#

#
#
#
#
#
#

AdwCleaner v4.106 - Report created 08/01/2015 at 01:05:00

Updated 21/12/2014 by Xplode
Database : 2015-01-03.1 [Live]
Operating System : Windows 7 Ultimate (64 bits)
Username : ASUS - ASUS-PC
Running from : c:\Users\ASUS\Downloads\Programs\AdwCleaner.exe
Option : Scan

***** [ Services ] *****

Service Found : 70e6ca8c
Service Found : YahooAUService
***** [ Files / Folders ] *****
File Found : C:\END
Folder Found : C:\Program Files (x86)\NCH Software
Folder Found : C:\Program Files (x86)\Optimizer Pro
Folder Found : C:\Program Files (x86)\ParetoLogic
Folder Found : C:\Program Files (x86)\SerialTrunc
Folder Found : C:\ProgramData\apn
Folder Found : C:\ProgramData\NCH Software
Folder Found : C:\ProgramData\ParetoLogic
Folder Found : C:\ProgramData\Yahoo! Companion
Folder Found : C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Exten
sions\acaoakiamfeidcmgooclgeleejkbaecf
Folder Found : C:\Users\ASUS\AppData\Local\visi_coupon
Folder Found : C:\Users\ASUS\AppData\LocalLow\Yahoo! Companion
Folder Found : C:\Users\ASUS\AppData\LocalLow\YahooCouponAddOn
Folder Found : C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Progra
ms\ParetoLogic
Folder Found : C:\Users\ASUS\AppData\Roaming\NCH Software
Folder Found : C:\Users\ASUS\AppData\Roaming\ValueApps
Folder Found : C:\Users\ASUS\AppData\Roaming\YourFileDownloader
Folder Found : C:\Users\ASUS\Documents\Optimizer Pro
Folder Found : C:\Windows\SysWOW64\SearchProtect
***** [ Scheduled Tasks ] *****
Task Found : YourFile DownloaderUpdate
***** [ Shortcuts ] *****
***** [ Registry ] *****
Data Found : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\s
hell\open\command [(Default)] - "C:\Program Files (x86)\Mozilla Firefox\firefox.
exe" hxxp://www.mystartsearch.com/?type=sc&ts=1420648232&from=smt&uid=TOSHIBAXMQ
01ABD075_739TP1DZTXX739TP1DZT
Data Found : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\
shell\open\command [(Default)] - C:\Program Files (x86)\Internet Explorer\iexplo
re.exe hxxp://www.mystartsearch.com/?type=sc&ts=1420648232&from=smt&uid=TOSHIBAX
MQ01ABD075_739TP1DZTXX739TP1DZT
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [Ap
pInit_DLLs] - C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL
Key Found : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\WinToFlash Suggestor
Key Found : HKCU\Software\Conduit

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99A

F-4226-BDF6-49120163DE86}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0055C08
9-8582-441B-A0BF-17B458C2A3A8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D3
8-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{81017EA
9-9AA8-4A6A-9734-7AF40E7D593F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD3
2-C1FB-11D2-892F-0090271D4F88}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC36B0B
D-27F0-4CDD-8AB1-50651EFC3EFD}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0055C089-8
582-441B-A0BF-17B458C2A3A8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C
3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{81017EA9-9
AA8-4A6A-9734-7AF40E7D593F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C
1FB-11D2-892F-0090271D4F88}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC36B0BD-2
7F0-4CDD-8AB1-50651EFC3EFD}
Key Found : HKCU\Software\ParetoLogic
Key Found : [x64] HKCU\Software\Conduit
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A
4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A
4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKCU\Software\ParetoLogic
Key Found : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Found : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Found : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4A40A2A9-DD1C-11CE-B7A6-00AA006EC3D4}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5
C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EE
E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FF
E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C627178
5}
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\acaoakiamfeidcmgooclgeleejkba

ecf
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99A
F-4226-BDF6-49120163DE86}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Help
er Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Help
er Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0247
8D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99
BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B9FA5FF-3
E61-4658-B0DA-E6DDB46D6BAD}_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Comp
anion
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Tool
bar
Key Found : HKLM\SOFTWARE\mystartsearchSoftware
Key Found : HKLM\SOFTWARE\ParetoLogic
Key Found : HKLM\SOFTWARE\YourFileDownloader
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{0055C089-8582-441B-A0BF-17B458C2A
3A8}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA
4768F5C}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED14
8AC8EEE}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED14
8AC8FFE}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{78CE34FD-F6D4-4866-B79C-A3726
8D06A04}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{80904944-C726-4C7D-A452-3FFF2
A882095}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767
BAD5C67}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C
6271785}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A
4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A
4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browse
r Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{81017EA
9-9AA8-4A6A-9734-7AF40E7D593F}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB11D2-892F-0090271D4F88}]
***** [ Browsers ] *****
-\\ Internet Explorer v8.0.7600.16385
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL
] - hxxp://www.mystartsearch.com/?type=hp&ts=1420648232&from=smt&uid=TOSHIBAXMQ0
1ABD075_739TP1DZTXX739TP1DZT
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_U
RL] - hxxp://www.mystartsearch.com/web/?type=ds&ts=1420648232&from=smt&uid=TOSHI
BAXMQ01ABD075_739TP1DZTXX739TP1DZT&q={searchTerms}
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL
] - hxxp://www.mystartsearch.com/?type=hp&ts=1420648232&from=smt&uid=TOSHIBAXMQ0
1ABD075_739TP1DZTXX739TP1DZT

Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hx

xp://www.mystartsearch.com/?type=hp&ts=1420648232&from=smt&uid=TOSHIBAXMQ01ABD07
5_739TP1DZTXX739TP1DZT
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - h
xxp://www.mystartsearch.com/web/?type=ds&ts=1420648232&from=smt&uid=TOSHIBAXMQ01
ABD075_739TP1DZTXX739TP1DZT&q={searchTerms}
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Se
arch_URL] - hxxp://www.mystartsearch.com/web/?type=ds&ts=1420648232&from=smt&uid
=TOSHIBAXMQ01ABD075_739TP1DZTXX739TP1DZT&q={searchTerms}
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Pa
ge_URL] - hxxp://www.mystartsearch.com/?type=hp&ts=1420648232&from=smt&uid=TOSHI
BAXMQ01ABD075_739TP1DZTXX739TP1DZT
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page
] - hxxp://www.mystartsearch.com/?type=hp&ts=1420648232&from=smt&uid=TOSHIBAXMQ0
1ABD075_739TP1DZTXX739TP1DZT
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Pag
e] - hxxp://www.mystartsearch.com/web/?type=ds&ts=1420648232&from=smt&uid=TOSHIB
AXMQ01ABD075_739TP1DZTXX739TP1DZT&q={searchTerms}
-\\ Mozilla Firefox v34.0.5 (x86 en-US)
-\\ Google Chrome v
[C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [
Search Provider] : hxxp://search.conduit.com/Results.aspx?ctid=CT3310393&octid=E
B_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP712C6BD9-1728-4DF2-9C26-0F1B80B00
90E&q={searchTerms}&SSPV=
[C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [
Search Provider] : hxxp://search.conduit.com/Results.aspx?ctid=CT3310393&octid=E
B_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP712C6BD9-1728-4DF2-9C26-0F1B80B00
90E&q={searchTerms}&SSPV=
[C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [
Search Provider] : hxxp://www.mystartsearch.com/web/?type=ds&ts=1420648232&from=
smt&uid=TOSHIBAXMQ01ABD075_739TP1DZTXX739TP1DZT&q={searchTerms}
[C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [
Search Provider] : hxxp://www.mystartsearch.com/web/?type=ds&ts=1420648232&from=
smt&uid=TOSHIBAXMQ01ABD075_739TP1DZTXX739TP1DZT&q={searchTerms}
*************************
AdwCleaner[R0].txt - [11337 octets] - [08/01/2015 01:05:00]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [11398 octets] ##########