# AdwCleaner v4.206 - Logfile created 11/06/2015 at 10:56:14 # Updated 01/06/2015 by Xplode # Database : 2015-06-09.1 [Server] # Operating system : Windows 7 Professional Service Pack 1 (x64) # Username : DrRick - DRRICK-PC # Running from : C:\Users\DrRick\Desktop\AdwCleaner.exe # Option : Cleaning ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\Users\DrRick\AppData\Roaming\FirefoxToolbar Folder Deleted : C:\Users\DrRick\Documents\Updater File Deleted : C:\Windows\System32\roboot64.exe File Deleted : C:\Users\DrRick\AppData\Roaming\Mozilla\Firefox\Profiles\kswybtaf.default\searchplugins\ask-web-search.xml File Deleted : C:\Users\DrRick\AppData\Roaming\Mozilla\Firefox\Profiles\kswybtaf.default\searchplugins\yahoo_ff.xml ***** [ Scheduled tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6} Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6} Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} Key Deleted : HKCU\Software\systweak Key Deleted : HKCU\Software\Tune Key Deleted : HKLM\SOFTWARE\systweak Key Deleted : HKLM\SOFTWARE\Tune Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner Packages ***** [ Web browsers ] ***** -\\ Internet Explorer v11.0.9600.17840 -\\ Mozilla Firefox v38.0.5 (x86 en-US) [kswybtaf.default\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "Ask Web Search"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxps://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=523482&p="); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.hmpgUrl", "hxxp://Vosteran.com/?f=1&a=vst_app_14_50_ff&cd=2XzuyEtN2Y1L1Qzu0BzztB0AyBtB0A0D0C0FyByByDyByCyDtN0D0Tzu0StCtDyByEtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytD[...] [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.newTabUrl", "hxxp://Vosteran.com/?f=2&a=vst_app_14_50_ff&cd=2XzuyEtN2Y1L1Qzu0BzztB0AyBtB0A0D0C0FyByByDyByCyDtN0D0Tzu0StCtDyByEtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzy[...] [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.tlbrSrchUrl", "hxxp://Vosteran.com/?f=3&a=vst_app_14_50_ff&cd=2XzuyEtN2Y1L1Qzu0BzztB0AyBtB0A0D0C0FyByByDyByCyDtN0D0Tzu0StCtDyByEtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtB[...] [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.BUTTON_STRUCTURE", "[{\"b\":224541925,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224541926,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...] [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.search.defaultenginename.prev", "Yahoo"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.search.defaultenginename.savedPrev", "true"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.search.defaultenginename.tb", "Ask Web Search"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.search.selectedEngine.prev", "Yahoo"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.search.selectedEngine.savedPrev", "true"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.search.selectedEngine.tb", "Ask Web Search"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.startup.homepage.prev", "hxxps://att.yahoo.com/"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.startup.homepage.savedPrev", "true"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=C1B98FDD-561F-47CF-B376-8394ED8CBA2B&n=781ac578&p2=^ZX^xdm125^YYA^us&si=TFRR50[...] [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.startup.page.savedPrev", 1); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.startup.page.tb", 1); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.browser.version.last", "38.0"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.competitorDNS", "{\"comment\":\"refresh every 1 week (7*24*60*60*1000)\",\"refreshPeriod\":604800000,\"list\":[{\"url\":\"hxxp://www.dnsrsearch.com/[...] [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.firstKnownVersion", "6.85.5.65023"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=C1B98FDD-561F-47CF-B376-8394ED8CBA2B&n=781ac578&p2=^ZX^xdm125^YYA^us&si=TFRR500088717_39382552"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.hp.enabled", false); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.hp.guardType", "HPR"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.hp.user.defined", true); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.initialized", true); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.installKeysSource", "Cookies"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.installType", "XPI"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.installation.contextKey", ""); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.installation.dlpCountryCode", "US"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.installation.installDate", "2015020408"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.installation.partnerId", "^ZX^xdm125^YYA^us"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.installation.partnerSubId", "TFRR500088717_39382552"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.installation.pixelUrl", "hxxp://download.radiorage.com/install_pixels.jhtml?partner=^ZX^xdm125^YYA^us&sub_id=TFRR500088717_39382552&coId=9b04326949d[...] [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.installation.success", true); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.installation.toolbarId", "C1B98FDD-561F-47CF-B376-8394ED8CBA2B"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.isCompliantUninstallImplementation", true); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.lastActivePing", "1434017058007"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.lastKnownVersion", "7.18.7.19764"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.options.defaultSearch", true); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.options.homePageEnabled", true); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.options.keywordEnabled", true); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.options.tabEnabled", true); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.partnerPixelFired", true); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.searchHistory", "josh turner 2013 tour478-456-2321rnav ronniqualtrics user manualcaptcha verification in qualtrics surveyprius partsrene[...] [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.successUrl", "hxxp://download.radiorage.com/installComplete.jhtml"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.toolbar.ownSearch", false); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.toolbar.versionChanged", false); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.toolbarCollapsed", false); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._4jMembers_.weather.location", "30542"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", false); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", ""); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "radiorage@mindspark.com"); [kswybtaf.default\prefs.js] - Line Deleted : user_pref("keyword.URL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=C1B98FDD-561F-47CF-B376-8394ED8CBA2B&n=781ac578&ind=2015020408&p2=^ZX^xdm125^YYA^us&si=TFRR500088717_39382552&searchfo[...] [kswybtaf.default\prefs.js] - Line Deleted : user_pref("startpage.ntsearch_url", "hxxps://search.yahoo.com/search?fr=spigot-nt-ff&ei=utf-8&ilc=12&type=523482&p={searchTerms}"); ************************* AdwCleaner[R0].txt - [10042 bytes] - [11/06/2015 10:50:42] AdwCleaner[S0].txt - [10281 bytes] - [11/06/2015 10:56:14] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10341 bytes] ##########