#

#
#
#
#
#
#

AdwCleaner v4.202 - Logfile created 11/05/2015 at 23:57:00

Updated 23/04/2015 by Xplode
Database : 2015-05-09.1 [Server]
Operating system : Windows 8.1 Enterprise (x64)
Username : Minh - MINH-PC
Running from : C:\Users\Minh\Downloads\Programs\adwcleaner.exe
Option : Cleaning

***** [ Services ] *****

[#] Service Deleted : IePluginServices
Service Deleted : nethfdrv
[#] Service Deleted : NethxxpService
[#] Service Deleted : ServiceUpdater
[#] Service Deleted : 92815276
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\CostMin
Folder Deleted : C:\ProgramData\IePluginServices
Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\ProgramData\884a36a4ffa3ec63
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightspark
0.5.3-git
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBestOffe
rsToday
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minilyrics
Folder Deleted : C:\Program Files (x86)\AmiExt
Folder Deleted : C:\Program Files (x86)\CostMin
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\Lightspark 0.5.3-git
Folder Deleted : C:\Program Files (x86)\SupTab
Folder Deleted : C:\Program Files (x86)\Minilyrics
Folder Deleted : C:\Program Files (x86)\mbot_vn_5
Folder Deleted : C:\Users\Minh\AppData\Local\Temp\PriceFountain
Folder Deleted : C:\Users\Minh\AppData\Local\Temp\MyPcBackup
Folder Deleted : C:\Program Files\PCDApp
Folder Deleted : C:\Users\Minh\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Minh\AppData\Local\iLivid
Folder Deleted : C:\Users\Minh\AppData\Local\PriceFountain
Folder Deleted : C:\Users\Minh\AppData\Local\mbot_vn_5
Folder Deleted : C:\Users\Minh\AppData\Roaming\eCyber
Folder Deleted : C:\Users\Minh\AppData\Roaming\WebNavi
Folder Deleted : C:\Users\Minh\AppData\Roaming\RHEng
Folder Deleted : C:\Users\Minh\AppData\Roaming\PriceFountain
Folder Deleted : C:\Users\Minh\AppData\Roaming\Minilyrics
Folder Deleted : C:\Users\Minh\AppData\Roaming\Microsoft\Windows\Start Menu\Prog
rams\PriceFountain
Folder Deleted : C:\Users\Minh\Documents\DriverFinder
File Deleted : C:\Users\Minh\AppData\Roaming\Mozilla\Firefox\Profiles\ioj7mbao.d
efault-1431347222307\Extensions\{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi
File Deleted : C:\Windows\SysWOW64\hfnapi.dll
File Deleted : C:\Windows\SysWOW64\hfpapi.dll
File Deleted : C:\Windows\SysWOW64\installd.exe
File Deleted : C:\Windows\SysWOW64\nethtsrv.exe
File Deleted : C:\Windows\SysWOW64\netupdsrv.exe
File Deleted : C:\Windows\System32\drivers\nethfdrv.sys
File Deleted : C:\Windows\System32\drivers\92815276.sys
File Deleted : C:\Users\Minh\AppData\Roaming\Mozilla\Firefox\Profiles\ioj7mbao.d
efault-1431347222307\user.js

***** [ Scheduled tasks ] *****

Task Deleted : Price Fountain
Task Deleted : LaunchPreSignup
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ext@flashenhancer.com]
Value Deleted : HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
[Homepage]
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePlug
inServices
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Window
sMangerProtect
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [pricefountai
nw.exe]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mbot_vn_5]
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A60B6BB-FA81-4EFA-AB9C-A820E2143736}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9BB812EA-6A11-4F94-AE32-DB3FD45EC496}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B608CC98-54DE-4775-96C9-097DE398500C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4580AB54-3C2F-4970-9A77-8628FA182F03}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{46B5EE7F-3B6B-4079-A756-5EFC10B1F50B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4
326}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5C6B193D-C4D0-4A0C-8509-8EA566380
A7C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7697BC38-D0FA-454B-AC75-968B4CCAB
FCE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5
C67}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D01C1E11-ED7A-4791-8408-E63EECDA4
8FF}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{66B51873-B53D-42EC-BC1A-862EB4DB041
D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BDB0F124-48E8-43A5-A263-45A7093CF05
8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EAB5257A-1FB3-474C-9B42-231F52622E7
2}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99E29823-2F67-41C3-8AA5-6425097A771
F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{157B1AA6-3E5C-404A-9118-C1D91F53704
0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He
lper Objects\{5A60B6BB-FA81-4EFA-AB9C-A820E2143736}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He
lper Objects\{B608CC98-54DE-4775-96C9-097DE398500C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5A60B6BB
-FA81-4EFA-AB9C-A820E2143736}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B608CC98
-54DE-4775-96C9-097DE398500C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5A60B
6BB-FA81-4EFA-AB9C-A820E2143736}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A60B6BB-FA81-4EFA-AB9C-A820E21

43736}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22
869AC4326}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{5C6B193D-C4D0-4A0C-8509-8EA
566380A7C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7697BC38-D0FA-454B-AC75-968
B4CCABFCE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-357
67BAD5C67}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D01C1E11-ED7A-4791-8408-E63
EECDA48FF}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brow
ser Helper Objects\{5A60B6BB-FA81-4EFA-AB9C-A820E2143736}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.E
XE\shell\open\command
Key Deleted : HKCU\Software\AmiExt
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\SupHpUISoft
Key Deleted : HKCU\Software\Tutorials
Key Deleted : HKCU\Software\TutoTag
Key Deleted : HKCU\Software\PriceFountain
Key Deleted : HKCU\Software\CrossBrowser
Key Deleted : HKCU\Software\Squeaky
Key Deleted : HKCU\Software\MiniLyrics
Key Deleted : HKCU\Software\AppDataLow\Software\AmiExt
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Deleted : HKLM\SOFTWARE\AmiExt
Key Deleted : HKLM\SOFTWARE\Flash-Enhancer
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\Lightspark Team
Key Deleted : HKLM\SOFTWARE\MyBestOffersToday
Key Deleted : HKLM\SOFTWARE\PIP
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\SupTab
Key Deleted : HKLM\SOFTWARE\supWindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\supWPM
Key Deleted : HKLM\SOFTWARE\Tutorials
Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
Key Deleted : HKLM\SOFTWARE\AdGazelle
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceFoun
tain
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2F5F003B
-C71B-72E3-42B4-DE51AB079EB2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Flash-Enh
ancer
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\inethnfd
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lightspar
k
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MiniLyric
s
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mbot_vn_5
_is1
Data Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet S
ettings [ProxyServer] - hxxp=127.0.0.1:52495;hxxps=127.0.0.1:52495

Data Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet S

ettings [ProxyEnable] - 1
Data Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet S
ettings [ProxyOverride] - <-loopback>
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
[ProxyOverride] - <local>
***** [ Web browsers ] *****
-\\ Internet Explorer v11.0.9600.17344
Setting Restored
h_URL]
Setting Restored
Setting Restored
_Search_URL]
Setting Restored
Page]

: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Searc

: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default
: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search

-\\ Mozilla Firefox v38.0 (x86 vi)

-\\ Google Chrome v42.0.2311.135
[C:\Users\Minh\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted
[Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Minh\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted
[Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
*************************
AdwCleaner[R0].txt - [11032 bytes] - [11/05/2015 23:56:07]
AdwCleaner[S0].txt - [9667 bytes] - [11/05/2015 23:57:00]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9726 bytes] ##########