# AdwCleaner v3.022 - Report created 17/03/2014 at 15:01:53 # Updated 13/03/2014 by Xplode # Operating System : Windows 8.1 (64 bits) # Username : v Duuren - VANDUURENPC # Running from : C:\Users\v Duuren\Downloads\adwcleaner (1).exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\WPM Folder Deleted : C:\Program Files (x86)\Gophoto.it Folder Deleted : C:\Program Files (x86)\Mobogenie Folder Deleted : C:\Program Files (x86)\Common Files\337 Folder Deleted : C:\Users\VDUURE~1\AppData\Local\Temp\Desk365 Folder Deleted : C:\Users\v Duuren\AppData\Local\genienext Folder Deleted : C:\Users\v Duuren\AppData\Local\Mobogenie Folder Deleted : C:\Users\v Duuren\AppData\Roaming\newnext.me Folder Deleted : C:\Users\v Duuren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com Folder Deleted : C:\Users\v Duuren\Documents\Mobogenie Folder Deleted : C:\Users\v Duuren\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk File Deleted : C:\Users\v Duuren\AppData\Roaming\Mozilla\Firefox\Profiles\8puwcrs9.default\Extensions\gophoto@gophoto.it.xpi File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk File Deleted : C:\Users\v Duuren\AppData\Roaming\Mozilla\Firefox\Profiles\8puwcrs9.default\invalidprefs.js File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\nationzoom.xml File Deleted : C:\Users\v Duuren\AppData\Roaming\Mozilla\Firefox\Profiles\8puwcrs9.default\user.js File Deleted : C:\WINDOWS\System32\Tasks\Desk 365 RunAsStdUser ***** [ Shortcuts ] ***** Shortcut Disinfected : C:\Users\Public\Desktop\Google Chrome.lnk Shortcut Disinfected : C:\Users\v Duuren\Desktop\Mozilla Firefox.lnk Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk Shortcut Disinfected : C:\Users\v Duuren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Buienradar.nl - Weer - Actuele neerslag, weerbericht, weersverwachting, sneeuwradar en satellietbeelden (2).lnk Shortcut Disinfected : C:\Users\v Duuren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Buienradar.nl - Weer - Actuele neerslag, weerbericht, weersverwachting, sneeuwradar en satellietbeelden.lnk Shortcut Disinfected : C:\Users\v Duuren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Shortcut Disinfected : C:\Users\v Duuren\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk Shortcut Disinfected : C:\Users\v Duuren\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Shortcut Disinfected : C:\Users\v Duuren\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk Shortcut Disinfected : C:\Users\v Duuren\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk Shortcut Disinfected : C:\Users\v Duuren\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive] Key Deleted : HKLM\SOFTWARE\Classes\FTDownloader Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dealplylive.exe Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{947217BD-E967-400A-B14A-BA851A8EDCBB} Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command Key Deleted : HKCU\Software\1ClickDownload Key Deleted : HKCU\Software\DealPlyLive Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider Key Deleted : HKLM\Software\DealPlyLive Key Deleted : HKLM\Software\Desksvc Key Deleted : HKLM\Software\hdcode Key Deleted : HKLM\Software\nationzoomSoftware Key Deleted : HKLM\Software\supWPM Key Deleted : HKLM\Software\V9 Key Deleted : [x64] HKLM\SOFTWARE\Speedchecker Limited ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.16518 Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] -\\ Mozilla Firefox v24.0 (nl) [ File : C:\Users\v Duuren\AppData\Roaming\Mozilla\Firefox\Profiles\8puwcrs9.default\prefs.js ] Line Deleted : user_pref("browser.search.defaultenginename", "nationzoom"); Line Deleted : user_pref("browser.search.selectedEngine", "Search The Web (GoPhotoIt)"); Line Deleted : user_pref("browser.search.order.1", "Search The Web (GoPhotoIt)"); -\\ Google Chrome v33.0.1750.154 [ File : C:\Users\v Duuren\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [9465 octets] - [17/03/2014 15:00:59] AdwCleaner[S0].txt - [6654 octets] - [17/03/2014 15:01:53] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6714 octets] ##########