# AdwCleaner v4.000 - Report created 19/10/2014 at 15:21:56 # DB v2014-10-19.11 # Updated 12/10/2014 by Xplode # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits) # Username : Owner - OWNER-PC # Running from : C:\Users\Owner\Desktop\AdwCleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\Users\Owner\AppData\Roaming\DriverCure Folder Deleted : C:\Users\Owner\AppData\Roaming\DSite Folder Deleted : C:\Users\Owner\AppData\Roaming\EZDownloader Folder Deleted : C:\ProgramData\ParetoLogic Folder Deleted : C:\Users\Owner\AppData\Roaming\ParetoLogic Folder Deleted : C:\Users\Owner\AppData\Local\PutLockerDownloader Folder Deleted : C:\Users\Public\Documents\Stronghold AntiMalware Folder Deleted : C:\Users\Owner\AppData\Local\Supreme Savings Folder Deleted : C:\ProgramData\Tarma Installer File Deleted : C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\ixgln5xn.default\user.js ***** [ Scheduled Tasks ] ***** Task Deleted : DSite ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Supreme Savings_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Supreme Savings_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS Key Deleted : HKLM\SOFTWARE\Classes\. Key Deleted : HKLM\SOFTWARE\Classes\..9 Key Deleted : HKCU\Software\f538b8fe63ebe15 Key Deleted : HKLM\SOFTWARE\f538b8fe63ebe15 Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{d0e87c27} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{23dcb958-a236-4b32-9dce-6f0379e095d0} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3a864a85-9c4a-4eb1-9da2-39fda9f928cb} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{23dcb958-a236-4b32-9dce-6f0379e095d0} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3a864a85-9c4a-4eb1-9da2-39fda9f928cb} Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{23dcb958-a236-4b32-9dce-6f0379e095d0} Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{3a864a85-9c4a-4eb1-9da2-39fda9f928cb} Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] Key Deleted : HKCU\Software\dsiteproducts Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\ParetoLogic Key Deleted : HKCU\Software\RegisteredApplicationsEx Key Deleted : HKLM\SOFTWARE\ParetoLogic Key Deleted : HKLM\SOFTWARE\PIP Key Deleted : HKLM\SOFTWARE\SW-Booster Key Deleted : HKLM\SOFTWARE\Updater By Sweetpacks Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer Key Deleted : [x64] HKLM\SOFTWARE\Updater By Sweetpacks ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.17344 -\\ Mozilla Firefox v [ixgln5xn.default] - Line Deleted : user_pref("extensions.crossrider.bic", "13d768cfd7ce89c65626ae48445c3551"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.admin", false); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.aflt", "babsst"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.autoRvrt", "false"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.dfltLng", "en"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.excTlbr", false); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.id", "deefb2bd000000000000bcaec5e0107d"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.instlDay", "15801"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.instlRef", "sst"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.newTab", false); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.prdct", "delta"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.prtnrId", "delta"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.rvrt", "false"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.smplGrp", "none"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.tlbrId", "base"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", ""); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.vrsn", "1.8.10.0"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.10.00:48:47"); [ixgln5xn.default] - Line Deleted : user_pref("extensions.delta.vrsni", "1.8.10.0"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.RevertDialog.enable", "false"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.SearchBoxLogo", ""); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.SearchBoxText", ""); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.UserSelectedSaveSettings", "true"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "0"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.Visibility.enable", "true"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.Visibility.intervaldays", "7"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.cda.HideOveride.enable", "true"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.defaultProvider", ""); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.0.enable", "true"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-handler.js"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.0.height", "335"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.0.width", "761"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.1.enable", "true"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-handler.js"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.1.height", "300"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.1.width", "500"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.2.enable", "true"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handler.js"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.2.height", "150"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dialogs.2.width", "530"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.google.com/.*|.*.google.co.in/.*|.*.google.com.br/.*|.*.google.es/.*|.*.youtube.com/.*|.*.yahoo.com/.*|.[...] [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.keywordUrlGuard.enable", "false"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.mode.debug", "false"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.newtab.created", "false"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.newtab.enable", "true"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.newtab.url", "hxxp://home.sweetim.com/?src=97&barid=$toolbar_id;&crg=$cargo;&ptr=100"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", ""); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.rc.url", "hxxp://tbsrv1.sweetim.com/simffbar/rc.html?toolbar_version=$ITEM_VERSION;&crg=$cargo;&flavour=$flavr;"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", ""); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.0.enable", "false"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.1.callback", "simVerification"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ""); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "hxxps://(www.|apps.)?facebook\\.com.*"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.1.enable", "false"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_hxxpS"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.2.callback", ""); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..*|.*.yahoo..*|.*.youtube.com.*|.*ask.com.*|.*.sweetim.com.*"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.2.domain-whitelist", ""); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.2.enable", "false"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.scripts.2.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?si=3104&tid=chff1"); [ixgln5xn.default] - Line Deleted : user_pref("sweetim.toolbar.search.external", "