# AdwCleaner v2.112 - Logfile created 02/13/2013 at 08:03:29 # Updated 10/02/2013 by Xplode # Operating system : Windows 7 Home Premium Service Pack 1 (64 bits) # User : MimaR - MIMA-HP # Boot Mode : Normal # Running from : C:\Users\Mima\Downloads\adwcleaner0.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk File Deleted : C:\Users\MimaR\AppData\Roaming\Mozilla\Firefox\Profiles\6yqhxmxd.default\searchplugins\delta.xml File Deleted : C:\Users\Public\Desktop\eBay.lnk Folder Deleted : C:\Program Files (x86)\Conduit Folder Deleted : C:\ProgramData\APN Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\ProgramData\Tarma Installer Folder Deleted : C:\Users\MimaR\AppData\Local\Conduit Folder Deleted : C:\Users\MimaR\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcfjehbfanfhgoehogmbiebedkidedjb Folder Deleted : C:\Users\MimaR\AppData\LocalLow\Conduit Folder Deleted : C:\Users\MimaR\AppData\LocalLow\Delta Folder Deleted : C:\Users\MimaR\AppData\Roaming\Babylon ***** [Registry] ***** Key Deleted : HKCU\Software\1ClickDownload Key Deleted : HKCU\Software\AppDataLow\Software\Conduit Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar Key Deleted : HKCU\Software\Cr_Installer Key Deleted : HKCU\Software\Google\Chrome\Extensions\bcfjehbfanfhgoehogmbiebedkidedjb Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Key Deleted : HKCU\Software\StartSearch Key Deleted : HKLM\Software\Babylon Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C} Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2612669 Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_install_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_install_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5} Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bcfjehbfanfhgoehogmbiebedkidedjb Key Deleted : HKLM\SOFTWARE\Tarma Installer ***** [Internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16464 Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119294&babsrc=HP_ss&mntrId=e0e24126000000000000ac8112132cbe --> hxxp://www.google.com -\\ Mozilla Firefox v18.0.2 (en-US) File : C:\Users\Mima\AppData\Roaming\Mozilla\Firefox\Profiles\rwtu9tsy.default\prefs.js [OK] File is clean. File : C:\Users\MimaR\AppData\Roaming\Mozilla\Firefox\Profiles\6yqhxmxd.default\prefs.js C:\Users\MimaR\AppData\Roaming\Mozilla\Firefox\Profiles\6yqhxmxd.default\user.js ... Deleted ! Deleted : user_pref("CT2612669_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...] Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C[...] Deleted : user_pref("ct2612669.UserID", "UN11932532683142296"); Deleted : user_pref("extensions.BabylonToolbar.admin", false); Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Deleted : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}"); Deleted : user_pref("extensions.BabylonToolbar.autoRvrt", "false"); Deleted : user_pref("extensions.BabylonToolbar.bbDpng", "9"); Deleted : user_pref("extensions.BabylonToolbar.cntry", "US"); Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "en"); Deleted : user_pref("extensions.BabylonToolbar.dpkLst", ""); Deleted : user_pref("extensions.BabylonToolbar.excTlbr", false); Deleted : user_pref("extensions.BabylonToolbar.ffxUnstlRst", true); Deleted : user_pref("extensions.BabylonToolbar.hdrMd5", "78B6F9728E5E14C9CA84045C56BA42DB"); Deleted : user_pref("extensions.BabylonToolbar.id", "e0e24126000000000000ac8112132cbe"); Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15745"); Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.8.11.1023:23:23"); Deleted : user_pref("extensions.BabylonToolbar.newTab", false); Deleted : user_pref("extensions.BabylonToolbar.pnu_uninst", "{\"newVrsn\":\"7\",\"lastVrsn\":\"7\",\"vrsnLoad\[...] Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Deleted : user_pref("extensions.BabylonToolbar.rvrt", "false"); Deleted : user_pref("extensions.BabylonToolbar.sg", "azb"); Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none"); Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "uninst"); Deleted : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...] Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.8.11.10"); Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.8.11.1023:23:23"); Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.8.11.10"); Deleted : user_pref("extensions.BabylonToolbar_i.babExt", ""); Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=120307"); Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true); Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.delta-search.com/?affID=119294&babsrc[...] Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Deleted : user_pref("smartbar.machineId", "CZJLCVYNZGGEFYMY64NBBVXBNVF4IX/SOGXFV/STEWRQ944BVRKKLLF6YLFOYXH96ZG[...] File : C:\Users\G9\AppData\Roaming\Mozilla\Firefox\Profiles\e2fq6cxc.default\prefs.js [OK] File is clean. -\\ Google Chrome v24.0.1312.57 File : C:\Users\Mima\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] File is clean. File : C:\Users\MimaR\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted [l.8] : homepage = "hxxp://www.delta-search.com/?affID=119294&babsrc=HP_ss&mntrId=e0e2412600000000000[...] Deleted [l.12] : urls_to_restore_on_startup = [ "hxxp://www.delta-search.com/?affID=119294&babsrc=HP_ss&mnt[...] Deleted [l.526] : homepage = "hxxp://www.delta-search.com/?affID=119294&babsrc=HP_ss&mntrId=e0e24126000000000000ac[...] Deleted [l.717] : urls_to_restore_on_startup = [ "hxxp://www.delta-search.com/?affID=119294&babsrc=HP_ss&mntrId[...] ************************* AdwCleaner[S1].txt - [319 octets] - [13/02/2013 08:01:35] AdwCleaner[S2].txt - [7561 octets] - [13/02/2013 08:03:29] ########## EOF - \AdwCleaner[S2].txt - [7621 octets] ##########