#

#
#
#
#
#
#
#

AdwCleaner v6.020 - Logfile created 20/09/2016 at 20:25:47

Updated on 14/09/2016 by ToolsLib
Database : 2016-09-20.4 [Server]
Operating System : Windows 10 Home (X64)
Username : Lindsay - DESKTOP-LADNQJO
Running from : C:\Users\Lindsay\Desktop\AdwCleaner.exe
Mode: Clean
Support : https://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder deleted: C:\Program Files\ByteFence
***** [ Files ] *****

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Shortcuts ] *****

***** [ Scheduled Tasks ] *****

***** [ Registry ] *****

[-] Key deleted: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\Clas
ses\AppXrh6feys59dqfzsv9p3s9p6aep0hwtb23
[#] Key deleted on reboot: HKCU\Software\Classes\AppXrh6feys59dqfzsv9p3s9p6aep0h
wtb23
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\AppXrh6feys59dqfzsv9p3s9p
6aep0hwtb23
[-] Key deleted: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\PROD
UCTSETUP
[-] Key deleted: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\Inst
antSupport
[-] Key deleted: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\PCAc
celeratePro
[-] Key deleted: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\csas
tats
[-] Key deleted: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\InST
ab
[-] Key deleted: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\ACPT
ab

[-] Key deleted: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\Stac

kPlayer
[-] Key deleted: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\ICSW
1.22
[#] Key deleted on reboot: HKCU\Software\PRODUCTSETUP
[#] Key deleted on reboot: HKCU\Software\InstantSupport
[#] Key deleted on reboot: HKCU\Software\PCAcceleratePro
[#] Key deleted on reboot: HKCU\Software\csastats
[#] Key deleted on reboot: HKCU\Software\InSTab
[#] Key deleted on reboot: HKCU\Software\ACPTab
[#] Key deleted on reboot: HKCU\Software\StackPlayer
[#] Key deleted on reboot: HKCU\Software\ICSW1.22
[-] Key deleted: HKLM\SOFTWARE\ByteFence
[-] Key deleted: HKLM\SOFTWARE\InstantSupport
[-] Key deleted: HKLM\SOFTWARE\PCAcceleratePro
[-] Key deleted: HKLM\SOFTWARE\StackPlayer
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ByteFe
nce
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCAcce
leratePro & Instant support
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FFF20
E2F-7DA7-4421-8FD9-0B9A10DF3BE1}
[#] Key deleted on reboot: [x64] HKCU\Software\PRODUCTSETUP
[#] Key deleted on reboot: [x64] HKCU\Software\InstantSupport
[#] Key deleted on reboot: [x64] HKCU\Software\PCAcceleratePro
[#] Key deleted on reboot: [x64] HKCU\Software\csastats
[#] Key deleted on reboot: [x64] HKCU\Software\InSTab
[#] Key deleted on reboot: [x64] HKCU\Software\ACPTab
[#] Key deleted on reboot: [x64] HKCU\Software\StackPlayer
[#] Key deleted on reboot: [x64] HKCU\Software\ICSW1.22
[-] Key deleted: [x64] HKLM\SOFTWARE\ByteFence
[-] Key deleted: [x64] HKLM\SOFTWARE\WebBar
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
{0BCE8B0A-1E76-44E5-9909-3CF804D92E4D}_is1
[-] Data restored: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data restored: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start P
age]
[-] Key deleted: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\Micr
osoft\Internet Explorer\SearchScopes\{EAA16E48-43BE-4138-B315-C0F30AB31BAC}
[-] Data restored: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\Mi
crosoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E
1416B8B2E3A}
[#] Key deleted on reboot: HKCU\Software\Microsoft\Internet Explorer\SearchScope
s\{EAA16E48-43BE-4138-B315-C0F30AB31BAC}
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [Defau
ltScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE9
3-D776-472f-A0FF-E1416B8B2E3A}
[-] Data restored: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [Defau
ltScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\Searc
hScopes\{EAA16E48-43BE-4138-B315-C0F30AB31BAC}
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes
[DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0
633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Data restored: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
[DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatfo
rm.com

[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castpl

atform.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMSt
orage\castplatform.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMSt
orage\cdn.castplatform.com
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [InstantSu
pport]
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [PCAcceler
atePro]
[-] Value deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Web
Bar Toolbar]
[-] Value deleted: HKU\S-1-5-21-2811034889-517102836-1636462637-1001\Software\Mi
crosoft\Windows\CurrentVersion\Run [Stack Player]
[#] Value deleted on reboot: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
[Stack Player]
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Stack Pla
yer]
[#] Value deleted on reboot: [x64] HKCU\Software\Microsoft\Windows\CurrentVersio
n\Run [Stack Player]
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl
\FEATURE_BROWSER_EMULATION [PCAcceleratePro.exe]
[-] Value deleted: HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl
\FEATURE_BROWSER_EMULATION [PCAcceleratePro.exe]
[-] Value deleted: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\F
eatureControl\FEATURE_BROWSER_EMULATION [winwb.exe]
[-] Key deleted: HKLM\SOFTWARE\Classes\*\shell\ByteFence File Scan
[-] Key deleted: HKLM\SOFTWARE\Classes\Directory\shell\ByteFence Folder Scan
***** [ Web browsers ] *****
[-] Chrome preferences cleaned: "browser.search.defaultenginename" - "Yahoo! Po
wered"
[-] Chrome preferences cleaned: "browser.search.selectedEngine" - "Yahoo! Power
ed"
[-] Chrome preferences cleaned: "browser.startup.homepage" - "hxxps://us.search
.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nwmeddnld_16_35
&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dus%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1
Qzu0FtDyByCtC0Czz0ByCyCyCtAtBtC0AtCtN0D0Tzu0StCyBtDyDtN1L2XzutAtFtByEtFyCtFzytN1
L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0ByB0EtAtD0CtCtGyB0BtD0AtG0CyE0C0FtGtDyEzz0FtGy
B0A0A0FyCtAzz0B0EtAyC0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szzzzzy0AyB0DzztBtGzzyEtBtBtGyEt
C0ByEtG0AyEyByDtG0DtDtD0B0EtCyDzytBtByD0F2QtN0A0LzuyE%26cr%3D189530932%26a%3Dwbf
_nwmeddnld_16_35%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome"
[-] [C:\Users\Lindsay\AppData\Local\Chromium\User Data\Default\Web data] [Search
Provider] Deleted: yahoo! powered
[-] [C:\Users\Lindsay\AppData\Local\Chromium\User Data\Default] [startup_urls] D
eleted: hxxps://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003
&type=wbf_nwmeddnld_16_35&param1=1&param2=f%3D7%26b%3Dchmm%26cc%3Dus%26pa%3DWinc
y%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyByCtC0Czz0ByCyCyCtAtBtC0AtCtN0D0Tzu0StCyBtDyDtN1L2
XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0ByB0EtAtD0CtCtGyB0BtD0At
G0CyE0C0FtGtDyEzz0FtGyB0A0A0FyCtAzz0B0EtAyC0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szzzzzy0Ay
B0DzztBtGzzyEtBtBtGyEtC0ByEtG0AyEyByDtG0DtDtD0B0EtCyDzytBtByD0F2QtN0A0LzuyE%26cr
%3D189530932%26a%3Dwbf_nwmeddnld_16_35%26os_ver%3D10.0%26os%3DWindows%2B10%2BHom
e
[-] [C:\Users\Lindsay\AppData\Local\Chromium\User Data\Default] [homepage] Delet
ed: hxxps://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&typ
e=wbf_nwmeddnld_16_35&param1=1&param2=f%3D1%26b%3Dchmm%26cc%3Dus%26pa%3DWincy%26
cd%3D2XzuyEtN2Y1L1Qzu0FtDyByCtC0Czz0ByCyCyCtAtBtC0AtCtN0D0Tzu0StCyBtDyDtN1L2Xzut
AtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0ByB0EtAtD0CtCtGyB0BtD0AtG0Cy

E0C0FtGtDyEzz0FtGyB0A0A0FyCtAzz0B0EtAyC0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szzzzzy0AyB0Dz
ztBtGzzyEtBtBtGyEtC0ByEtG0AyEyByDtG0DtDtD0B0EtCyDzytBtByD0F2QtN0A0LzuyE%26cr%3D1
89530932%26a%3Dwbf_nwmeddnld_16_35%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
[-] [C:\Users\Lindsay\AppData\Local\Google\Chrome\User Data\Default\Web data] [S
earch Provider] Deleted: aol.com
[-] [C:\Users\Lindsay\AppData\Local\Google\Chrome\User Data\Default\Web data] [S
earch Provider] Deleted: ask.com
*************************
:: "Tracing" keys deleted
:: Winsock settings cleared
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [8858 Bytes] - [20/09/2016 20:25:47]
C:\AdwCleaner\AdwCleaner[S0].txt - [8859 Bytes] - [20/09/2016 20:15:27]
C:\AdwCleaner\AdwCleaner[S1].txt - [7712 Bytes] - [20/09/2016 20:24:40]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [9077 Bytes] ##########