# AdwCleaner v3.215 - Report created 15/07/2014 at 11:37:46 # Updated 09/07/2014 by Xplode # Operating System : Windows 7 Professional Service Pack 1 (64 bits) # Username : THE USER - THEUSER-PC # Running from : C:\Users\THE USER\Desktop\AdwCleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\apn Folder Deleted : C:\ProgramData\Uniblue Folder Deleted : C:\ProgramData\VisualBee Folder Deleted : C:\Program Files (x86)\Conduit Folder Deleted : C:\Users\THE USER\AppData\Local\Conduit Folder Deleted : C:\Users\THE USER\AppData\Local\PackageAware Folder Deleted : C:\Users\THE USER\AppData\LocalLow\Conduit File Deleted : C:\END File Deleted : C:\Users\THE USER\AppData\Roaming\Mozilla\Firefox\Profiles\q2e0u2a5.default-1356360644627\searchplugins\ask-search.xml File Deleted : C:\Windows\System32\Tasks\VisualBeeRecovery ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Classes\Applications\iMesh_V11_en_Setup.exe Key Deleted : HKLM\SOFTWARE\Classes\Applications\iMeshV11.exe Key Deleted : HKLM\SOFTWARE\Classes\driverscanner Key Deleted : HKLM\SOFTWARE\Classes\GameTreatWidget.GameTreatWidget Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_V11_en_Setup_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_V11_en_Setup_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasapi32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasmancs Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASMANCS Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{103DFC4E-147A-5606-9B4E-1C216DF227A1} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{44D07CAA-4FC4-5A84-9951-A485AD808D0E} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Deleted : HKCU\Software\Imesh Key Deleted : HKCU\Software\tuguu sl Key Deleted : HKCU\Software\YahooPartnerToolbar Key Deleted : HKCU\Software\AppDataLow\Software\Conduit Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\Software\PerformerSoft Key Deleted : HKLM\Software\Uniblue Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.17207 -\\ Mozilla Firefox v30.0 (en-US) [ File : C:\Users\THE USER\AppData\Roaming\Mozilla\Firefox\Profiles\q2e0u2a5.default-1356360644627\prefs.js ] Line Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3287803&octid=CT3287803&SearchSource=61&CUI=UN11854943093038226&UM=2&UP=SP8AF46A8F-74F8-4B8E-9393-0E1445D60C78"); Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "VisualBee V.4 Customized Web Search"); Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287803&SearchSource=2&CUI=UN11854943093038226&UM=2&q="); Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287803&SearchSource=2&CUI=UN11854943093038226&UM=2&q="); Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3287803"); Line Deleted : user_pref("extensions.wajam.affiliate_id", "4220"); Line Deleted : user_pref("extensions.wajam.firstrun", "false"); Line Deleted : user_pref("extensions.wajam.log_send_info", "false"); Line Deleted : user_pref("extensions.wajam.no_trace", "false"); Line Deleted : user_pref("extensions.wajam.server_current_mapping_version", "0.21086"); Line Deleted : user_pref("extensions.wajam.unique_id", "DA643515F831FE4554433F679E7489D3"); Line Deleted : user_pref("extensions.wajam.user_current_mapping_version", "0"); Line Deleted : user_pref("extensions.wajam.version", "1.26"); Line Deleted : user_pref("smartbar.machineId", "OHRRRCT39EBTDY5I1C9MMQ+T5NCA52BFBXFU85ONC/SN2UKB5PIPQFGSKBQ8XI/QHPPUKYV/26VHLSB0VRUY2A"); -\\ Google Chrome v35.0.1916.153 [ File : C:\Users\THE USER\AppData\Local\Google\Chrome\User Data\Default\preferences ] Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms} Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN47756961820856231&ctid=CT3288691&UM=2 Deleted [Search Provider] : hxxp://search.aol.com/aol/search?query={searchTerms} Deleted [Startup_urls] : hxxp://search.conduit.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M751859B6-AE81-415E-9E5C-3D631D99FC6A&SearchSource=55&CUI=&UM=5&UP=SP65540B85-BE5B-4271-BEC6-D17995C09D1B&SSPV= Deleted [Startup_urls] : hxxp://search.conduit.com/?ctid=CT3288691&SearchSource=48&CUI=UN47756961820856231&UM=2 Deleted [Extension] : aaaaojmikegpiepcfdkkjaplodkpfmlo Deleted [Extension] : booedmolknjekdopkepjjeckmjkdpfgl Deleted [Extension] : flpcjncodpafbgdpnkljologafpionhb ************************* AdwCleaner[R0].txt - [6723 octets] - [15/07/2014 11:35:41] AdwCleaner[S0].txt - [6593 octets] - [15/07/2014 11:37:46] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6653 octets] ##########