# AdwCleaner v5.000 - Logfile created 17/08/2015 at 22:09:52 # Updated 14/08/2015 by Xplode # Database : 2015-08-14.3 [Local] # Operating system : Windows 7 Ultimate Service Pack 1 (x86) # Username : Dr.M.Abou Shaar - DRMABOUSHAAR-PC # Running from : C:\Users\Dr.M.Abou Shaar\Desktop\adwcleaner_5.000.exe # Option : Cleaning ***** [ Services ] ***** ***** [ Folders ] ***** [-] Folder Deleted : C:\Save [-] Folder Deleted : C:\Program Files\kuaiyong [-] Folder Deleted : C:\Program Files\Tongbu [-] Folder Deleted : C:\ProgramData\apn [-] Folder Deleted : C:\Users\Dr.M.Abou Shaar\AppData\Roaming\kuaiyong [-] Folder Deleted : C:\Users\Dr.M.Abou Shaar\Documents\Tongbu [-] Folder Deleted : C:\Windows\system32\config\systemprofile\Documents\Mobogenie ***** [ Files ] ***** [-] File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\Ask.xml [-] File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\yahoo.xml [-] File Deleted : C:\Users\Dr.M.Abou Shaar\daemonprocess.txt [-] File Deleted : C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\searchplugins\Ask.xml [-] File Deleted : C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\searchplugins\Askcom.xml [-] File Deleted : C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\user.js ***** [ Shortcuts ] ***** ***** [ Scheduled tasks ] ***** ***** [ Registry ] ***** [-] Key Deleted : HKCU\Software\Classes\iLivid.torrent [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL [-] Key Deleted : HKLM\SOFTWARE\Classes\iLivid.torrent [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874} [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F} [-] Key Deleted : HKCU\Software\APN PIP [-] Key Deleted : HKCU\Software\Conduit [-] Key Deleted : HKCU\Software\eSupport.com [-] Key Deleted : HKCU\Software\ilivid [-] Key Deleted : HKCU\Software\SereneScreen [-] Key Deleted : HKCU\Software\AppDataLow\Software\WinToFlash Suggestor [-] Key Deleted : HKLM\SOFTWARE\PIP [-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} ***** [ Web browsers ] ***** [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("avira.safe_search.installed", "[\"safesearch\"]"); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("browser.newtab.url", "hxxps://safesearch.avira.com/#?source=newtab"); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("browser.search.defaultengine", "Ask.com"); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("browser.search.defaultenginename", "Avira SafeSearch"); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("browser.search.order.1", "Ask.com"); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...] [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("extensions.bootstrappedAddons", "{\"jid0-zXo3XFGyiDalgkeEO4UYJTUwo2I@jetpack\":{\"version\":\"0.56.1-signed\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Dr.M.Abou Shaar\\\\AppDa[...] [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("extensions.safesearch.MP_DISTINCT_ID", "\"148f7025e52427-0b1349f842af54-7f6c1535-0-148f7025e533aa\""); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("extensions.safesearch.SAUTH_expires_at", "1427736646"); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("extensions.safesearch.SAUTH_rndsnr", "\"743a41624c2e16ef499f01aa3af11b5bc7c5188e\""); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("extensions.safesearch.SAUTH_userid", "4461724451"); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("extensions.safesearch.SAUTH_utoken", "\"eddfa731bedf5e3be523e1612998539289fb3bbb\""); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("extensions.safesearch.install", "1412893400668"); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("extensions.safesearch.search_offer_disabled", "true"); [-] [C:\Users\Dr.M.Abou Shaar\AppData\Roaming\Mozilla\Firefox\Profiles\jwjpd38j.default\prefs.js] [Preference] Deleted : user_pref("extensions.xpiState", "{\"app-profile\":{\"abs@avira.com\":{\"d\":\"C:\\\\Users\\\\Dr.M.Abou Shaar\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\jwjpd38j.default\\\\extensions\[...] ************************* :: Proxy settings cleared :: Winsock settings cleared ************************* C:\AdwCleaner[C1].txt - [391 octets] - [17/08/2015 21:57:32] C:\AdwCleaner[C2].txt - [5825 octets] - [17/08/2015 22:09:52] C:\AdwCleaner[S1].txt - [5558 octets] - [17/08/2015 21:53:38] C:\AdwCleaner[S2].txt - [5683 octets] - [17/08/2015 22:08:39] ########## EOF - C:\AdwCleaner[C2].txt - [6014 octets] ##########