# AdwCleaner v3.007 - Report created 10/10/2013 at 15:09:02 # Updated 09/10/2013 by Xplode # Operating System : Windows Vista (TM) Business Service Pack 2 (32 bits) # Username : ldv - PC_VAN_LDV # Running from : D:\Users\ldv\Downloads\adwcleaner.exe # Option : Scan ***** [ Services ] ***** Service Found : winzipersvc ***** [ Files / Folders ] ***** File Found : C:\Program Files\Mozilla Firefox\searchplugins\Babylon.xml File Found : C:\Program Files\Mozilla Firefox\searchplugins\qvo6.xml File Found : C:\Program Files\Mozilla Firefox\searchplugins\Search_Results.xml File Found : C:\Users\ldv\AppData\Roaming\Mozilla\Firefox\Profiles\wiqftbrl.default\Extensions\firefox@browsefox.com.xpi File Found : C:\Users\ldv\AppData\Roaming\Mozilla\Firefox\Profiles\wiqftbrl.default\invalidprefs.js File Found : C:\Users\ldv\AppData\Roaming\Mozilla\Firefox\Profiles\wiqftbrl.default\searchplugins\delta.xml File Found : C:\Users\ldv\AppData\Roaming\Mozilla\Firefox\Profiles\wiqftbrl.default\searchplugins\Search_Results.xml File Found : C:\Users\ldv\AppData\Roaming\Mozilla\Firefox\Profiles\wiqftbrl.default\searchplugins\WebSearch.xml File Found : C:\Users\ldv\AppData\Roaming\Mozilla\Firefox\Profiles\wiqftbrl.default\user.js File Found : C:\Windows\System32\Tasks\Omiga Plus RunAsStdUser Folder Found : C:\Users\ldv\AppData\Local\Google\Chrome\User Data\Default\Extensions\figfnoieeipddlnhkkcmpobaimcfhjam Folder Found C:\Program Files\Common Files\337 Folder Found C:\Program Files\continuetosave Folder Found C:\Program Files\MyPC Backup Folder Found C:\Program Files\MyPC Backup Folder Found C:\Program Files\Omiga Plus Folder Found C:\Program Files\optimizer pro Folder Found C:\Program Files\SweetIM Folder Found C:\Program Files\WebSearch Folder Found C:\Program Files\WinZipper Folder Found C:\ProgramData\apn Folder Found C:\ProgramData\Babylon Folder Found C:\ProgramData\BetterSoft Folder Found C:\ProgramData\cuontinuyetoysauve Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cuontinuyetoysauve Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cuontinuyetoysauve Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SearchNewTab Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SearchNewTab Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper Folder Found C:\ProgramData\StarApp Folder Found C:\Users\ldv\AppData\Local\cool_mirage Folder Found C:\Users\ldv\AppData\Local\PutLockerDownloader Folder Found C:\Users\ldv\AppData\LocalLow\cuontinuyetoysauve Folder Found C:\Users\ldv\AppData\LocalLow\SearchNewTab Folder Found C:\Users\ldv\AppData\Roaming\337 Folder Found C:\Users\ldv\AppData\Roaming\goforfiles Folder Found C:\Users\ldv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com Folder Found C:\Users\ldv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PutLockerDownloader.com Folder Found C:\Users\ldv\AppData\Roaming\Mozilla\Firefox\Profiles\wiqftbrl.default\jetpack Folder Found C:\Users\ldv\AppData\Roaming\NCdownloader Folder Found C:\Users\ldv\AppData\Roaming\Omiga Plus Folder Found C:\Users\ldv\AppData\Roaming\Systweak Folder Found C:\Users\ldv\AppData\Roaming\WinZipper Folder Found C:\Windows\system32\WNLT ***** [ Shortcuts ] ***** Shortcut Found : C:\Users\Public\Desktop\Google Chrome.lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&utm_campaign=eXQ&utm_content=sc&from=ild&uid=WDCXWD3200AAJS-00B4A0_WD-WCAT1739409294092&ts=1378884220 ) Shortcut Found : C:\Users\Public\Desktop\Mozilla Firefox.lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&utm_campaign=eXQ&utm_content=sc&from=ild&uid=WDCXWD3200AAJS-00B4A0_WD-WCAT1739409294092&ts=1378884220 ) Shortcut Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&utm_campaign=eXQ&utm_content=sc&from=ild&uid=WDCXWD3200AAJS-00B4A0_WD-WCAT1739409294092&ts=1378884220 ) Shortcut Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Identity Safe\Norton Identity Safe.lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&utm_campaign=eXQ&utm_content=sc&from=ild&uid=WDCXWD3200AAJS-00B4A0_WD-WCAT1739409294092&ts=1378884220 ) Shortcut Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&utm_campaign=eXQ&utm_content=sc&from=ild&uid=WDCXWD3200AAJS-00B4A0_WD-WCAT1739409294092&ts=1378884220 ) Shortcut Found : C:\Users\ldv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&utm_campaign=eXQ&utm_content=sc&from=ild&uid=WDCXWD3200AAJS-00B4A0_WD-WCAT1739409294092&ts=1378884220 ) Shortcut Found : C:\Users\ldv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&utm_campaign=eXQ&utm_content=sc&from=ild&uid=WDCXWD3200AAJS-00B4A0_WD-WCAT1739409294092&ts=1378884220 ) Shortcut Found : C:\Users\ldv\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&utm_campaign=eXQ&utm_content=sc&from=ild&uid=WDCXWD3200AAJS-00B4A0_WD-WCAT1739409294092&ts=1378884220 ) Shortcut Found : C:\Users\ldv\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&utm_campaign=eXQ&utm_content=sc&from=ild&uid=WDCXWD3200AAJS-00B4A0_WD-WCAT1739409294092&ts=1378884220 ) Shortcut Found : C:\Users\ldv\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk ( hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&utm_campaign=eXQ&utm_content=sc&from=ild&uid=WDCXWD3200AAJS-00B4A0_WD-WCAT1739409294092&ts=1378884220 ) ***** [ Registry ] ***** Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~1\contin~1\sprote~1.dll Key Found : HKCU\Software\AppDataLow\Software\Crossrider Key Found : HKCU\Software\BrowseFox Key Found : HKCU\Software\Conduit Key Found : HKCU\Software\ilivid Key Found : HKCU\Software\ImInstaller Key Found : HKCU\Software\installedbrowserextensions Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C1C6816E-CBB3-A748-85F9-A8B47B68985B} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowseFox Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\OptimizerPro Key Found : HKCU\Software\Softonic Key Found : HKLM\Software\Babylon Key Found : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339} Key Found : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Key Found : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC} Key Found : HKLM\SOFTWARE\Classes\FTDownloader Key Found : HKLM\SOFTWARE\Classes\Prod.cap Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 Key Found : HKLM\SOFTWARE\Classes\PutLockerDownloader Key Found : HKLM\SOFTWARE\Classes\TypeLib\{AC329328-7EC4-4C34-B672-0A2B90CB9B00} Key Found : HKLM\Software\Conduit Key Found : HKLM\Software\DataMngr Key Found : HKLM\Software\Desksvc Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\bbffdhejhaoiflnpooogkckfdcmmjppn Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ppdjnkblmcjfnlogjjhpigpdgpcgdpll Key Found : HKLM\Software\iLividSRTB Key Found : HKLM\Software\InstallIQ Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{377E5D4D-77E5-476A-8716-7E70A9272DA0} Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\Omiga Plus RunAsStdUser Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\Omiga Plus RunAsStdUser Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Omiga Plus RunAsStdUser Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094 Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_09b71135 Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_b0285714 Key Found : HKLM\Software\omigaplusSvc Key Found : HKLM\Software\SP Global Key Found : HKLM\Software\SProtector Key Found : HKLM\Software\systweak Key Found : HKLM\Software\Tarma Installer Key Found : HKLM\Software\V9 Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc ***** [ Browsers ] ***** -\\ Internet Explorer v9.0.8112.16514 -\\ Mozilla Firefox v24.0 (nl) [ File : C:\Users\ldv\AppData\Roaming\Mozilla\Firefox\Profiles\wiqftbrl.default\prefs.js ] Line Found : user_pref("aol_toolbar.default.homepage.check", false); Line Found : user_pref("aol_toolbar.default.search.check", false); Line Found : user_pref("browser.search.defaultenginename", "qvo6"); Line Found : user_pref("browser.search.defaulturl", "hxxp://websearch.searchrocket.info/?pid=964&r=2013/05/24&hid=2848929252&lg=EN&cc=BE&unqvl=16&l=1&q="); Line Found : user_pref("browser.search.order.1", "qvo6"); Line Found : user_pref("browser.search.selectedEngine", "qvo6"); Line Found : user_pref("extensions.519f5982c9dce.scode", "if(window.self.location.protocol.indexOf('hxxp')>-1 && window.self==window.top){var script=document.createElement('script');script.type='text/javascript';s[...] Line Found : user_pref("extensions.BabylonToolbar.prtkDS", 0); Line Found : user_pref("extensions.BabylonToolbar.prtkHmpg", 0); Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.backgroundjs", "\n\nappAPI.ready(function(k){function e(){appAPI.request.get({url:\"hxxp://\"+h.ap[...] Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.js", "\n\n /************************************************************************************\[...] Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...] Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.plugins.plugin_13.name", "CrossriderAppUtils"); Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.plugins.plugin_14.name", "CrossriderUtils"); Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _[...] Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1[...] Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...] Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...] Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...] Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...] Line Found : user_pref("extensions.a05dd836e2cbd42049ff32f8a8665967da8876730fb0c4057a2fcf9c09d438e81com35382.35382.plugins.plugin_78.name", "CrossriderInfo"); Line Found : user_pref("extensions.crossrider.bic", "14034a11fd996f2d5a168e97b186c805"); Line Found : user_pref("extensions.delta.admin", false); Line Found : user_pref("extensions.delta.aflt", "babsst"); Line Found : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); Line Found : user_pref("extensions.delta.autoRvrt", "false"); Line Found : user_pref("extensions.delta.dfltLng", "en"); Line Found : user_pref("extensions.delta.excTlbr", false); Line Found : user_pref("extensions.delta.ffxUnstlRst", true); Line Found : user_pref("extensions.delta.id", "140620f4000000000000002197a20584"); Line Found : user_pref("extensions.delta.instlDay", "15821"); Line Found : user_pref("extensions.delta.instlRef", "sst"); Line Found : user_pref("extensions.delta.newTab", false); Line Found : user_pref("extensions.delta.prdct", "delta"); Line Found : user_pref("extensions.delta.prtnrId", "delta"); Line Found : user_pref("extensions.delta.rvrt", "false"); Line Found : user_pref("extensions.delta.smplGrp", "none"); Line Found : user_pref("extensions.delta.tlbrId", "base"); Line Found : user_pref("extensions.delta.tlbrSrchUrl", ""); Line Found : user_pref("extensions.delta.vrsn", "1.8.16.16"); Line Found : user_pref("extensions.delta.vrsnTs", "1.8.16.1620:12:29"); Line Found : user_pref("extensions.delta.vrsni", "1.8.16.16"); Line Found : user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,buzzdock,YontooNewOffers"); Line Found : user_pref("extentions.y2layers.installId", "1104314e-7173-4320-a30d-621cb65aae04"); Line Found : user_pref("keyword.URL", "hxxp://websearch.searchrocket.info/?pid=964&r=2013/05/24&hid=2848929252&lg=EN&cc=BE&unqvl=16&l=1&q="); Line Found : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", ""); Line Found : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", ""); Line Found : user_pref("sweetim.toolbar.previous.browser.startup.homepage", ""); Line Found : user_pref("sweetim.toolbar.previous.keyword.URL", ""); Line Found : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ""); Line Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", ""); Line Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", ""); Line Found : user_pref("sweetim.toolbar.searchguard.enable", ""); -\\ Google Chrome v30.0.1599.69 [ File : C:\Users\ldv\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [15991 octets] - [10/10/2013 15:09:02] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [16052 octets] ########## # AdwCleaner v3.022 - Report created 23/03/2014 at 10:29:48 # Updated 13/03/2014 by Xplode # Operating System : Windows Vista (TM) Business Service Pack 2 (32 bits) # Username : ldv - PC_VAN_LDV # Running from : C:\Users\ldv\Downloads\adwcleaner.exe # Option : Scan ***** [ Services ] ***** ***** [ Files / Folders ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Found : HKLM\Software\SafetyNut ***** [ Browsers ] ***** -\\ Internet Explorer v9.0.8112.16540 -\\ Mozilla Firefox v27.0.1 (nl) [ File : C:\Users\ldv\AppData\Roaming\Mozilla\Firefox\Profiles\wiqftbrl.default\prefs.js ] -\\ Google Chrome v33.0.1750.154 [ File : C:\Users\ldv\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [16927 octets] - [10/10/2013 14:09:02] AdwCleaner[R1].txt - [1014 octets] - [10/10/2013 14:20:45] AdwCleaner[R2].txt - [1395 octets] - [10/10/2013 14:41:58] AdwCleaner[R3].txt - [1379 octets] - [10/10/2013 14:50:00] AdwCleaner[R4].txt - [4741 octets] - [11/10/2013 17:48:08] AdwCleaner[R5].txt - [5749 octets] - [19/03/2014 21:52:57] AdwCleaner[S0].txt - [14817 octets] - [10/10/2013 14:09:34] AdwCleaner[S1].txt - [1075 octets] - [10/10/2013 14:21:26] AdwCleaner[S2].txt - [1466 octets] - [10/10/2013 14:43:32] AdwCleaner[S3].txt - [4724 octets] - [11/10/2013 17:48:53] AdwCleaner[S4].txt - [5769 octets] - [19/03/2014 21:53:33] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [17589 octets] ##########