# AdwCleaner v4.112 - Logfile created 13/03/2015 at 22:37:25 # Updated 09/03/2015 by Xplode # Database : 2015-03-05.1 [Server] # Operating system : Windows 8.1 (x86) # Username : chris - COOKIE # Running from : C:\Users\chris\Desktop\AdwCleaner.exe # Option : Cleaning ***** [ Services ] ***** Service Deleted : YahooAUService [#] Service Deleted : CouponPrinterService ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons Folder Deleted : C:\Program Files\Coupons Folder Deleted : C:\Users\chris\AppData\Local\SecTaskMan Folder Deleted : C:\Users\chris\AppData\Local\GAMESDESKTOP Folder Deleted : C:\Users\chris\AppData\Local\AdTrustMedia File Deleted : C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\ege7rsn4.default-1414645678850\invalidprefs.js ***** [ Scheduled tasks ] ***** ***** [ Shortcuts ] ***** Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Classes\driverscanner Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0 Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0 Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9522B3FB-7A2B-4646-8AF6-36E7F593073C} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1} Key Deleted : HKCU\Software\anchorfree Key Deleted : HKCU\Software\GlobalUpdate Key Deleted : HKCU\Software\PennyBee Key Deleted : HKCU\Software\GAMESDESKTOP Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} Key Deleted : HKLM\SOFTWARE\GlobalUpdate Key Deleted : HKLM\SOFTWARE\Clara Key Deleted : HKLM\SOFTWARE\SPPDCOM Key Deleted : HKLM\SOFTWARE\BubbleSound Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.1.2 ***** [ Web browsers ] ***** -\\ Internet Explorer v11.0.9600.17416 -\\ Mozilla Firefox v36.0.1 (x86 en-US) [ege7rsn4.default-1414645678850\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.hmpgUrl", "hxxp://Vosteran.com/?f=1&a=vst_omxmedia_14_50_other&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCyCtDtB0F0Ezz0AyEyCyDtN0D0Tzu0StCtDyBtBtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutC[...] [ege7rsn4.default-1414645678850\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.newTabUrl", "hxxp://Vosteran.com/?f=2&a=vst_omxmedia_14_50_other&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCyCtDtB0F0Ezz0AyEyCyDtN0D0Tzu0StCtDyBtBtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1Czu[...] [ege7rsn4.default-1414645678850\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.prtnrId", "WSE_Vosteran"); [ege7rsn4.default-1414645678850\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.srchPrvdr", "Vosteran"); [ege7rsn4.default-1414645678850\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.tlbrSrchUrl", "hxxp://Vosteran.com/?f=3&a=vst_omxmedia_14_50_other&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCyCtDtB0F0Ezz0AyEyCyDtN0D0Tzu0StCtDyBtBtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1C[...] -\\ Google Chrome v41.0.2272.89 [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms} [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.avg.com/search?cid={2D49E43A-569F-4932-98B2-22D5F40BEEA9}&mid=a6320218e97047d0981f16d06321048f-369925f36713ee9c2ec1ad9bd8411e8ae4773723&lang=en&ds=AVG&pr=fr&d=2012-06-16 01:20:26&v=11.0.0.9&sap=dsp&q={searchTerms} [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.avg.com/search?cid={2D49E43A-569F-4932-98B2-22D5F40BEEA9}&mid=a6320218e97047d0981f16d06321048f-369925f36713ee9c2ec1ad9bd8411e8ae4773723&lang=en&ds=AVG&pr=fr&d=2012-06-16 01:20:26&v=11.0.0.9&sap=dsp&q={searchTerms} [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms} [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_omxmedia_14_50_other&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCyCtDtB0F0Ezz0AyEyCyDtN0D0Tzu0StCtDyBtBtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2StDtB0BzzyDtDyDyCtG0AtAyB0CtG0AyD0CzztGyD0DtByEtGyC0DzzzztDtD0ByE0EtAyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyC0AyCyCtCyE0BtGtA0C0FtCtGyEtByE0AtG0A0F0CtCtG0FyBzyyEzyyCyE0FtB0CtAtC2Q&cr=223027743&ir= [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_omxmedia_14_50_other&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCyCtDtB0F0Ezz0AyEyCyDtN0D0Tzu0StCtDyBtBtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2StDtB0BzzyDtDyDyCtG0AtAyB0CtG0AyD0CzztGyD0DtByEtGyC0DzzzztDtD0ByE0EtAyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyC0AyCyCtCyE0BtGtA0C0FtCtGyEtByE0AtG0A0F0CtCtG0FyBzyyEzyyCyE0FtB0CtAtC2Q&cr=223027743&ir= [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3327155&octid=EB_ORIGINAL_CTID&ISID=MECB21F45-B317-49A7-962D-782A249956A4&SearchSource=58&CUI=&UM=8&UP=SP879BC58A-DCA3-4B35-B876-0472ABCE0400&q={searchTerms}&D=031215&SSPV= [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto12_15_11&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCyCtDtB0F0Ezz0AyEyCyDtN0D0Tzu0StCtCyCyCtN1L2XzutAtFzztFtAtFtAtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StB0EyByBzyyBzytAtG0D0EtA0BtGtAyDzz0AtG0C0CtCyDtGtAyC0AtAyB0C0AtC0AyDtDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyC0AyCyCtCyE0BtGtA0C0FtCtGyEtByE0AtG0A0F0CtCtG0FyBzyyEzyyCyE0FtB0CtAtC2QtN1B2Z1V1T1S1NzuyDzytA&cr=1612115114&ir= [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto12_15_11&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCyCtDtB0F0Ezz0AyEyCyDtN0D0Tzu0StCtCyCyCtN1L2XzutAtFzztFtAtFtAtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StB0EyByBzyyBzytAtG0D0EtA0BtGtAyDzz0AtG0C0CtCyDtGtAyC0AtAyB0C0AtC0AyDtDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyC0AyCyCtCyE0BtGtA0C0FtCtGyEtByE0AtG0A0F0CtCtG0FyBzyyEzyyCyE0FtB0CtAtC2QtN1B2Z1V1T1S1NzuyDzytA&cr=1612115114&ir= -\\ Comodo Dragon v [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms} [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.avg.com/search?cid={2D49E43A-569F-4932-98B2-22D5F40BEEA9}&mid=a6320218e97047d0981f16d06321048f-369925f36713ee9c2ec1ad9bd8411e8ae4773723&lang=en&ds=AVG&pr=fr&d=2012-06-16 01:20:26&v=11.0.0.9&sap=dsp&q={searchTerms} [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.avg.com/search?cid={2D49E43A-569F-4932-98B2-22D5F40BEEA9}&mid=a6320218e97047d0981f16d06321048f-369925f36713ee9c2ec1ad9bd8411e8ae4773723&lang=en&ds=AVG&pr=fr&d=2012-06-16 01:20:26&v=11.0.0.9&sap=dsp&q={searchTerms} [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms} [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_omxmedia_14_50_other&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCyCtDtB0F0Ezz0AyEyCyDtN0D0Tzu0StCtDyBtBtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2StDtB0BzzyDtDyDyCtG0AtAyB0CtG0AyD0CzztGyD0DtByEtGyC0DzzzztDtD0ByE0EtAyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyC0AyCyCtCyE0BtGtA0C0FtCtGyEtByE0AtG0A0F0CtCtG0FyBzyyEzyyCyE0FtB0CtAtC2Q&cr=223027743&ir= [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_omxmedia_14_50_other&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCyCtDtB0F0Ezz0AyEyCyDtN0D0Tzu0StCtDyBtBtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2StDtB0BzzyDtDyDyCtG0AtAyB0CtG0AyD0CzztGyD0DtByEtGyC0DzzzztDtD0ByE0EtAyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyC0AyCyCtCyE0BtGtA0C0FtCtGyEtByE0AtG0A0F0CtCtG0FyBzyyEzyyCyE0FtB0CtAtC2Q&cr=223027743&ir= [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3327155&octid=EB_ORIGINAL_CTID&ISID=MECB21F45-B317-49A7-962D-782A249956A4&SearchSource=58&CUI=&UM=8&UP=SP879BC58A-DCA3-4B35-B876-0472ABCE0400&q={searchTerms}&D=031215&SSPV= [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto12_15_11&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCyCtDtB0F0Ezz0AyEyCyDtN0D0Tzu0StCtCyCyCtN1L2XzutAtFzztFtAtFtAtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StB0EyByBzyyBzytAtG0D0EtA0BtGtAyDzz0AtG0C0CtCyDtGtAyC0AtAyB0C0AtC0AyDtDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyC0AyCyCtCyE0BtGtA0C0FtCtGyEtByE0AtG0A0F0CtCtG0FyBzyyEzyyCyE0FtB0CtAtC2QtN1B2Z1V1T1S1NzuyDzytA&cr=1612115114&ir= [C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto12_15_11&cd=2XzuyEtN2Y1L1QzuyEtDyCtCzzyCyCtDtB0F0Ezz0AyEyCyDtN0D0Tzu0StCtCyCyCtN1L2XzutAtFzztFtAtFtAtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StB0EyByBzyyBzytAtG0D0EtA0BtGtAyDzz0AtG0C0CtCyDtGtAyC0AtAyB0C0AtC0AyDtDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyC0AyCyCtCyE0BtGtA0C0FtCtGyEtByE0AtG0A0F0CtCtG0FyBzyyEzyyCyE0FtB0CtAtC2QtN1B2Z1V1T1S1NzuyDzytA&cr=1612115114&ir= [C:\Users\chris\AppData\Local\Comodo\Dragon\User Data\Default\preferences] - Deleted [Extension] : cmaiofennmphjldldcpphcechfnnohja ************************* AdwCleaner[R0].txt - [9836 bytes] - [13/03/2015 22:05:50] AdwCleaner[S0].txt - [13276 bytes] - [13/03/2015 22:37:25] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13336 bytes] ##########