# AdwCleaner v4.208 - Logfile created 14/07/2015 at 12:09:59 # Updated 09/07/2015 by Xplode # Database : 2015-07-11.1 [Server] # Operating system : Windows (TM) Vista Home Premium Service Pack 2 (x64) # Username : Zakelijk - Estate Pl - PC_VAN_FREDERIC # Running from : C:\Users\Zakelijk - Estate Pl\Desktop\adwcleaner_4.208.exe # Option : Cleaning ***** [ Services ] ***** ***** [ Files / Folders ] ***** [!] Folder Deleted : C:\ProgramData\PC Drivers HeadQuarters [!] Folder Deleted : C:\ProgramData\ytd video downloader [!] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader [!] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plus500 [!] Folder Deleted : C:\Program Files (x86)\DAEMON Tools Toolbar [!] Folder Deleted : C:\Program Files (x86)\WinZip Registry Optimizer [!] Folder Deleted : C:\Program Files (x86)\freecordertoolbar [!] Folder Deleted : C:\Program Files (x86)\Optimizer Pro [!] Folder Deleted : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\HPAppData [!] Folder Deleted : C:\Users\Frederic\AppData\Local\PackageAware [!] Folder Deleted : C:\Users\Frederic\AppData\LocalLow\AVG Secure Search [!] Folder Deleted : C:\Users\Frederic\AppData\LocalLow\HPAppData [!] Folder Deleted : C:\Users\Frederic\AppData\Roaming\HPAppData [!] Folder Deleted : C:\Users\Frederic\AppData\Roaming\pdfforge [!] Folder Deleted : C:\Users\Gast\AppData\LocalLow\HPAppData [!] Folder Deleted : C:\Users\Gast\AppData\Roaming\HPAppData [!] Folder Deleted : C:\Users\Zakelijk - Estate Pl\AppData\Local\Conduit [!] Folder Deleted : C:\Users\Zakelijk - Estate Pl\AppData\Local\Plus500 [!] Folder Deleted : C:\Users\Zakelijk - Estate Pl\AppData\LocalLow\Conduit [!] Folder Deleted : C:\Users\Zakelijk - Estate Pl\AppData\LocalLow\HPAppData [!] Folder Deleted : C:\Users\Zakelijk - Estate Pl\AppData\LocalLow\freecordertoolbar [!] Folder Deleted : C:\Users\Zakelijk - Estate Pl\AppData\Roaming\registry mechanic [!] Folder Deleted : C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Systweak [!] Folder Deleted : C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plus500 [!] Folder Deleted : C:\Users\Zakelijk - Estate Pl\Documents\Optimizer Pro File Deleted : C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Mozilla\Firefox\Profiles\09qkd4zr.default\Extensions\ytvdw@pgport.com.xpi File Deleted : C:\Windows\System32\roboot64.exe File Deleted : C:\Users\Frederic\AppData\Roaming\NGEN_AppLog_Install.txt File Deleted : C:\Users\Frederic\AppData\Roaming\NGEN_AppLog_Uninstall.txt File Deleted : C:\Users\Zakelijk - Estate Pl\AppData\Roaming\NGEN_AppLog_Install.txt File Deleted : C:\Users\Zakelijk - Estate Pl\AppData\Roaming\NGEN_AppLog_Uninstall.txt File Deleted : C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Mozilla\Firefox\Profiles\09qkd4zr.default\user.js ***** [ Scheduled tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 Key Deleted : HKLM\SOFTWARE\Classes\SDP Key Deleted : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C5D332F5-F6C8-4845-BD6C-937838BA907F}] Key Deleted : HKCU\Software\APN PIP Key Deleted : HKCU\Software\Ask&Record Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\PIP Key Deleted : HKCU\Software\Softonic Key Deleted : HKCU\Software\Zugo Key Deleted : HKCU\Software\AppDataLow\Software\Conduit Key Deleted : HKCU\Software\AppDataLow\Software\Show-Password Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Key Deleted : HKLM\SOFTWARE\Conduit Key Deleted : HKLM\SOFTWARE\dt soft\daemon tools toolbar Key Deleted : HKLM\SOFTWARE\PIP Key Deleted : HKLM\SOFTWARE\SimplyGen Key Deleted : HKLM\SOFTWARE\systweak Key Deleted : HKU\.DEFAULT\Software\AVG Secure Search Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3D2C9DE6-9ADE-4252-A241-E43723B0CE02} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RegClean Pro_is1 Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7} Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9 Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24 Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607 Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21 Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - 127.0.0.1:9666 Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - 127.0.0.1 ***** [ Web browsers ] ***** -\\ Internet Explorer v9.0.8112.16659 -\\ Mozilla Firefox v37.0.1 (x86 nl) [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("CT2865317.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("CT2865317.embeddedsData", "[{\"appId\":\"129363015615338104\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...] [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("CT2865317.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.avg.com%2Fnl-nl%2Finstaller-issue%3Fdata%3Ddj0zJm9zPVdWU0gwMlhYNjQmdmVyPTE1LjAuNjA4MSZwd[...] [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("CT2865317.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentBarNL.OurToolbar.com//xpi\"}"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("CT2865317.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentBar_NL \"}"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("CT2865317.smartbar.CTID", "CT2865317"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("CT2865317.smartbar.Uninstall", "0"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("CT2865317.smartbar.homepage", true); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("CT2865317.smartbar.toolbarName", "uTorrentBar_NL "); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("Smartbar.TBHomepagesList", "hxxp://search.conduit.com/?ctid=CT2865317&octid=CT2865317&CUI=UN46753099987490671&UM=1&SearchSource=13"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("Smartbar.TBSearchEngineList", ""); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("Smartbar.TBSearchUrlList", ""); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT2865317"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "uTorrentBar_NL Customized Web Search"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT2865317"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT2865317&octid=CT2865317&CUI=UN46753099987490671&UM=1&SearchSource=13"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2865317&octid=CT2865317&CUI=UN46753099987490671&UM=1&SearchSource=2&q=,hxxp://trovi.com/ResultsExt.a[...] [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT2865317"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("smartbar.homePageOwnerCTID", "CT2865317"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("smartbar.homepageList", "hxxp://search.conduit.com/?ctid=CT2865317&octid=CT2865317&CUI=UN46753099987490671&UM=1&SearchSource=13"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("smartbar.machineId", "K0XN/+XNPCQVBTCN0TNXK4AGZHUPBJTOKO3NDXWGPTVOVBJWWE2A4TUQC7DCMJWRL/0OPZHDVCND87TSA5+NNQ"); [09qkd4zr.default\prefs.js] - Line Deleted : user_pref("smartbar.searchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2865317&octid=CT2865317&CUI=UN46753099987490671&UM=1&SearchSource=2&q=,hxxp://trovi.com/ResultsExt.aspx?cti[...] -\\ Google Chrome v43.0.2357.132 [C:\Users\Frederic\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.avg.com/search?cid={8DB27B83-84E3-43F4-89EB-55A641678F52}&mid=ae02502950fe47d1bd06d15171e0f39b-a70e45fa307e0b916c2cafb8b354da389a2c532e&lang=nl&ds=is015&pr=sa&d=2012-02-24 13:31:39&v=10.2.0.3&sap=dsp&q={searchTerms} -\\ Chromium v ************************* AdwCleaner[R0].txt - [10950 bytes] - [14/07/2015 11:45:32] AdwCleaner[S0].txt - [10314 bytes] - [14/07/2015 12:09:59] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10374 bytes] ##########