# AdwCleaner v3.215 - Report created 22/07/2014 at 00:55:03 # Updated 09/07/2014 by Xplode # Operating System : Windows 8.1 (64 bits) # Username : admin - USER # Running from : C:\Users\admin\Downloads\Programs\adwcleaner_3-215_fr_430277.exe # Option : Clean ***** [ Services ] ***** [#] Service Deleted : 70e6ca8c [#] Service Deleted : BackupStack [#] Service Deleted : CltMngSvc [#] Service Deleted : PirritDesktop [#] Service Deleted : Update AtuZi [#] Service Deleted : Util AtuZi Service Deleted : yewimmxqbs64 ***** [ Files / Folders ] ***** [!] Folder Deleted : C:\ProgramData\SafetyNut Folder Deleted : C:\ProgramData\Systweak Folder Deleted : C:\ProgramData\ClickForSale Folder Deleted : C:\ProgramData\KIngCoupon Folder Deleted : C:\ProgramData\QuueuenuCoeuppon Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro v3.2 [!] Folder Deleted : C:\Program Files (x86)\AtuZi [!] Folder Deleted : C:\Program Files (x86)\Movies Toolbar Folder Deleted : C:\Program Files (x86)\MyPC Backup Folder Deleted : C:\Program Files (x86)\Optimizer Pro Folder Deleted : C:\Program Files (x86)\Rr Savings Folder Deleted : C:\Program Files (x86)\sweetpacks bundle uninstaller Folder Deleted : C:\Program Files (x86)\WinRST Folder Deleted : C:\Program Files\002 Folder Deleted : C:\Users\admin\AppData\Local\Temp\AtuZi Folder Deleted : C:\Users\admin\AppData\Roaming\Optimizer Pro Folder Deleted : C:\Users\admin\AppData\Roaming\System Speedup Folder Deleted : C:\Users\admin\AppData\Roaming\Systweak Folder Deleted : C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup Folder Deleted : C:\Users\admin\Documents\Optimizer Pro Folder Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\Extensions\staged\{fa95f577-07cb-4470-ac90-e843f5f83c52} Folder Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qkjx111v.default\Extensions\cl1jmwoxp@yiey-ky.edu Folder Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qkjx111v.default\Extensions\xkbpz5-jjma@y-yiqgflie-.net Folder Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qkjx111v.default\Extensions\yieuii@rzzzr.co.uk Folder Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\angmmlpfjhmkbhdaggghjiabhoaicmhk Folder Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbgmjpbambbhgifdjkefefmgjflopael Folder Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcgfmcmiimgkcidobeldjpilokieecil Folder Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kofjjfgnmnjmoihhmjpafcllkhinmboe File Deleted : C:\Users\Public\Desktop\RegClean Pro.lnk File Deleted : C:\Windows\System32\roboot64.exe File Deleted : C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk File Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qkjx111v.default\searchplugins\Ask.xml File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\Ask.xml File Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js File Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qkjx111v.default\user.js File Deleted : C:\Windows\System32\Tasks\RegClean Pro File Deleted : C:\Windows\System32\Tasks\SomotoUpdateCheckerAutoStart ***** [ Shortcuts ] ***** Shortcut Disinfected : C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather\Uninstall.lnk ***** [ Registry ] ***** Key Deleted : HKCU\Software\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64] Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC} Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B} Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\IM Key Deleted : HKCU\Software\Optimizer Pro Key Deleted : HKCU\Software\SafetyNut Key Deleted : HKCU\Software\Somoto Key Deleted : HKCU\Software\System Speedup Key Deleted : HKCU\Software\systweak Key Deleted : HKCU\Software\Webplayer Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F} Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C} Key Deleted : HKLM\Software\InstallCore Key Deleted : HKLM\Software\Pirrit Key Deleted : HKLM\Software\System Speedup Key Deleted : HKLM\Software\systweak Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3566FB70-E722-4182-8266-815EAE862998} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1 Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Speedial Key Deleted : [x64] HKLM\SOFTWARE\Pirrit Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup Key Deleted : HKLM\Software\Classes\Installer\Features\07BF6653227E2814286618E5EA689289 Key Deleted : HKLM\Software\Classes\Installer\Products\07BF6653227E2814286618E5EA689289 ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.16384 Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] -\\ Mozilla Firefox v30.0 (fr) [ File : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js ] [ File : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qkjx111v.default\prefs.js ] Line Deleted : user_pref("extensions.4DiNUCkp_o.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumor[...] Line Deleted : user_pref("extensions.O_ii6X8S_64.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumo[...] Line Deleted : user_pref("extensions.xX_sotvdzB3.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumo[...] Line Deleted : user_pref("browser.search.selectedEngine", "Ask.com"); Line Deleted : user_pref("browser.search.defaultenginename", "Ask.com"); Line Deleted : user_pref("browser.search.order.1", "Ask.com"); -\\ Google Chrome v34.0.1847.131 [ File : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\preferences ] Deleted [Startup_urls] : hxxp://www.search.ask.com/?o=APN10640A&gct=hp&d=473-103&v=a13350-337&t=4 Deleted [Homepage] : hxxp://www.search.ask.com/?o=APN10640A&gct=hp&d=473-103&v=a13350-337&t=4 Deleted [Extension] : angmmlpfjhmkbhdaggghjiabhoaicmhk Deleted [Extension] : bakijjialdiiboeaknfpmflphhmljfkd Deleted [Extension] : dbgmjpbambbhgifdjkefefmgjflopael Deleted [Extension] : kcgfmcmiimgkcidobeldjpilokieecil Deleted [Extension] : kofjjfgnmnjmoihhmjpafcllkhinmboe ************************* AdwCleaner[R0].txt - [8778 octets] - [22/07/2014 00:52:44] AdwCleaner[S0].txt - [8148 octets] - [22/07/2014 00:55:03] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8208 octets] ##########