# AdwCleaner v5.009 - Registro generado 03/10/2015 en 21:37:18 # Actualizado 27/09/2015 por Xplode # Base de datos : 2015-09-30.1 [Servidor] # Sistema operativo : Windows 10 Home (x64) # Nombre de usuario : carpentier - PABLOORDI # Ejecutado desde : C:\Users\carpentier\Downloads\adwcleaner_5.009.exe # Opción : Limpiar # Apoyo : http://toolslib.net/forum ***** [ Servicios ] ***** [-] $L_SERVICE$ Eliminar : Olacarita_update_m [-] $L_SERVICE$ Eliminar : Olacarita_update [-] $L_SERVICE$ Eliminar : WdsManPro ***** [ Carpetas ] ***** [-] Carpeta Eliminar : C:\Program Files (x86)\Olacarita [-] Carpeta Eliminar : C:\ProgramData\Olacarita [-] Carpeta Eliminar : C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Extensions\npdicihegicnhaangkdmcgbjceoemeoo [-] Carpeta Eliminar : C:\Users\carpentier\AppData\Local\Olacarita [-] Carpeta Eliminar : C:\Users\carpentier\AppData\Local\YSearchUtil [-] Carpeta Eliminar : C:\Users\carpentier\AppData\Local\24159 [-] Carpeta Eliminar : C:\Users\carpentier\AppData\Roaming\WTools [-] Carpeta Eliminar : C:\Users\famille\AppData\Local\Olacarita [-] Carpeta Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Extensions\npdicihegicnhaangkdmcgbjceoemeoo [-] Carpeta Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco [-] Carpeta Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgmpnnihkgfobgoomafjankhmingeinl [-] Carpeta Eliminar : C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\Olacarita [-] Carpeta Eliminar : C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil ***** [ Archivos ] ***** [-] Archivo Eliminar : C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage [-] Archivo Eliminar : C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage-journal [-] Archivo Eliminar : C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.boostsaves.com_0.localstorage [-] Archivo Eliminar : C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.boostsaves.com_0.localstorage-journal [-] Archivo Eliminar : C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage [-] Archivo Eliminar : C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage-journal [-] Archivo Eliminar : C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_engaigpbgdjjmanonjcjkcmomgibneba_0.localstorage [-] Archivo Eliminar : C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_engaigpbgdjjmanonjcjkcmomgibneba_0.localstorage-journal [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_oadboiipflhobonjjffjbfekfjcgkhco_0.localstorage [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_oadboiipflhobonjjffjbfekfjcgkhco_0.localstorage-journal [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage-journal [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.boostsaves.com_0.localstorage [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.boostsaves.com_0.localstorage-journal [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.boostsaves.com_0.localstorage [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.boostsaves.com_0.localstorage-journal [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage-journal [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage [-] Archivo Eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal ***** [ Accesos directos ] ***** [-] Shortcut Desinfectado : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\The Godfather Five Families.lnk [-] Shortcut Desinfectado : C:\Users\carpentier\Desktop\pablo\Mozilla Firefox.lnk ***** [ Tareas programadas ] ***** [-] Tarea Eliminar : amiupdaterExd [-] Tarea Eliminar : amiupdaterExi [-] Tarea Eliminar : OlacaritaUpdateTaskMachineUA [-] Tarea Eliminar : OlacaritaUpdateTaskMachineCore [-] Tarea Eliminar : YCMServiceAgent ***** [ Registro ] ***** [-] Llave Eliminar : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService [-] Llave Eliminar : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0 [-] Llave Eliminar : HKLM\SOFTWARE\Microsoft\Mediaplayer\Shiminclusionlist\crossbrowse.exe [-] Valor Eliminar : HKLM\SOFTWARE\RegisteredApplications [Crossbrowse] [-] Llave Eliminar : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe [-] Valor Eliminar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Olacarita] [-] Llave Eliminar : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{08230486-CBAF-4000-8036-447C3852D034} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{13809C03-DE3B-47E5-96A3-2D8F83693A50} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{3D976BD4-0B6A-4757-9D2B-65AA20F4B4EA} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{413002E0-930D-4EF9-9803-FC4B3EA4181E} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{76894207-241A-473B-B111-FAA75608F1D9} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{7A7C8DA9-8660-460D-849F-01619B91C03F} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{B6CD3C31-ABF4-4C7A-8CB7-29960BC7017C} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{F9A8326E-9C90-4BF2-ACC7-D0883D16AA82} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1} [-] Llave Eliminar : HKLM\SOFTWARE\Classes\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5} [-] Llave Eliminar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298} [-] Llave Eliminar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A} [-] Llave Eliminar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D976BD4-0B6A-4757-9D2B-65AA20F4B4EA} [-] Llave Eliminar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1} [-] Llave Eliminar : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} [-] Llave Eliminar : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider [-] Llave Eliminar : HKLM\SOFTWARE\AppDataLow\SOFTWARE\_CrossriderRegNamePlaceHolder_ ***** [ Navegadores Web ] ***** [-] [C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Eliminar : hxxp://www.omniboxes.com/webfavicon.ico [-] [C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Eliminar : npdicihegicnhaangkdmcgbjceoemeoo [-] [C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Eliminar : hxxp://www.omniboxes.com/?type=hp&ts=1441480608&z=dfe7cd3300b708facf5f58cg2zez7g3z5b0e6qfg4t&from=amt&uid=HGSTXHTS541010A9E680_JA100A1F3MBYKM3MBYKMX [-] [C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Eliminar : battlefield-play4free.fr.softonic.com [-] [C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Eliminar : npdicihegicnhaangkdmcgbjceoemeoo [-] [C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Eliminar : painttool-sai.softonic.fr [-] [C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Eliminar : coverxp.softonic.com [-] [C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Eliminar : hxxp://istart.webssearches.com/?type=hp&ts=1416148308&from=nsbes&uid=SAMSUNGXHM641JI_S26XJ9BB210970 [-] [C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Eliminar : hxxp://www.sweet-page.com/?type=hp&ts=1417025797&from=cor&uid=SAMSUNGXHM641JI_S26XJ9BB210970 [-] [C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Eliminar : lgmpnnihkgfobgoomafjankhmingeinl [-] [C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Eliminar : npdicihegicnhaangkdmcgbjceoemeoo [-] [C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Eliminar : oadboiipflhobonjjffjbfekfjcgkhco [-] [C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Eliminar : hxxp://www.trovi.com/?gd=&ctid=CT3319709&octid=EB_ORIGINAL_CTID&ISID=MCCD48AAC-FE04-470F-A1FC-19E117798DAF&SearchSource=55&CUI=&UM=6&UP=SPA5741940-F36A-458A-84DB-24F16BC92FE2&SSPV= ************************* :: Winsock Configuración borrada ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [13944 bytes] ########## # AdwCleaner v5.116 - Registro generado 11/05/2016 en 14:40:27 # Actualizado 09/05/2016 por Xplode # Base de datos : 2016-05-09.1 [Servidor] # Sistema operativo : Windows 10 Home (X64) # Nombre de usuario : carpentier - PABLOORDI # Ejecutado desde : C:\Users\carpentier\Downloads\adwcleaner_5.116.exe # Opción : Limpiar # Apoyo : http://toolslib.net/forum ***** [ Servicios ] ***** ***** [ Carpetas ] ***** [-] Carpeta eliminar : C:\Program Files (x86)\MPC Cleaner [-] Carpeta eliminar : C:\Program Files (x86)\hohobnd [-] Carpeta eliminar : C:\Users\carpentier\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108 [-] Carpeta eliminar : C:\Users\carpentier\AppData\Roaming\Store [-] Carpeta eliminar : C:\Users\carpentier\AppData\Roaming\WTools [-] Carpeta eliminar : C:\Users\famille\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ace Stream Media ***** [ Archivos ] ***** [-] Archivo eliminar : C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat [-] Archivo eliminar : C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\dd1b66d4.xml [-] Archivo eliminar : C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_xoncisfktn-a.akamaihd.net_0.localstorage [-] Archivo eliminar : C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_xoncisfktn-a.akamaihd.net_0.localstorage-journal [-] Archivo eliminar : C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.newtabtvplussearch.com_0.localstorage [-] Archivo eliminar : C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.newtabtvplussearch.com_0.localstorage-journal [-] Archivo eliminar : C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage [-] Archivo eliminar : C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal [!] Archivo No eliminar : C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage [!] Archivo No eliminar : C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal [-] Archivo eliminar : C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage [-] Archivo eliminar : C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage-journal [!] Archivo No eliminar : C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage [!] Archivo No eliminar : C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage-journal [-] Archivo eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_oadboiipflhobonjjffjbfekfjcgkhco_0.localstorage [-] Archivo eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_oadboiipflhobonjjffjbfekfjcgkhco_0.localstorage-journal [-] Archivo eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage [-] Archivo eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal [-] Archivo eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage [-] Archivo eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage-journal [!] Archivo No eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage [!] Archivo No eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage-journal [!] Archivo No eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage [!] Archivo No eliminar : C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal ***** [ DLLs ] ***** ***** [ WMI ] ***** ***** [ Accesos directos ] ***** ***** [ Tareas programadas ] ***** [-] Tarea eliminar : Nekatynufoch Configuration ***** [ Registro ] ***** [-] Llave eliminar : HKCU\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF} [-] Llave eliminar : HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF} [-] Llave eliminar : HKLM\SOFTWARE\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeoo [-] Llave eliminar : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} [-] Llave eliminar : HKCU\Software\Microsoft\Tinstalls [-] Llave eliminar : HKCU\Software\WTools [-] Llave eliminar : HKLM\SOFTWARE\MPC [-] Llave eliminar : HKLM\SOFTWARE\hohosearchSoftware [-] Llave eliminar : HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678} [-] Llave eliminar : HKLM\SOFTWARE\{E6276374-DE18-4AA5-A365-9016A2F98A2D} [-] Llave eliminar : HKLM\SOFTWARE\{G6276374-DEEE-4AAA-A355-9016A2F98A2D} [-] Llave eliminar : HKLM\SOFTWARE\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154} [-] Llave eliminar : [x64] HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678} [-] Llave eliminar : HKU\.DEFAULT\Software\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678} [-] Llave eliminar : HKU\S-1-5-21-2987856890-3978120495-1697047874-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Installer [-] Valor eliminar : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [UDP Query User{251160D0-732A-4CC6-8A1C-A7BB8B090393}C:\users\famille\appdata\roaming\acestream\engine\ace_engine.exe] [-] Valor eliminar : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [TCP Query User{7C69D47C-174C-4D7C-B59D-F18882D3C4A1}C:\users\famille\appdata\roaming\acestream\engine\ace_engine.exe] [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\akamaihd.net [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\bestpriceninja.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\foxi69.tlscdn.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\hdapp1008-a.akamaihd.net [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mpc.am [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\omniboxes.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pricepeep.net [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pstatic.bestpriceninja.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\search.mpc.am [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\st.chatango.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.pricepeep00.pricepeep.net [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\tlscdn.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\tradeadexchange.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.omniboxes.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.tradeadexchange.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\akamaihd.net [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\bestpriceninja.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\foxi69.tlscdn.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\hdapp1008-a.akamaihd.net [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mpc.am [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\omniboxes.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pricepeep.net [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pstatic.bestpriceninja.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\search.mpc.am [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\st.chatango.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.pricepeep00.pricepeep.net [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\tlscdn.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\tradeadexchange.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.omniboxes.com [-] Llave eliminar : HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.tradeadexchange.com [-] Valor eliminar : HKU\S-1-5-21-2987856890-3978120495-1697047874-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [Bubble Dock] [-] Valor eliminar : HKU\S-1-5-21-2987856890-3978120495-1697047874-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [Selection Tools] [-] Valor eliminar : HKU\S-1-5-21-2987856890-3978120495-1697047874-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [WindApp] ***** [ Navegadores Web ] ***** [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\252arjkq.default\prefs.js] eliminar : user_pref("browser.search.searchengine.alias", ""); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\252arjkq.default\prefs.js] eliminar : user_pref("browser.search.searchengine.ref", ""); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\252arjkq.default\prefs.js] eliminar : user_pref("browser.search.searchengine.ts", ""); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\252arjkq.default\prefs.js] eliminar : user_pref("browser.search.searchengine.type", ""); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\252arjkq.default\prefs.js] eliminar : user_pref("browser.search.searchengine.uid", ""); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\252arjkq.default\prefs.js] eliminar : user_pref("browser.search.searchengine.url", "hxxp://search.mpc.am?q={searchTerms}&cx=partner-pub-3796753109442372:3837783968"); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] eliminar : user_pref("browser.newtab.url", "hxxp://www.hohosearch.com/?ts=AHEqAX0tAX8qAU..&v=20160501&uid=64BA00E501DA9ED34A2706F42A71FA53&ptid=zxt&mode=ffseng"); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] eliminar : user_pref("browser.search.defaultenginename", "hohosearch"); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] eliminar : user_pref("browser.search.searchengine.hp", "hxxp://www.hohosearch.com/?ts=AHEqAX0tAX8qAU..&v=20160501&uid=64BA00E501DA9ED34A2706F42A71FA53&ptid=zxt&mode=ffsengext"); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] eliminar : user_pref("browser.search.searchengine.sp", "hxxp://www.hohosearch.com/chrome.php?mode=ffsengext&ptid=zxt&q={searchTerms}&ts=AHEqAX0tAX8qAU..&uid=64BA00E501DA9ED34A2706F42A71FA53&v=20160501"); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] eliminar : user_pref("browser.search.searchengine.url", "hxxp://www.hohosearch.com/chrome.php?mode=ffsengext&ptid=zxt&q={searchTerms}&ts=AHEqAX0tAX8qAU..&uid=64BA00E501DA9ED34A2706F42A71FA53&v=20160501"); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] eliminar : user_pref("browser.search.selectedEngine", "hohosearch"); [-] [C:\Users\carpentier\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] eliminar : user_pref("browser.startup.homepage", "hxxp://www.hohosearch.com/?ts=AHEqAX0tAX8qAU..&v=20160501&uid=64BA00E501DA9ED34A2706F42A71FA53&ptid=zxt&mode=ffseng"); [-] [C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] eliminar : npdicihegicnhaangkdmcgbjceoemeoo [-] [C:\Users\carpentier\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] eliminar : hxxp://www.hohosearch.com/?mode=nnnb&ptid=zxt&uid=64BA00E501DA9ED34A2706F42A71FA53&v=20160501&ts=AHEqAX0tAX8qAU.. [-] [C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] eliminar : battlefield-play4free.fr.softonic.com [-] [C:\Users\carpe\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] eliminar : npdicihegicnhaangkdmcgbjceoemeoo [-] [C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] eliminar : painttool-sai.softonic.fr [-] [C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] eliminar : coverxp.softonic.com [-] [C:\Users\famille\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] eliminar : npdicihegicnhaangkdmcgbjceoemeoo ************************* :: Llaves "Tracing" removidas :: Winsock Configuración borrada ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [31388 bytes] - [03/10/2015 21:37:18] C:\AdwCleaner\AdwCleaner[C2].txt - [5682 bytes] - [17/10/2015 10:08:45] C:\AdwCleaner\AdwCleaner[S1].txt - [31626 bytes] - [03/10/2015 21:35:51] C:\AdwCleaner\AdwCleaner[S2].txt - [23173 bytes] - [17/10/2015 10:07:01] ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [31683 bytes] ##########