# AdwCleaner v3.016 - Report created 04/01/2014 at 14:53:41 # Updated 23/12/2013 by Xplode # Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits) # Username : pieter en anja - WERKGROEP # Running from : C:\Users\pieter en anja\Downloads\adwcleaner.exe # Option : Clean ***** [ Services ] ***** [#] Service Deleted : BitGuard ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\Ask Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\ProgramData\Bandoo Folder Deleted : C:\ProgramData\blekko toolbars Folder Deleted : C:\ProgramData\boost_interprocess Folder Deleted : C:\ProgramData\ParetoLogic Folder Deleted : C:\Program Files\Ask.com [!] Folder Deleted : C:\Program Files\iSafe Folder Deleted : C:\Program Files\registry mechanic Folder Deleted : C:\Program Files\SweetIM Folder Deleted : C:\Users\pieter en anja\AppData\Local\Bundled software uninstaller Folder Deleted : C:\Users\pieter en anja\AppData\Local\PackageAware Folder Deleted : C:\Users\pieter en anja\AppData\Local\webplayer Folder Deleted : C:\Users\pieter en anja\AppData\LocalLow\AskToolbar Folder Deleted : C:\Users\pieter en anja\AppData\LocalLow\AVG Security Toolbar Folder Deleted : C:\Users\pieter en anja\AppData\LocalLow\Bandoo Folder Deleted : C:\Users\pieter en anja\AppData\LocalLow\Minibar Folder Deleted : C:\Users\pieter en anja\AppData\LocalLow\searchquband Folder Deleted : C:\Users\pieter en anja\AppData\LocalLow\Searchqutoolbar Folder Deleted : C:\Users\pieter en anja\AppData\Roaming\Babylon Folder Deleted : C:\Users\pieter en anja\AppData\Roaming\Bandoo Folder Deleted : C:\Users\pieter en anja\AppData\Roaming\DriverCure Folder Deleted : C:\Users\pieter en anja\AppData\Roaming\iSafe Folder Deleted : C:\Users\pieter en anja\AppData\Roaming\NCdownloader Folder Deleted : C:\Users\pieter en anja\AppData\Roaming\ParetoLogic Folder Deleted : C:\Users\pieter en anja\AppData\Roaming\registry mechanic Folder Deleted : C:\Users\pieter en anja\AppData\Roaming\Mozilla\Firefox\Profiles\iy4wii2d.default\Searchqutoolbar File Deleted : C:\Users\pieter en anja\AppData\Roaming\Mozilla\Firefox\Profiles\iy4wii2d.default\bProtector_extensions.rdf File Deleted : C:\Users\pieter en anja\AppData\Roaming\Mozilla\Firefox\Profiles\iy4wii2d.default\bprotector_extensions.sqlite File Deleted : C:\Users\pieter en anja\AppData\Roaming\Mozilla\Firefox\Profiles\iy4wii2d.default\bprotector_prefs.js File Deleted : C:\Users\pieter en anja\AppData\Roaming\Mozilla\Firefox\Profiles\iy4wii2d.default\invalidprefs.js File Deleted : C:\Users\pieter en anja\AppData\Roaming\Mozilla\Firefox\Profiles\iy4wii2d.default\searchplugins\safeguard-secure-search.xml File Deleted : C:\Users\pieter en anja\AppData\Roaming\Mozilla\Firefox\Profiles\iy4wii2d.default\user.js File Deleted : C:\Windows\System32\Tasks\BitGuard ***** [ Shortcuts ] ***** Shortcut Disinfected : C:\Users\pieter en anja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player\Uninstall.lnk ***** [ Registry ] ***** Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [hblite@hblite.com] [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DA304F26-A81A-4B05-A525-2BCFBCBEA1D3} [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA304F26-A81A-4B05-A525-2BCFBCBEA1D3} Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings Key Deleted : HKLM\SOFTWARE\Classes\AppID\BandooCore.EXE Key Deleted : HKCU\Software\5ce8f88b53ce449 Key Deleted : HKLM\SOFTWARE\5ce8f88b53ce449 Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0D82ACD6-A652-4496-A298-2BDE705F4227} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7025E484-D4B0-441A-9F0B-69063BD679CE} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{8258B35C-05B8-4C0E-9525-9BCCC70F8F2D} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A89256AD-EC17-4A83-BEF5-4B8BC4F39306} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6F43FA77-C18F-4D0C-9C7E-958876FE2061} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DF948646-8BF4-450E-A059-CF8A4E0FE2BE} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E96B49B0-E11F-48FC-984A-EEC29A4F57E1} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} Key Deleted : HKCU\Software\BI Key Deleted : HKCU\Software\DataMngr_Toolbar Key Deleted : HKCU\Software\IM Key Deleted : HKCU\Software\ImInstaller Key Deleted : HKCU\Software\ParetoLogic Key Deleted : HKCU\Software\Softonic Key Deleted : HKCU\Software\Webplayer Key Deleted : HKCU\Software\AppDataLow\Software\searchqutoolbar Key Deleted : HKLM\Software\Bandoo Key Deleted : HKLM\Software\Minibar Key Deleted : HKLM\Software\ParetoLogic Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\bi_uninstaller Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\FilesFrog Update Checker Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\FLV Player Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\hblitesa Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\QueryExplorer Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Toolbar Cleaner Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\wnlt Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4 Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094 Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536 ***** [ Browsers ] ***** -\\ Internet Explorer v9.0.8112.16526 -\\ Mozilla Firefox v15.0 (nl) [ File : C:\Users\pieter en anja\AppData\Roaming\Mozilla\Firefox\Profiles\iy4wii2d.default\prefs.js ] Line Deleted : user_pref("browser.search.defaultengine", "Ask.com Search"); Line Deleted : user_pref("extensions.BabylonToolbar.admin", false); Line Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Line Deleted : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}"); Line Deleted : user_pref("extensions.BabylonToolbar.autoRvrt", "false"); Line Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "nl"); Line Deleted : user_pref("extensions.BabylonToolbar.excTlbr", false); Line Deleted : user_pref("extensions.BabylonToolbar.ffxUnstlRst", true); Line Deleted : user_pref("extensions.BabylonToolbar.id", "78aa10880000000000000024211f2c6c"); Line Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15998"); Line Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Line Deleted : user_pref("extensions.BabylonToolbar.newTab", false); Line Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Line Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Line Deleted : user_pref("extensions.BabylonToolbar.rvrt", "false"); Line Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none"); Line Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "base"); Line Deleted : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=78aa10880000000000000024211f2c6c&q="); Line Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.8.24.6"); Line Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.8.24.612:14:08"); Line Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.8.24.6"); Line Deleted : user_pref("extensions.BabylonToolbar_i.babExt", ""); Line Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=125056&tsp=5041"); Line Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Line Deleted : user_pref("extensions.kango.storage.m2_k1", "1"); Line Deleted : user_pref("extensions.kango.storage.m2_k2", "0"); Line Deleted : user_pref("extensions.kango.storage.m2_k3", "1388593880060"); Line Deleted : user_pref("extensions.kango.storage.m2_k4", "0"); Line Deleted : user_pref("extensions.kango.storage.m2_k5", "1388601702017"); Line Deleted : user_pref("extensions.kango.storage.minibar.config", "{\"name\":\"Apps Hat\",\"description\":\"Apps Hat\",\"button\":{\"tooltip\":\"Visit AppsHat.com\",\"icon\":\"hxxp://www.bigspeedpro.com/button/%af[...] Line Deleted : user_pref("extensions.kango.storage.nero_options", "\"{\\\"m1\\\":{\\\"ads\\\":{\\\"n1\\\":{\\\"url\\\":\\\"//ulayout.com/nero/hatter/google_post_results_728x90.html?aff_slug=appshat\\\",\\\"width\\\"[...] Line Deleted : user_pref("extensions.kango.storage.ui.button.iconCache", "\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAYAAAByUDbMAAADlElEQVQ4jb3S3U9adxwG8F/BuooQAQscXj0cOIC8nANUPYjoHDClvqAoZ04gpqsZKmrUV[...] Line Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://search.bearshare.com/"); Line Deleted : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?ptr=100&crg=3.1010000.10039&barid={348CF36A-BE5D-11E2-B5A9-0024211F2C6C}"); -\\ Google Chrome v31.0.1650.63 [ File : C:\Users\pieter en anja\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [11867 octets] - [04/01/2014 14:52:27] AdwCleaner[S0].txt - [12090 octets] - [04/01/2014 14:53:41] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12151 octets] ##########