# AdwCleaner v2.114 - Logfile created 03/13/2013 at 14:51:15
# Updated 05/03/2013 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (64 bits)
# User : .kicker - KICKER-PC
# Boot Mode : Normal
# Running from : C:\Users\.kicker\Desktop\adwcleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
File Deleted : C:\Users\.kicker\AppData\Roaming\Mozilla\Firefox\Profiles\2dewnnbv.default\searchplugins\WebSearch.xml
Folder Deleted : C:\Program Files (x86)\SimilarSites
Folder Deleted : C:\ProgramData\InstallMate
Folder Deleted : C:\ProgramData\SimilarSites
Folder Deleted : C:\Users\.kicker\AppData\Local\Google\Chrome\User Data\Default\Extensions\hidjnkeodmholilgafgdlgmgggbhnigl
Folder Deleted : C:\Users\.kicker\AppData\Roaming\Advanced System Protector
Folder Deleted : C:\Users\.kicker\AppData\Roaming\SimilarSites
***** [Registry] *****
Data Deleted : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\browse~1\sprote~1.dll
Data Deleted : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\websea~1\sprote~1.dll
Key Deleted : HKCU\Software\AppDataLow\SProtector
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CCA8F2AB-BE4E-41F0-A289-4D960CEA58EA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{807DF5E0-4EF7-48A8-A405-239F3E29FFA9}
Key Deleted : HKLM\Software\SimilarSites
Key Deleted : HKLM\Software\SP Global
Key Deleted : HKLM\Software\SProtector
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE69C007-C452-4D3E-86D2-1730DF8BC871}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A36BCB13-778D-4A40-99C1-D686086D268F}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hidjnkeodmholilgafgdlgmgggbhnigl
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SimilarSites
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36BCB13-778D-4A40-99C1-D686086D268F}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{FE69C007-C452-4D3E-86D2-1730DF8BC871}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{FE69C007-C452-4D3E-86D2-1730DF8BC871}]
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{FE69C007-C452-4D3E-86D2-1730DF8BC871}]
***** [Internet Browsers] *****
-\\ Internet Explorer v9.0.8112.16464
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://websearch.pu-results.info/?pid=726&r=2013/03/06&hid=24132936&lg=EN&cc=SK --> hxxp://
www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://websearch.pu-results.info/?pid=726&r=2013/03/06&hid=24132936&lg=EN&cc=SK --> hxxp://
www.google.com
-\\ Mozilla Firefox v19.0.2 (sk)
File : C:\Users\.kicker\AppData\Roaming\Mozilla\Firefox\Profiles\2dewnnbv.default\prefs.js
Deleted : user_pref("aol_toolbar.default.homepage.check", false);
Deleted : user_pref("aol_toolbar.default.search.check", false);
Deleted : user_pref("browser.search.defaultenginename", "WebSearch");
Deleted : user_pref("browser.search.defaultenginename,S", "WebSearch");
Deleted : user_pref("browser.search.defaulturl", "hxxp://websearch.pu-results.info/?pid=726&r=2013/03/06&hid=2[...]
Deleted : user_pref("browser.search.order.1", "WebSearch");
Deleted : user_pref("browser.search.order.1,S", "WebSearch");
Deleted : user_pref("browser.search.selectedEngine,S", "WebSearch");
Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Deleted : user_pref("sweetim.toolbar.searchguard.enable", "");
-\\ Google Chrome v25.0.1364.152
File : C:\Users\.kicker\AppData\Local\Google\Chrome\User Data\Default\Preferences
Deleted [l.31] : icon_url = "hxxp://websearch.pu-results.info/favicon.ico",
Deleted [l.34] : keyword = "websearch",
Deleted [l.37] : search_url = "hxxp://websearch.pu-results.info/?l=1&q={searchTerms}&pid=726&r=2013/03/06&hid=[...]
Deleted [l.38] : suggest_url = "hxxp://websearch.pu-results.info/?l=1&q={searchTerms}&pid=726&r=2013/03/06&hid[...]
Deleted [l.1969] : homepage = "hxxp://websearch.pu-results.info/?pid=726&r=2013/03/06&hid=24132936&lg=EN&cc=SK",
Deleted [l.2307] : urls_to_restore_on_startup = [ "hxxp://websearch.pu-results.info/?pid=726&r=2013/03/06&hid=24[...]
-\\ Opera v12.14.1738.0
File : C:\Users\.kicker\AppData\Roaming\Opera\Opera\operaprefs.ini
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [5936 octets] - [13/03/2013 14:42:45]
AdwCleaner[R2].txt - [5930 octets] - [13/03/2013 14:49:36]
AdwCleaner[S1].txt - [319 octets] - [13/03/2013 14:51:03]
AdwCleaner[S2].txt - [5906 octets] - [13/03/2013 14:51:15]
########## EOF - C:\AdwCleaner[S2].txt - [5966 octets] ##########