New
#41
I waited a few days before running adwcleaner and performing a clean and it seem temporary folders in IE are still filling up with this spam, also CCleaner found about 700MB of crap in chrome's temporary folders even though I apparently cleaned it out only the other day. Will see if any more turn up. I might have to do a full restore at this point.
# AdwCleaner v3.212 - Report created 18/06/2014 at 13:10:07
# Updated 05/06/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Owner - OWNER-VAIO
# Running from : C:\Users\Owner\Downloads\AdwCleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
File Deleted : C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\xltmmy9p.default-1384281180295\user.js
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updatealbrechto_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updatealbrechto_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : [x64] HKLM\SOFTWARE\DeviceVM
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17126
-\\ Mozilla Firefox v30.0 (en-GB)
[ File : C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\xltmmy9p.default-1384281180295\prefs.js ]
Line Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 0);
-\\ Google Chrome v35.0.1916.153
[ File : C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}
Deleted [Startup_urls] : hxxps://mail.google.com/mail/ca/u/0/?shva=1#inbox
*************************
AdwCleaner[R0].txt - [2737 octets] - [13/06/2014 17:37:37]
AdwCleaner[R1].txt - [2465 octets] - [14/06/2014 01:47:03]
AdwCleaner[R2].txt - [2525 octets] - [14/06/2014 13:09:40]
AdwCleaner[R3].txt - [2603 octets] - [18/06/2014 13:08:56]
AdwCleaner[S0].txt - [2560 octets] - [18/06/2014 13:10:07]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2620 octets] ##########
Last edited by STU9000; 18 Jun 2014 at 19:01.