# # # # # # #

AdwCleaner v2.306 - Logfile created 11/21/2013 at 12:08:20 Updated 19/07/2013 by Xplode Operating system : Windows 7 Ultimate Service Pack 1 (32 bits) User : Jainish - JAINISH-PC Boot Mode : Normal Running from : C:\Users\Jainish\Downloads\adwcleaner.exe Option [Delete]

***** [Services] ***** Stopped & Deleted : IB Updater ***** [Files / Folders] ***** Deleted on reboot : C:\ProgramData\Browser Manager File Deleted : C:\END File Deleted : C:\Program Files\mozilla firefox\searchplugins\Web Search.xml File Deleted : C:\user.js File Deleted : C:\Users\Jainish\AppData\Roaming\Mozilla\Firefox\Profiles\extensi ons\gophoto@gophoto.it.xpi File Deleted : C:\Users\Jainish\AppData\Roaming\Mozilla\Firefox\Profiles\extensi ons\searchplugins\Web Search.xml File Deleted : C:\Users\Jainish\AppData\Roaming\Mozilla\Firefox\Profiles\htbxra6 3.default\searchplugins\searchgol.xml File Disinfected : C:\Users\Jainish\AppData\Roaming\Microsoft\Internet Explorer\ Quick Launch\User Pinned\TaskBar\Google Chrome.lnk Folder Deleted : C:\Program Files\Common Files\Wondershare Folder Deleted : C:\Program Files\Gophoto.it Folder Deleted : C:\Program Files\IB Updater Folder Deleted : C:\Program Files\Mozilla Firefox\Extensions\ffxtlbr@babylon.com Folder Deleted : C:\Program Files\optimizer pro Folder Deleted : C:\Program Files\Perion Folder Deleted : C:\Program Files\Protected Search Folder Deleted : C:\Program Files\Wondershare Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\ProgramData\boost_interprocess Folder Deleted : C:\ProgramData\Braouwse2save Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershar e Folder Deleted : C:\ProgramData\SoftSafe Folder Deleted : C:\ProgramData\ssayfe savve Folder Deleted : C:\ProgramData\Tarma Installer Folder Deleted : C:\Users\Jainish\AppData\Local\APN Folder Deleted : C:\Users\Jainish\AppData\Local\DownTango Folder Deleted : C:\Users\Jainish\AppData\Local\Google\Chrome\User Data\Default\ Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk Folder Deleted : C:\Users\Jainish\AppData\Local\PackageAware Folder Deleted : C:\Users\Jainish\AppData\Local\Temp\eIntaller Folder Deleted : C:\Users\Jainish\AppData\Local\Wondershare Folder Deleted : C:\Users\Jainish\AppData\LocalLow\incredibar.com Folder Deleted : C:\Users\Jainish\AppData\LocalLow\SimplyTech Folder Deleted : C:\Users\Jainish\AppData\Roaming\Babylon Folder Deleted : C:\Users\Jainish\AppData\Roaming\DSite Folder Deleted : C:\Users\Jainish\AppData\Roaming\Mozilla\Firefox\Profiles\exten sions\OneClickDownload@OneClickDownload.com Folder Deleted : C:\Users\Jainish\AppData\Roaming\Wondershare Folder Deleted : C:\Users\Jainish\AppData\Roaming\yourfiledownloader Folder Deleted : C:\Users\Jainish\Documents\optimizer pro Folder Deleted : C:\Users\Jainish\Documents\Wondershare

Folder Deleted : C:\Windows\system32\WNLT ***** [Registry] ***** Data Deleted : HKLM\...\StartMenuInternet\FIREFOX.EXE [(Default)] = C:\Program F iles\Mozilla Firefox\firefox.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=co r&utm_campaign=eXQ&utm_content=sc&from=cor&uid=ST3500413AS_Z2A71TA3XXXXZ2A71TA3& ts=1380982778 Data Deleted : HKLM\...\StartMenuInternet\IEXPLORE.EXE [(Default)] = C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_mediu m=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=ST3500413AS_Z2A71TA3XXXXZ2A71 TA3&ts=1380982778 Key Deleted : HKCU\Software\1ClickDownload Key Deleted : HKCU\Software\5b55dad8e16aea46 Key Deleted : HKCU\Software\AppDataLow\SProtector Key Deleted : HKCU\Software\BabSolution Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\DataMngr Key Deleted : HKCU\Software\DataMngr_Toolbar Key Deleted : HKCU\Software\DownTango Key Deleted : HKCU\Software\IM Key Deleted : HKCU\Software\Imesh Key Deleted : HKCU\Software\ImInstaller Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C 2DC-4D79-A620-CCE0C0A66CC9} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-9 9AF-4226-BDF6-49120163DE86} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9 C68-4BB3-B188-DD9AF0FD21} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5 D3F-42EE-B79C-185A7020515B} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-1 35F-47C0-9269-B4C6572FD61A} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0 C35-8A85-403A-B9D2-65C292C39087} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35 -8A85-403A-B9D2-65C292C39087} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{503E067F -2914-4EDD-8432-2D6C52635E23} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7 -832F-4BDF-B144-100EDDD0C3AE} Key Deleted : HKCU\Software\ProtectedSearch Key Deleted : HKCU\Software\Softonic Key Deleted : HKCU\Software\YourFileDownloader Key Deleted : HKLM\SOFTWARE\5b55dad8e16aea46 Key Deleted : HKLM\Software\Babylon Key Deleted : HKLM\SOFTWARE\Classes\1ClicktorrentFile Key Deleted : HKLM\SOFTWARE\Classes\1ClicktorrentFile1 Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C} Key Deleted : HKLM\SOFTWARE\Classes\AppID\Extension.DLL Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{503E067F-2914-4EDD-8432-2D6C52635E23} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2} Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1 Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0 687} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F 1AB} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F9 3B2} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9 266} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F922 62C} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5 A6A} Key Deleted : HKLM\SOFTWARE\Classes\oneclick Key Deleted : HKLM\SOFTWARE\Classes\oneclickmg Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D1 3} Key Deleted : HKLM\SOFTWARE\Classes\wtb.Band Key Deleted : HKLM\SOFTWARE\Classes\wtb.Band.1 Key Deleted : HKLM\SOFTWARE\Classes\wtb.NotificationSource Key Deleted : HKLM\SOFTWARE\Classes\wtb.NotificationSource.1 Key Deleted : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl Key Deleted : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl.1 Key Deleted : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo Key Deleted : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo.1 Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\Software\DataMngr Key Deleted : HKLM\Software\DownTango Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhha jpdfd Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jbpkiefagocgkmemidfngdkamlo ieekf Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgb jonjg Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegj pjjbk Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnk iboco Key Deleted : HKLM\Software\IB Updater Key Deleted : HKLM\Software\iMeshSRTB Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPoli cy\{503E067F-2914-4EDD-8432-2D6C52635E23} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPoli cy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-9 9AF-4226-BDF6-49120163DE86} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9 C68-4BB3-B188-DD9AF0FD21} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5 D3F-42EE-B79C-185A7020515B} Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He lper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35

-8A85-403a-B9D2-65C292C39087}_is1 Key Deleted : HKLM\Software\SP Global Key Deleted : HKLM\Software\SProtector Key Deleted : HKLM\Software\Tarma Installer Key Deleted : HKLM\Software\YourFileDownloader Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442 D-49DD-99D7-DC866BE87DBC}] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9 D2-65C292C39087}] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{FE1DEEEA-DB6D-44b8-83 F0-34FC0F9D1052}] ***** [Internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16447 Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp ://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp://www.goog le.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Default_Page_ URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2938 --> hxxp: //www.google.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp://w ww.google.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp: //search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp://www.googl e.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=h p&from=cor&uid=ST3500413AS_Z2A71TA3XXXXZ2A71TA3&ts=1380982778 --> hxxp://www.goo gle.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\Search - Start Page] = hxx p://search.certified-toolbar.com?si=41460&home=true&tid=2938 --> hxxp://www.goog le.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\Search - Start Default_Pag e_URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2938 --> hxx p://www.google.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_UR L] = hxxp://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp:/ /www.google.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxx p://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp://www.goo gle.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hx xp://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp://www.go ogle.com Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Page] = hxx p://search.certified-toolbar.com?si=41460&home=true&tid=2938 --> hxxp://www.goog le.com Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Default_Pag e_URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2938 --> hxx p://www.google.com Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_UR L] = hxxp://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp:/ /www.google.com Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxx p://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp://www.goo gle.com

Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hx xp://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp://www.go ogle.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - (Default)] = h xxp://search.certified-toolbar.com?si=41460&bs=true&tid=2938&q=%s --> hxxp://www .google.com Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = h xxp://search.certified-toolbar.com?si=41460&bs=true&tid=2938&q=%s --> hxxp://www .google.com Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp://w ww.google.com Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=h p&from=cor&uid=ST3500413AS_Z2A71TA3XXXXZ2A71TA3&ts=1380982778 --> hxxp://www.goo gle.com Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp: //www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from =cor&uid=ST3500413AS_Z2A71TA3XXXXZ2A71TA3&ts=1380982778 --> hxxp://www.google.co m Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Page] = hxxp ://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp://www.goog le.com Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Default_Page_ URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2938 --> hxxp: //www.google.com Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Bar] = hxxp: //search.certified-toolbar.com?si=41460&tid=2938&bs=true&q= --> hxxp://www.googl e.com -\\ Mozilla Firefox v15.0.1 (en-US) File : C:\Users\Jainish\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js C:\Users\Jainish\AppData\Roaming\Mozilla\Firefox\Profiles\0\user.js ... Deleted ! [OK] File is clean. File : C:\Users\Jainish\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\pref s.js C:\Users\Jainish\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js ... Deleted ! Deleted : user_pref("browser.search.defaultenginename", "Web Search"); Deleted : user_pref("browser.search.defaultengine", "Web Search"); Deleted : user_pref("browser.search.order.1", "Web Search"); File : C:\Users\Jainish\AppData\Roaming\Mozilla\Firefox\Profiles\htbxra63.defaul t\prefs.js C:\Users\Jainish\AppData\Roaming\Mozilla\Firefox\Profiles\htbxra63.default\user. js ... Deleted ! Deleted : user_pref("extensions.QloulwPSjZj.scode", "(function(){if(window.self. location.hostname.indexOf(\"ac[...] Deleted : user_pref("extensions.mSZh93GjB.scode", "(function(){if(window.self.lo cation.hostname.indexOf(\"aceb[...] Deleted : user_pref("extensions.pgige4bG4k85.scode", "(function(){if(window.self

.location.hostname.indexOf(\"a[...] Deleted : user_pref("extensions.z8feC5LQ.scode", "(function(){if(window.self.loc ation.hostname.indexOf(\"acebo[...] -\\ Google Chrome v31.0.1650.57 File : C:\Users\Jainish\AppData\Local\Google\Chrome\User Data\Default\Preference s [OK] File is clean. ************************* AdwCleaner[R1].txt - [15153 octets] - [21/11/2013 12:07:55] AdwCleaner[S1].txt - [15599 octets] - [21/11/2013 12:08:20] ########## EOF - C:\AdwCleaner[S1].txt - [15660 octets] ##########