# AdwCleaner v5.024 - Logfile created 10/12/2015 at 23:33:35 # Updated 07/12/2015 by Xplode # Database : 2015-12-07.3 [Server] # Operating system : Windows 7 Ultimate Service Pack 1 (x64) # Username : Anthony - ANTHONY-PC # Running from : C:\Users\Anthony\Desktop\adwcleaner_5.024.exe # Option : Scan # Support : http://toolslib.net/forum ***** [ Services ] ***** ***** [ Folders ] ***** Folder Found : C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel Folder Found : C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Extensions\plkplgmhfkkhokgkdkblfcnfeccpippe Folder Found : C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\c07sfzxg.default\Extensions\ascsurfingprotection@iobit.com ***** [ Files ] ***** File Found : C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_cknebhggccemgcnbidipinkifmmegdel_0.localstorage File Found : C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_cknebhggccemgcnbidipinkifmmegdel_0.localstorage-journal File Found : C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\c07sfzxg.default\user.js File Found : C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\c07sfzxg.default\searchplugins\yahoo.xml ***** [ DLL ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled tasks ] ***** ***** [ Registry ] ***** Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4A0C-9753-B57B9AE272CC} ***** [ Web browsers ] ***** [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\c07sfzxg.default\prefs.js] [Preference] Found : user_pref("browser.search.param.yahoo-fr", "chr-greentree_ff&ilc=12&type=902615"); [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\c07sfzxg.default\prefs.js] [Preference] Found : user_pref("extensions.extension@ciuvo.com.install-event-fired", true); [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\c07sfzxg.default\prefs.js] [Preference] Found : user_pref("extensions.fbp@fbpurity.com.oldfriendstore-1594733405", "{\"1594733405\":{\"text\":\"Anthony Tirado\"},\"775231131\":{\"text\":\"Hadassa Sulamita\"},\"1313193467\":{\"text\":\"Jérémy Pages\[...] [C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Secure Preferences] [Extension] Found : cknebhggccemgcnbidipinkifmmegdel [C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Secure Preferences] [Extension] Found : plkplgmhfkkhokgkdkblfcnfeccpippe ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2513 bytes] ########## # AdwCleaner v5.037 - Logfile created 29/02/2016 at 18:11:58 # Updated 28/02/2016 by Xplode # Database : 2016-02-28.2 [Server] # Operating system : Windows 7 Ultimate Service Pack 1 (x64) # Username : Anthony - ANTHONY-PC # Running from : C:\Users\Anthony\Desktop\adwcleaner_5.037.exe # Option : Scan # Support : http://toolslib.net/forum ***** [ Services ] ***** ***** [ Folders ] ***** Folder Found : C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel Folder Found : C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Extensions\plkplgmhfkkhokgkdkblfcnfeccpippe ***** [ Files ] ***** File Found : C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_cknebhggccemgcnbidipinkifmmegdel_0.localstorage File Found : C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Local Storage\chrome-extension_cknebhggccemgcnbidipinkifmmegdel_0.localstorage-journal ***** [ DLL ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled tasks ] ***** ***** [ Registry ] ***** ***** [ Web browsers ] ***** [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\c07sfzxg.default\prefs.js] [Preference] Found : user_pref("extensions.extension@ciuvo.com.install-event-fired", true); [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\c07sfzxg.default\prefs.js] [Preference] Found : user_pref("extensions.m86sb.ta.categories", "{\r\n \"version\": \"3.722\",\r\n \"Images\": {\r\n\"Large\":{\r\n \"Adult Content\": [\r\n \"data:image/gif;base64,\",\r\n [...] [C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Web data] [Search Provider] Found : lyrics-plugin-for-windows-media-player.softonic.fr [C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Secure Preferences] [Extension] Found : cknebhggccemgcnbidipinkifmmegdel [C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Secure Preferences] [Extension] Found : plkplgmhfkkhokgkdkblfcnfeccpippe ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [2766 bytes] - [10/12/2015 23:59:04] C:\AdwCleaner\AdwCleaner[S1].txt - [4742 bytes] - [10/12/2015 23:33:35] C:\AdwCleaner\AdwCleaner[S2].txt - [2596 bytes] - [10/12/2015 23:49:55] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4888 bytes] ########## # AdwCleaner v5.110 - Logfile created 11/04/2016 at 23:55:38 # Updated 10/04/2016 by Xplode # Database : 2016-04-11.4 [Server] # Operating system : Windows 7 Ultimate Service Pack 1 (X64) # Username : Anthony - ANTHONY-PC # Running from : C:\Users\Anthony\Downloads\adwcleaner_5.110.exe # Option : Scan # Support : http://toolslib.net/forum ***** [ Services ] ***** Service Found : WinSvces Service Found : BugreportW ***** [ Folders ] ***** Folder Found : C:\Program Files (x86)\WinTsks Folder Found : C:\Program Files (x86)\WinSvces Folder Found : C:\Program Files (x86)\SpeedSearchesbnd Folder Found : C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel Folder Found : C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Extensions\plkplgmhfkkhokgkdkblfcnfeccpippe Folder Found : C:\Windows\SysNative\Tasks\WinTsks ***** [ Files ] ***** File Found : C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\invalidprefs.js File Found : C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\dd1b66d4.xml File Found : C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\c07sfzxg.default\invalidprefs.js ***** [ DLL ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled tasks ] ***** Task Found : WinTsks ***** [ Registry ] ***** Key Found : HKCU\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF} Key Found : HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF} Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\pfcgjlglddicjopgimohdcbmabacamll Key Found : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pfcgjlglddicjopgimohdcbmabacamll Key Found : HKLM\SOFTWARE\Classes\CLSID\{C379EAD1-CB34-4B09-AF6B-7E587F8BCD80} Key Found : HKCU\Software\IM Key Found : HKLM\SOFTWARE\hohosearchSoftware Key Found : HKU\S-1-5-21-2354464551-2880921900-1212306041-1000\Software\IM ***** [ Web browsers ] ***** [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\c07sfzxg.default\prefs.js] [Preference] Found : user_pref("extensions.requestpolicy.allowedOriginsToDestinations", "163.com|netease.com amazon.ca|images-amazon.com amazon.ca|ssl-images-amazon.com amazon.cn|images-amazon.com amazon.cn|joyo.com amazo[...] [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\c07sfzxg.default\prefs.js] [Preference] Found : user_pref("network.proxy.autoconfig_url", "data:text/javascript,%2F*ZenMate*%2F%0Afunction%20FindProxyForURL(url%2C%20host)%20%7B%0A%0A%20%20var%20e%20%3D%20%7B%20data%3A%20%7B%22localDomains%22%3A%5B[...] [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] [Preference] Found : user_pref("browser.newtab.url", "hxxp://www.hohosearch.com/?ts=AHEqA3ElA3MrB0..&v=20160409&uid=571E6247D591D2586828BF249FBCAEDF&ptid=isr&mode=ffseng"); [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] [Preference] Found : user_pref("browser.search.defaultenginename", "hohosearch"); [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] [Preference] Found : user_pref("browser.search.searchengine.hp", "hxxp://www.hohosearch.com/?ts=AHEqA3ElA3MrB0..&v=20160409&uid=571E6247D591D2586828BF249FBCAEDF&ptid=isr&mode=ffsengext"); [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] [Preference] Found : user_pref("browser.search.searchengine.sp", "hxxp://www.hohosearch.com/chrome.php?mode=ffsengext&ptid=isr&q={searchTerms}&ts=AHEqA3ElA3MrB0..&uid=571E6247D591D2586828BF249FBCAEDF&v=20160409"); [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] [Preference] Found : user_pref("browser.search.searchengine.url", "hxxp://www.hohosearch.com/chrome.php?mode=ffsengext&ptid=isr&q={searchTerms}&ts=AHEqA3ElA3MrB0..&uid=571E6247D591D2586828BF249FBCAEDF&v=20160409"); [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] [Preference] Found : user_pref("browser.search.selectedEngine", "hohosearch"); [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] [Preference] Found : user_pref("browser.startup.homepage", "hxxp://www.hohosearch.com/?ts=AHEqA3ElA3MrB0..&v=20160409&uid=571E6247D591D2586828BF249FBCAEDF&ptid=isr&mode=ffseng"); [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] [Preference] Found : user_pref("extensions.requestpolicy.allowedOriginsToDestinations", "163.com|netease.com amazon.ca|images-amazon.com amazon.ca|ssl-images-amazon.com amazon.cn|images-amazon.com amazon.cn|joyo.com amazo[...] [C:\Users\Anthony\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] [Preference] Found : user_pref("network.proxy.autoconfig_url", "data:text/javascript,%2F*ZenMate*%2F%0Afunction%20FindProxyForURL(url%2C%20host)%20%7B%0A%0A%20%20var%20e%20%3D%20%7B%20data%3A%20%7B%22localDomains%22%3A%5B[...] [C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Secure Preferences] [Extension] Found : cknebhggccemgcnbidipinkifmmegdel [C:\Users\Anthony\AppData\Local\Chromium\User Data\Default\Secure Preferences] [Extension] Found : plkplgmhfkkhokgkdkblfcnfeccpippe ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [5280 bytes] - [11/12/2015 00:59:04] C:\AdwCleaner\AdwCleaner[S1].txt - [10288 bytes] - [11/12/2015 00:33:35] C:\AdwCleaner\AdwCleaner[S2].txt - [2596 bytes] - [11/12/2015 00:49:55] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [10435 bytes] ##########