# AdwCleaner v4.202 - Logfile created 27/04/2015 at 11:57:31 # Updated 23/04/2015 by Xplode # Database : 2015-04-23.2 [Server] # Operating system : Windows 7 Home Premium Service Pack 1 (x64) # Username : Tanju - TANJU-PC # Running from : E:\Downloads\adwcleaner_4.202.exe # Option : Scan ***** [ Services ] ***** Service Found : IHProtect Service Service Found : WindowsMangerProtect ***** [ Files / Folders ] ***** File Found : C:\Users\Tanju\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niloccemoadcdkdjlinkgdfekeahmflj_0.localstorage File Found : C:\Users\Tanju\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niloccemoadcdkdjlinkgdfekeahmflj_0.localstorage-journal Folder Found : C:\Program Files (x86)\XTab Folder Found : C:\ProgramData\IHProtectUpDate Folder Found : C:\ProgramData\WindowsMangerProtect Folder Found : C:\Users\Tanju\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim Folder Found : C:\Users\Tanju\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj ***** [ Scheduled tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Data Found : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.luckysearches.com/?type=sc&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE Key Found : HKCU\Software\APN PIP Key Found : HKCU\Software\AppDataLow\Software\adawarebp Key Found : HKCU\Software\HomeTab Key Found : HKCU\Software\Linkey Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance Key Found : HKCU\Software\SearchProtectWS Key Found : HKCU\Software\simplytech Key Found : HKCU\Software\TNT2 Key Found : HKCU\Software\WajIntEnhance Key Found : [x64] HKCU\Software\APN PIP Key Found : [x64] HKCU\Software\HomeTab Key Found : [x64] HKCU\Software\Linkey Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Found : [x64] HKCU\Software\SearchProtectWS Key Found : [x64] HKCU\Software\simplytech Key Found : [x64] HKCU\Software\TNT2 Key Found : [x64] HKCU\Software\WajIntEnhance Key Found : HKLM\SOFTWARE\AskPartnerNetwork Key Found : HKLM\SOFTWARE\Conduit Key Found : HKLM\SOFTWARE\IHProtect Key Found : HKLM\SOFTWARE\Iminent Key Found : HKLM\SOFTWARE\luckysearchesSoftware Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance Key Found : HKLM\SOFTWARE\SearchProtect Key Found : HKLM\SOFTWARE\SpeedBit Key Found : HKLM\SOFTWARE\SupDp Key Found : HKLM\SOFTWARE\supWindowsMangerProtect Key Found : HKLM\SOFTWARE\WajIntEnhance Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} ***** [ Web browsers ] ***** -\\ Internet Explorer v8.0.7601.17514 Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.luckysearches.com/?type=hp&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.luckysearches.com/?type=hp&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.luckysearches.com/web/?type=ds&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE&q={searchTerms} Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.luckysearches.com/?type=hp&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.luckysearches.com/?type=hp&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.luckysearches.com/web/?type=ds&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE&q={searchTerms} Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.luckysearches.com/web/?type=ds&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE&q={searchTerms} Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.luckysearches.com/?type=hp&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.luckysearches.com/?type=hp&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.luckysearches.com/web/?type=ds&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE&q={searchTerms} -\\ Google Chrome v42.0.2311.90 [C:\Users\Tanju\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : niloccemoadcdkdjlinkgdfekeahmflj [C:\Users\Tanju\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : mfhnkgpdlogbknkhlgdjlejeljbhflim [C:\Users\Tanju\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Homepage] : hxxp://www.luckysearches.com/?type=sy&ts=1430127893&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE [C:\Users\Tanju\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Startup_URLs] : chrome://apps/", "hxxp://www.luckysearches.com/?type=hp&ts=1430127867&from=amt&uid=ST3500830AS_9QG4AWNEXXXX9QG4AWNE [C:\Users\Tanju\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Default_Search_Provider_Data] : {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}{google:contextualSearchVersion}ie={inputEncoding}", "usage_count": 0 } }, "extensions": { "settings": { "aapocclcgogkmnckokdopfmhonfmgoek": { "ack_external": true, "active_permissions": { "api": [ ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "zm", "commands": { }, "content_settings": [ ], "creation_flags": 137, "events": [ ], "extension_can_script_all_urls": true, "from_bookmark": false, "from_webstore": true, "granted_permissions": { "api": [ ], "manifest_permissions": [ ] }, "incognito_content_settings": [ ], "incognito_preferences": { }, "initial_keybindings_set": true, "install_time": "13074536425683785", "lastpingday": "13074591603085903", "location": 1, "manifest": { "api_console_project_id": "889782162350", "app": { "launch": { "local_path": "main.html" } }, "container": "GOOGLE_DRIVE", "current_locale": "nl", "default_locale": "en_US", "description": "Presentaties maken en bewerken", "icons": { "128": "icon_128.png", "16": "icon_16.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLOGW2Hoztw8m2z6SmCjm7y4Oe2o6aRqO+niYKCXhZab572by7acqFIFF0On3e3a967SwNijsTx2n+7Mt3KqWzEKtnwUZqzHYSsdZZK64vWIHIduawP0EICWRMf2RGIBEdDC6I1zErtcDiSrJWeRlnb0DHWXDXlt1YseM7RiON9wIDAQAB", "manifest_version": 2, "name": "Google Presentaties", "offline_enabled": true, "update_url": "hxxps://clients2.google.com/service/update2/crx", "version": "0.9" }, "page_ordinal": "n", "path": "aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", "preferences": { }, "regular_only_preferences": { }, "state": 1, "was_installed_by_default": true, "was_installed_by_oem": false }, "ahfgeienlihckogmohjhadlkjgocpleb": { "active_permissions": { "api": [ "management", "system.display", "system.storage", "webstorePrivate", "system.cpu", "system.memory", "system.network" ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "t", "commands": { }, "content_settings": [ ], "creation_flags": 1, "events": [ ], "extension_can_script_all_urls": true, "from_bookmark": false, "from_webstore": false, "incognito_content_settings": [ ], "incognito_preferences": { }, "install_time": "13074536422717651", "location": 5, "manifest": { "app": { "launch": { "web_url": "hxxps://chrome.google.com/webstore" }, "urls": [ "hxxps://chrome.google.com/webstore" ] }, "description": "Ontdek fantastische apps, games, extensies en thema's voor Google Chrome.", "icons": { "128": "webstore_icon_128.png", "16": "webstore_icon_16.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB", "name": "Web Store", "permissions": [ "webstorePrivate", "management", "system.cpu", "system.display", "system.memory", "system.network", "system.storage" ], "version": "0.2" }, "page_ordinal": "n", "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\42.0.2311.90\\resources\\web_store", "preferences": { }, "regular_only_preferences": { }, "state": 1, "was_installed_by_default": false, "was_installed_by_oem": false }, "aohghmighlieiainnegkcijnfilokake": { "ack_external": true, "active_permissions": { "api": [ ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "w", "commands": { }, "content_settings": [ ], "creation_flags": 137, "events": [ ], "extension_can_script_all_urls": true, "from_bookmark": false, "from_webstore": true, "granted_permissions": { "api": [ ], "manifest_permissions": [ ] }, "incognito_content_settings": [ ], "incognito_preferences": { }, "initial_keybindings_set": true, "install_time": "13074536427329835", "lastpingday": "13074591603085903", "location": 1, "manifest": { "api_console_project_id": "619683526622", "app": { "launch": { "local_path": "main.html" } }, "container": "GOOGLE_DRIVE", "current_locale": "nl", "default_locale": "en_US", "description": "Documenten maken en bewerken", "icons": { "128": "icon_128.png", "16": "icon_16.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB", "manifest_version": 2, "name": "Google Documenten", "offline_enabled": true, "update_url": "hxxps://clients2.google.com/service/update2/crx", "version": "0.9" }, "page_ordinal": "n", "path": "aohghmighlieiainnegkcijnfilokake\\0.9_0", "preferences": { }, "regular_only_preferences": { }, "state": 1, "was_installed_by_default": true, "was_installed_by_oem": false }, "apdfllckaahabafndbhieahigkjlhalf": { "ack_external": true, "active_permissions": { "api": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "yn", "commands": { }, "content_settings": [ ], "creation_flags": 137, "events": [ ], "from_bookmark": false, "from_webstore": true, "granted_permissions": { "api": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ], "manifest_permissions": [ ] }, "incognito_content_settings": [ ], "incognito_preferences": { }, "install_time": "13074536425962367", "lastpingday": "13074591603085903", "location": 1, "manifest": { "app": { "launch": { "web_url": "hxxps://drive.google.com/?usp=chrome_app" }, "urls": [ "hxxp://docs.google.com/", "hxxp://drive.google.com/", "hxxps://docs.google.com/", "hxxps://drive.google.com/" ] }, "background": { "allow_js_access": false }, "current_locale": "nl", "default_locale": "en_US", "description": "Google Drive: alles op één plek maken, delen en bewaren.", "icons": { "128": "128.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIl5KlKwL2TSkntkpY3naLLz5jsN0YwjhZyObcTOK6Nda4Ie21KRqZau9lx5SHcLh7pE2/S9OiArb+na2dn7YK5EvH+aRXS1ec3uxVlBhqLdnleVgwgwlg5fH95I52IeHcoeK6pR4hW/Nv39GNlI/Uqk6O6GBCCsAxYrdxww9BiQIDAQAB", "manifest_version": 2, "name": "Google Drive", "offline_enabled": true, "options_page": "hxxps://drive.google.com/settings", "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ], "update_url": "hxxps://clients2.google.com/service/update2/crx", "version": "6.4" }, "page_ordinal": "n", "path": "apdfllckaahabafndbhieahigkjlhalf\\6.4_0", "preferences": { }, "regular_only_preferences": { }, "state": 1, "was_installed_by_default": true, "was_installed_by_oem": false }, "bepbmhgboaologfdajaanbcjmnhjmhfn": { "disable_reasons": 1, "state": 0 }, "blpcfgokakmgnkcojhhkbfbldkacnbeo": { "ack_external": true, "active_permissions": { "api": [ ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "z", "commands": { }, "content_settings": [ ], "creation_flags": 153, "events": [ ], "from_bookmark": true, "from_webstore": true, "granted_permissions": { "api": [ ], "manifest_permissions": [ ] }, "incognito_content_settings": [ ], "incognito_preferences": { }, "install_time": "13074536426253511", "lastpingday": "13074591603085903", "location": 1, "manifest": { "app": { "launch": { "container": "tab", "web_url": "hxxp://www.youtube.com/?feature=ytca" }, "web_content": { "enabled": true, "origin": "hxxp://www.youtube.com" } }, "current_locale": "nl", "default_locale": "en", "description": "'s Werelds populairste online video community.", "icons": { "128": "128.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB", "manifest_version": 2, "name": "YouTube", "update_url": "hxxp://clients2.google.com/service/update2/crx", "version": "4.2.7" }, "page_ordinal": "n", "path": "blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.7_0", "preferences": { }, "regular_only_preferences": { }, "state": 1, "was_installed_by_default": true, "was_installed_by_oem": false }, "coobgpohoikkiipiblmjeljniedjpjpf": { "ack_external": true, "active_permissions": { "api": [ ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "y", "commands": { }, "content_settings": [ ], "creation_flags": 153, "events": [ ], "from_bookmark": true, "from_webstore": true, "granted_permissions": { "api": [ ], "manifest_permissions": [ ] }, "incognito_content_settings": [ ], "incognito_preferences": { }, "install_time": "13074536426702489", "lastpingday": "13074591603085903", "location": 1, "manifest": { "app": { "launch": { "web_url": "hxxp://www.google.com/webhp?source=search_app" }, "urls": [ "*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres" ] }, "current_locale": "nl", "default_locale": "en", "description": "The fastest way to search the web. ************************* AdwCleaner[R0].txt - [20495 bytes] - [27/04/2015 11:57:31] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [20555 bytes] ##########