# # # # # # #

AdwCleaner v2.306 - Logfile created 10/09/2013 at 09:22:33 Updated 19/07/2013 by Xplode Operating system : Microsoft Windows Service Pack 3 (32 bits) User : admin - OPDIST_MALIK Boot Mode : Normal Running from : I:\adwcleaner.exe Option [Delete]

***** [Services] ***** ***** [Files / Folders] ***** Deleted on reboot : C:\Documents and Settings\admin\Application Data\Mozilla\Fir efox\Profiles\q78bfsro.default\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433} Deleted on reboot : C:\Program Files\iMesh Applications Deleted on reboot : C:\Program Files\iMesh Applications\Mediabar File Deleted : C:\Documents and Settings\admin\Application Data\Mozilla\Firefox\ Profiles\q78bfsro.default\searchplugins\daemon-search.xml File Deleted : C:\Documents and Settings\admin\Application Data\Mozilla\Firefox\ Profiles\q78bfsro.default\searchplugins\Search_Results.xml File Deleted : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml File Deleted : C:\WINDOWS\system32\END Folder Deleted : C:\DOCUME~1\Administrator\LOCALS~1\Temp\boost_interprocess Folder Deleted : C:\Documents and Settings\admin\Application Data\B1Toolbar Folder Deleted : C:\Documents and Settings\admin\Application Data\Mozilla\Firefo x\Profiles\q78bfsro.default\extensions\{ade92211-31dc-4775-85c0-75659b099dd3} Folder Deleted : C:\Documents and Settings\admin\Application Data\Mozilla\Firefo x\Profiles\q78bfsro.default\shareazatoolbarguid Folder Deleted : C:\Documents and Settings\admin\Application Data\searchquband Folder Deleted : C:\Documents and Settings\admin\Application Data\searchresultst b Folder Deleted : C:\Documents and Settings\admin\Application Data\shareazatoolba rguid Folder Deleted : C:\Documents and Settings\admin\Local Settings\Application Data \B1E Folder Deleted : C:\Documents and Settings\admin\Local Settings\Application Data \Ilivid Player Folder Deleted : C:\Documents and Settings\admin\Local Settings\Application Data \PackageAware Folder Deleted : C:\Documents and Settings\Administrator\Application Data\Mozill a\Firefox\Profiles\s8u008av.default\extensions\{ade92211-31dc-4775-85c0-75659b09 9dd3} Folder Deleted : C:\Documents and Settings\Administrator\Application Data\Mozill a\Firefox\Profiles\s8u008av.default\shareazatoolbarguid Folder Deleted : C:\Documents and Settings\Administrator\Application Data\search quband Folder Deleted : C:\Documents and Settings\Administrator\Application Data\Search qutoolbar Folder Deleted : C:\Documents and Settings\All Users\Application Data\boost_inte rprocess Folder Deleted : C:\Documents and Settings\All Users\Application Data\Trymedia Folder Deleted : C:\Documents and Settings\LocalService\Application Data\Mozilla \Firefox\Profiles\pp4yxnl3.default\extensions\{ade92211-31dc-4775-85c0-75659b099 dd3} Folder Deleted : C:\Documents and Settings\LocalService\Application Data\Mozilla \Firefox\Profiles\pp4yxnl3.default\shareazatoolbarguid Folder Deleted : C:\Documents and Settings\LocalService\Application Data\searchq uband

Folder Deleted : C:\Documents and Settings\LocalService\Application Data\Searchq utoolbar Folder Deleted : C:\Program Files\Mozilla Firefox\extensions\{1FD91A9C-410C-4090 -BBCC-55D3450EF433} ***** [Registry] ***** Data Deleted : HKLM\..\Windows [AppInit_DLLs] = C:\DOCUME~1\ALLUSE~1\APPLIC~1\Wi ncert\WIN32C~1.DLL Data Deleted : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~1\IMESHA~1\Mediabar\Da tamngr\datamngr.dll Data Deleted : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~1\IMESHA~1\Mediabar\Da tamngr\IEBHO.dll Key Deleted : HKCU\Software\APN DTX Key Deleted : HKCU\Software\APN PIP Key Deleted : HKCU\Software\DataMngr Key Deleted : HKCU\Software\DataMngr_Toolbar Key Deleted : HKCU\Software\Imesh Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9 C68-4BB3-B188-DD9AF0FD21} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9 C68-4BB3-B188-DD9AF0FD2406} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0 D18-4FC7-90CC-5EA0ABBE9EB8} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478 D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099 AAC-C132-4136-9E9A-4E364A424E17} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079 A25-328F-4BD4-BE04-00955ACAA0A7} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717 F81-9148-4F12-8568-69135F087DB0} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ADE92 211-31DC-4775-85C0-75659B099DD3} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BE7A2 4F5-69CB-4708-B77B-B1EDA6043B95} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99B D32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38 -C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC -C132-4136-9E9A-4E364A424E17} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25 -328F-4BD4-BE04-00955ACAA0A7} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81 -9148-4F12-8568-69135F087DB0} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ADE92211 -31DC-4775-85C0-75659B099DD3} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BE7A24F5 -69CB-4708-B77B-B1EDA6043B95} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32 -C1FB-11D2-892F-0090271D4F88} Key Deleted : HKCU\Software\shareazatoolbarguid Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF} Key Deleted : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe Key Deleted : HKLM\SOFTWARE\Classes\BrowserConnection.Loader Key Deleted : HKLM\SOFTWARE\Classes\BrowserConnection.Loader.1 Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{474597C5-AB09-49D6-A4D5-2E8D7341384E}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{950F80EF-32C2-47DD-9C35-9576E21EE66E} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADE92211-31DC-4775-85C0-75659B099DD3} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BE7A24F5-69CB-4708-B77B-B1EDA6043B95} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265 ED5} Key Deleted : HKLM\SOFTWARE\Classes\toolband.eb_explorerbar Key Deleted : HKLM\SOFTWARE\Classes\toolband.eb_explorerbar.1 Key Deleted : HKLM\SOFTWARE\Classes\toolband.fh_hookeventsink Key Deleted : HKLM\SOFTWARE\Classes\toolband.fh_hookeventsink.1 Key Deleted : HKLM\SOFTWARE\Classes\toolband.ipm_printlistitem Key Deleted : HKLM\SOFTWARE\Classes\toolband.ipm_printlistitem.1 Key Deleted : HKLM\SOFTWARE\Classes\toolband.pm_dialogeventshandler Key Deleted : HKLM\SOFTWARE\Classes\toolband.pm_dialogeventshandler.1 Key Deleted : HKLM\SOFTWARE\Classes\toolband.pm_launcher Key Deleted : HKLM\SOFTWARE\Classes\toolband.pm_launcher.1 Key Deleted : HKLM\SOFTWARE\Classes\toolband.pm_printmanager Key Deleted : HKLM\SOFTWARE\Classes\toolband.pm_printmanager.1 Key Deleted : HKLM\SOFTWARE\Classes\toolband.pr_bindstatuscallback Key Deleted : HKLM\SOFTWARE\Classes\toolband.pr_bindstatuscallback.1 Key Deleted : HKLM\SOFTWARE\Classes\toolband.pr_cancelbuttoneventhandler Key Deleted : HKLM\SOFTWARE\Classes\toolband.pr_cancelbuttoneventhandler.1 Key Deleted : HKLM\SOFTWARE\Classes\toolband.pr_printdialogcallback Key Deleted : HKLM\SOFTWARE\Classes\toolband.pr_printdialogcallback.1 Key Deleted : HKLM\SOFTWARE\Classes\toolband.tbtoolband Key Deleted : HKLM\SOFTWARE\Classes\toolband.tbtoolband.1 Key Deleted : HKLM\SOFTWARE\Classes\toolband.useroptions Key Deleted : HKLM\SOFTWARE\Classes\toolband.useroptions.1 Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A147AA03-820F-4A0F-9F34-D6CB4004A2F 9} Key Deleted : HKLM\Software\DataMngr Key Deleted : HKLM\Software\iMeshSRTB Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPoli cy\{ADE92211-31DC-4775-85C0-75659B099DD3} Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DATAMNGR Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPC ache\daemon tools toolbar Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPC ache\shareazatoolbarguid Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He lper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He lper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He lper Objects\{ADE92211-31DC-4775-85C0-75659B099DD3} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He lper Objects\{BE7A24F5-69CB-4708-B77B-B1EDA6043B95} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02 478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF 99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Re sults Toolbar Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\shareazat oolbarguid Key Deleted : HKLM\Software\PIP Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{3 2099AAC-C132-4136-9E9A-4E364A424E17}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E

F99BD32-C1FB-11D2-892F-0090271D4F88}] Value Deleted : HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel [Homepage] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328 F-4BD4-BE04-00955ACAA0A7}] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{ADE92211-31D C-4775-85C0-75659B099DD3}] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10] ***** [Internet Browsers] ***** -\\ Internet Explorer v6.0.2900.5512 Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page Before] = hxxp://search.b1.org/?bsrc=4hixr&chid=c167991 --> hxxp://www.google.com Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Page Before] = hxxp://search.b1.org/?bsrc=4hixr&chid=c167991 --> hxxp://www.google.com -\\ Mozilla Firefox v3.6.15 (en-US) File : C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\P rofiles\pp4yxnl3.default\prefs.js Deleted : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&app id=390&systemid=406&sr=0&q="); File : C:\Documents and Settings\admin\Application Data\Mozilla\Firefox\Profiles \q78bfsro.default\prefs.js Deleted : user_pref("browser.search.defaultenginename", "Search Results"); Deleted : user_pref("browser.search.order.1", "Search Results"); Deleted : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&gct =ds&appid=393&systemid=1&apn_d[...] File : C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\ Profiles\s8u008av.default\prefs.js Deleted : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&app id=390&systemid=406&sr=0&q="); -\\ Google Chrome v30.0.1599.69 File : C:\Documents and Settings\admin\Local Settings\Application Data\Google\Ch rome\User Data\Default\Preferences Deleted [l.38] : search_url = "hxxp://dts.search-results.com/sr?src=crb&gct=ds&a ppid=393&systemid=1&apn_dtid=I[...] Deleted [l.2242] : homepage = "hxxp://search.imesh.net", Deleted [l.2620] : urls_to_restore_on_startup = [ "hxxp://search.imesh.net" ] ************************* AdwCleaner[R1].txt - [12337 octets] - [09/10/2013 09:21:59] AdwCleaner[S1].txt - [12063 octets] - [09/10/2013 09:22:33] ########## EOF - C:\AdwCleaner[S1].txt - [12124 octets] ##########