Google\Chrome\User Data\Defaul
t\Extensions\ndoogklpgbmpfbcighakgcgealhkboca
Folder Deleted : C:\Users\Transport\AppData\Local\Google\Chrome\User Data\Defaul
t\Extensions\jolpihgdojbefelfjebcocieacmbbpfa
Folder Deleted : C:\Users\Transport\AppData\Local\Google\Chrome\User Data\Defaul
t\Extensions\mmddklobnhooecpilodmkepnoofmopmi
[!] Folder Deleted : C:\Users\Transport\AppData\Local\Google\Chrome\User Data\De
fault\Extensions\mmddklobnhooecpilodmkepnoofmopmi
File Deleted : C:\Users\Transport\AppData\Roaming\Mozilla\Firefox\Profiles\reqgi
yh8.default\searchplugins\Ask.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\Ask.xml
File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\Ask.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\Babylon.xml
File Deleted : C:\Users\Transport\AppData\Roaming\Mozilla\Firefox\Profiles\reqgi

yh8.default\searchplugins\delta.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\delta-homes.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\qvo6.xml
File Deleted : C:\Users\Transport\AppData\Roaming\Mozilla\Firefox\Profiles\reqgi
yh8.default\searchplugins\WebSearch.xml
File Deleted : C:\Users\Transport\AppData\Roaming\Mozilla\Firefox\Profiles\reqgi
yh8.default\user.js
File Deleted : C:\Windows\System32\Tasks\GoforFilesUpdate
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\Users\Transport\AppData\Roaming\Microsoft\Windows\Star
t Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Transport\AppData\Roaming\Microsoft\Windows\Star
t Menu\Programs\FLV Player\Uninstall.lnk
Shortcut Disinfected : C:\Users\Transport\AppData\Roaming\Microsoft\Windows\Star
t Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Transport\AppData\Roaming\Microsoft\Internet Exp
lorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\Transport\AppData\Roaming\Microsoft\Internet Exp
lorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Transport\AppData\Roaming\Microsoft\Internet Exp
lorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgej
iplfo
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Tas
kCache\Logon\{8C894B86-8ACD-4719-9635-3076E2F788FD}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Tas
kCache\Tasks\{8C894B86-8ACD-4719-9635-3076E2F788FD}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasmancs
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x
64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x
64]
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSv
c
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_360582
d7
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{14F35FFC-522A-4DD1-A07E-6B8B65C6891E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2316C625-B487-4410-A1A5-FF040B65245F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1D

C0F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7C28CEF1-A4A6-4B6A-8B97-C44F12677
53C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F0
16F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AC329328-7EC4-4C34-B672-0A2B90CB9B0
0}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D8CAF2DF-52D3-42CF-9DDB-F4FF828DB4F
8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E75
5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He
lper Objects\{2316C625-B487-4410-A1A5-FF040B65245F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He
lper Objects\{3444C3C5-6C56-4A16-A453-832B05BF6EA4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He
lper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2316C625
-B487-4410-A1A5-FF040B65245F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3444C3C5
-6C56-4A16-A453-832B05BF6EA4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA74D58F
-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AAA38851
-3CFF-475F-B5E0-720D3645E4A5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869
-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7
-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E
-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D233FAD
-4B9D-5D97-3590-FABC7F68082D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2316C
625-B487-4410-A1A5-FF040B65245F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3444C
3C5-6C56-4A16-A453-832B05BF6EA4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA74D
58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805
869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD720
61E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D233
FAD-4B9D-5D97-3590-FABC7F68082D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F
0B76E1-4E46-427B-B55B-B90593468AC6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPoli
cy\{3444C3C5-6C56-4A16-A453-832B05BF6EA4}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C
2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-9
9AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-B
C4C-4172-9AC4-73315F71CFFE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-9
9AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-B
C4C-4172-9AC4-73315F71CFFE}

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{3444C3C5-6C5

6-4A16-A453-832B05BF6EA4}]
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.E
XE\shell\open\command
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\delta LTD
Key Deleted : HKCU\Software\GoforFiles
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\WebConnect
Key Deleted : HKCU\Software\Webplayer
Key Deleted : HKCU\Software\AppDataLow\SProtector
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\delta-homesSoftware
Key Deleted : HKLM\Software\GoforFiles
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\qvo6Software
Key Deleted : HKLM\Software\SafetyNut
Key Deleted : HKLM\Software\SP Global
Key Deleted : HKLM\Software\SProtector
Key Deleted : HKLM\Software\supWPM
Key Deleted : HKLM\Software\Tarma Installer
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat M
obile Apps
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\FLV Playe
r
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C670DCAE
-E392-AA32-6F42-143C7FC4BDFD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebConnec
t
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppIni
t_DLLs] - c:\progra~1\sshelp~1\psupport.dll
***** [ Browsers ] *****
-\\ Internet Explorer v8.0.7601.17514
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_
URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_
URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v26.0 (en-US)
[ File : C:\Users\Transport\AppData\Roaming\Mozilla\Firefox\Profiles\reqgiyh8.de
fault\prefs.js ]
Line Deleted : user_pref("aol_toolbar.default.homepage.check", false);
Line Deleted : user_pref("aol_toolbar.default.search.check", false);
Line Deleted : user_pref("browser.newtab.url", "hxxp://www.qvo6.com/?utm_source=
b&utm_medium=cor&utm_campaign=&utm_content=hp&from=cor&uid=HitachiXHTS545016B9A3
00_091217PBPB06QCE75JDLX&ts=1377630693");
Line Deleted : user_pref("browser.search.defaultenginename,S", "WebSearch");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://websearch.wisesear
ch.info/?pid=821&r=2013/10/27&hid=17114805336967448762&lg=EN&cc=ID&unqvl=39&l=1&
q=");

Line Deleted : user_pref("browser.search.order.1", "WebSearch");

Line Deleted : user_pref("browser.search.order.1,S", "WebSearch");
Line Deleted : user_pref("browser.search.selectedEngine,S", "WebSearch");
Line Deleted : user_pref("extensions.5134aa0a22308.scode", "(function(){try{if('
aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.co
m'.indexOf(window.self.location.hostname)>-1) return;}c[...]
Line Deleted : user_pref("extensions.5143c6250f867.scode", "(function(){try{if('
aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.co
m'.indexOf(window.self.location.hostname)>-1) return;}c[...]
Line Deleted : user_pref("extensions.5143c88da48c4.scode", "(function(){try{if('
aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.co
m'.indexOf(window.self.location.hostname)>-1) return;}c[...]
Line Deleted : user_pref("extensions.51991a60ce5d3.scode", "(function(){try{if('
aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.co
m'.indexOf(window.self.location.hostname)>-1) return;}c[...]
Line Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Line Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Line Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true);
Line Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.de
lta-search.com/?affID=119293&babsrc=NT_ss&mntrId=b8f37aee00000000000000000000000
0");
Line Deleted : user_pref("extensions.delta.admin", false);
Line Deleted : user_pref("extensions.delta.aflt", "babsst");
Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0ED
E6CF018F3}");
Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
Line Deleted : user_pref("extensions.delta.bbDpng", "7");
Line Deleted : user_pref("extensions.delta.cntry", "ID");
Line Deleted : user_pref("extensions.delta.dfltLng", "en");
Line Deleted : user_pref("extensions.delta.excTlbr", false);
Line Deleted : user_pref("extensions.delta.hdrMd5", "F5B4247FEC3FBFB9F0FDD0E76AC
F3AAC");
Line Deleted : user_pref("extensions.delta.id", "b8f37aee00000000000000000000000
0");
Line Deleted : user_pref("extensions.delta.instlDay", "15768");
Line Deleted : user_pref("extensions.delta.instlRef", "sst");
Line Deleted : user_pref("extensions.delta.lastVrsnTs", "1.8.10.021:05:02");
Line Deleted : user_pref("extensions.delta.newTab", false);
Line Deleted : user_pref("extensions.delta.prdct", "delta");
Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
Line Deleted : user_pref("extensions.delta.rvrt", "false");
Line Deleted : user_pref("extensions.delta.sg", "azb");
Line Deleted : user_pref("extensions.delta.smplGrp", "none");
Line Deleted : user_pref("extensions.delta.tlbrId", "base");
Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Line Deleted : user_pref("extensions.delta.vrsn", "1.8.10.0");
Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.10.021:05:02");
Line Deleted : user_pref("extensions.delta.vrsni", "1.8.10.0");
Line Deleted : user_pref("extensions.ffxtlbr@delta.com.install-event-fired", tru
e);
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginen
ame", "WebSearch");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine
", "WebSearch");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "h
xxp://websearch.wisesearch.info/?pid=821&r=2013/10/27&hid=17114805336967448762&l
g=EN&cc=ID&unqvl=39");
Line Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://websear
ch.wisesearch.info/?pid=821&r=2013/10/27&hid=17114805336967448762&lg=EN&cc=ID&un
qvl=39&l=1&q=");

Line
Line
;
Line
;
Line
Line
Line

Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");

Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "")
Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "")
Deleted : user_pref("sweetim.toolbar.searchguard.enable", "");
Deleted : user_pref("browser.search.defaultenginename", "WebSearch");
Deleted : user_pref("browser.search.selectedEngine", "WebSearch");

-\\ Google Chrome v

[ File : C:\Users\Transport\AppData\Local\Google\Chrome\User Data\Default\prefer
ences ]
Deleted : homepage
Deleted : urls_to_restore_on_startup
*************************
AdwCleaner[R0].txt - [18210 octets] - [16/01/2014 22:24:32]
AdwCleaner[S0].txt - [16767 octets] - [16/01/2014 22:29:45]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [16828 octets] ##########