# AdwCleaner v4.109 - Report created 05/02/2015 at 12:11:01 # Updated 24/01/2015 by Xplode # Database : 2015-02-04.1 [Live] # Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits) # Username : ron - TRADE # Running from : C:\Users\ron\Desktop\AdwCleaner.exe # Option : Clean ***** [ Services ] ***** Service Deleted : YahooAUService Service Deleted : CouponPrinterService ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\Conduit Folder Deleted : C:\ProgramData\PC Drivers HeadQuarters Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jZip Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons Folder Deleted : C:\Program Files\Conduit Folder Deleted : C:\Program Files\GamesBar Folder Deleted : C:\Program Files\jZip Folder Deleted : C:\Program Files\Uniblue Folder Deleted : C:\Program Files\Coupons Folder Deleted : C:\Users\ron\AppData\Local\cool_mirage Folder Deleted : C:\Users\ron\AppData\Local\FTdownloader V4.0 Folder Deleted : C:\Users\ron\AppData\Local\jZip Folder Deleted : C:\Users\ron\AppData\Local\NativeMessaging Folder Deleted : C:\Users\ron\AppData\LocalLow\Conduit Folder Deleted : C:\Users\ron\AppData\LocalLow\jZip Folder Deleted : C:\Users\ron\AppData\LocalLow\PriceGong Folder Deleted : C:\Users\ron\AppData\Roaming\ARecEngine Folder Deleted : C:\Users\ron\AppData\Roaming\OpenCandy Folder Deleted : C:\Users\ron\AppData\Roaming\Uniblue Folder Deleted : C:\Users\ron\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com File Deleted : C:\Windows\Reimage.ini File Deleted : C:\Users\ron\AppData\LocalLow\SkwConfig.bin File Deleted : C:\Users\ron\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js ***** [ Scheduled Tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lgnbhdnimikkoodkogjlcllngimhlapp Key Deleted : HKCU\Software\Classes\iLivid.torrent Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com Key Deleted : HKLM\SOFTWARE\Classes\FTDownloader Key Deleted : HKLM\SOFTWARE\Classes\iLivid.torrent Key Deleted : HKLM\SOFTWARE\Classes\jZip.file Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1460988 Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3316071 Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C430996F-4AA8-4AA8-81DE-F54432CD5786} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8DCB7100-DF86-4384-8842-8FA844297B3F} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AD79BAD6-9504-4F09-ACEC-7B319584A4C1} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DCB7100-DF86-4384-8842-8FA844297B3F} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8DCB7100-DF86-4384-8842-8FA844297B3F} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3614D305-2DBB-4991-9297-750DD60FFC73} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2EAC5DC5-E7C8-4BF6-BFCA-3510A4289594} Key Deleted : HKCU\Software\ilivid Key Deleted : HKCU\Software\IM Key Deleted : HKCU\Software\jZip Key Deleted : HKCU\Software\wecarereminder Key Deleted : HKCU\Software\YahooPartnerToolbar Key Deleted : HKCU\Software\Zugo Key Deleted : HKCU\Software\AppDataLow\Software\Conduit Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong Key Deleted : HKLM\SOFTWARE\Conduit Key Deleted : HKLM\SOFTWARE\jZip Key Deleted : HKLM\SOFTWARE\Uniblue Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jZip Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.1.3 Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\jZip Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Coupon Printer for Windows5.0.1.3 ***** [ Browsers ] ***** -\\ Internet Explorer v9.0.8112.16545 -\\ Mozilla Firefox v -\\ Google Chrome v [C:\Users\ron\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN20044791108121137&ctid=CT3316071&UM=2 [C:\Users\ron\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Homepage] : hxxp://search.conduit.com/?ctid=CT3316071&SearchSource=48&CUI=UN20044791108121137&UM=2 [C:\Users\ron\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Startup_URLs] : hxxp://search.conduit.com/?ctid=CT3316071&SearchSource=48&CUI=UN20044791108121137&UM=2 ************************* AdwCleaner[R0].txt - [6012 octets] - [05/02/2015 12:09:17] AdwCleaner[S0].txt - [5733 octets] - [05/02/2015 12:11:01] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5793 octets] ##########