# AdwCleaner v6.

021 - Logfile created 07/12/2016 at 00:09:03

# Updated on 06/10/2016 by ToolsLib
# Database : 2016-10-18.1 [Local]
# Operating System : Windows 10 Pro (X64)
# Username : welcome - DESKTOP-K68NGJB
# Running from : C:\Users\welcome\Downloads\AdwCleaner.exe
# Mode: Clean
# Support : https://toolslib.net/forum

***** [ Services ] *****

[-] Service deleted: Policies

[-] Service deleted: GoogleChromeUpService
[-] Service deleted: BugFixxer
[-] Service deleted: WindowsSecurity
[-] Service deleted: MaohaWifiNetPro
[-] Service deleted: MaohaWifiSvr

***** [ Folders ] *****

[-] Folder deleted: C:\Program Files (x86)\61DB1CB9-1481021873-E611-B27E-

EC8EB50EB431
[-] Folder deleted: C:\Users\welcome\AppData\Roaming\Note-up
[-] Folder deleted: C:\Users\welcome\AppData\Roaming\VDI
[-] Folder deleted: C:\Users\welcome\AppData\Roaming\Microsoft\Windows\Start
Menu\ByteFence
[-] Folder deleted: C:\ProgramData\Windows Security
[-] Folder deleted: C:\ProgramData\Thunder Network
[#] Folder deleted on reboot: C:\ProgramData\Application Data\Windows Security
[#] Folder deleted on reboot: C:\ProgramData\Application Data\Thunder Network
[-] Folder deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MaohaWiFi
[#] Folder deleted on reboot: C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\MaohaWifi
[-] Folder deleted: C:\Program Files (x86)\OtherSearch
[-] Folder deleted: C:\Program Files (x86)\DPower
[-] Folder deleted: C:\Windows\BugFixxer
[#] Folder deleted on reboot: C:\Program Files (x86)\DPower

***** [ Files ] *****

[-] File deleted: C:\Windows\SysNative\drivers\1a9a3100dc53b8338434a861c73ba7c3.sys

[-] File deleted: C:\Users\welcome\AppData\Roaming\Microsoft\Internet
Explorer\Quick Launch\MaohaWiFi.lnk
[-] File deleted: C:\ProgramData\service.exe
[#] File deleted: C:\ProgramData\Application Data\service.exe
[#] File deleted: C:\ProgramData\service.exe

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Shortcuts ] *****

***** [ Scheduled Tasks ] *****

***** [ Registry ] *****

[-] Key deleted:

HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Policies
[#] Key deleted on reboot: [x64]
HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Policies
[-] Key deleted:
HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SYSSECURE
[#] Key deleted on reboot: [x64]
HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SYSSECURE
[-] Key deleted:
HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\GoogleChromeUpService
[#] Key deleted on reboot: [x64]
HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\GoogleChromeUpService
[-] Key deleted:
HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\BugFixxer
[#] Key deleted on reboot: [x64]
HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\BugFixxer
[-] Key deleted: HKU\S-1-5-21-1168519326-309544570-3247456480-
1001\Software\Installer
[-] Key deleted: HKU\S-1-5-21-1168519326-309544570-3247456480-
1001\Software\PRODUCTSETUP
[-] Key deleted: HKU\S-1-5-21-1168519326-309544570-3247456480-
1001\Software\csastats
[-] Key deleted: HKU\S-1-5-21-1168519326-309544570-3247456480-1001\Software\Maoha
[-] Key deleted: HKU\S-1-5-21-1168519326-309544570-3247456480-1001\Software\VDI
[#] Key deleted on reboot: HKCU\Software\Installer
[#] Key deleted on reboot: HKCU\Software\PRODUCTSETUP
[#] Key deleted on reboot: HKCU\Software\csastats
[#] Key deleted on reboot: HKCU\Software\Maoha
[#] Key deleted on reboot: HKCU\Software\VDI
[-] Key deleted: HKLM\SOFTWARE\SkypeUpdateEx
[-] Key deleted: HKLM\SOFTWARE\youndooSoftware
[-] Key deleted: HKLM\SOFTWARE\OtherSearch
[-] Key deleted: HKLM\SOFTWARE\Maoha
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ASPackage
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YSPackage
[#] Key deleted on reboot: [x64] HKCU\Software\Installer
[#] Key deleted on reboot: [x64] HKCU\Software\PRODUCTSETUP
[#] Key deleted on reboot: [x64] HKCU\Software\csastats
[#] Key deleted on reboot: [x64] HKCU\Software\Maoha
[#] Key deleted on reboot: [x64] HKCU\Software\VDI
[-] Data restored: HKU\S-1-5-21-1168519326-309544570-3247456480-
1001\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data restored: HKU\S-1-5-21-1168519326-309544570-3247456480-
1001\Software\Microsoft\Internet Explorer\Main [Search Bar]
[-] Data restored: HKU\S-1-5-21-1168519326-309544570-3247456480-
1001\Software\Microsoft\Internet Explorer\Main [SearchAssistant]
[-] Data restored: HKU\S-1-5-21-1168519326-309544570-3247456480-
1001\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
[-] Data restored: HKU\S-1-5-21-1168519326-309544570-3247456480-
1001\Software\Microsoft\Internet Explorer\SearchUrl [Default]
[-] Data restored: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Main [SearchAssistant]

[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Search

[Default_Search_URL]
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Search
Page]
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Search
Bar]
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Main
[SearchAssistant]
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Search
[Default_Search_URL]
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchUrl
[Default]
[-] Key deleted: HKU\S-1-5-21-1168519326-309544570-3247456480-
1001\Software\Microsoft\Internet Explorer\SearchScopes\{D2D73A08-70B6-49F9-BAE2-
185BD617E4EC}
[#] Key deleted on reboot: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\
{D2D73A08-70B6-49F9-BAE2-185BD617E4EC}
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
[DefaultScope]
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet
Explorer\SearchScopes\{D2D73A08-70B6-49F9-BAE2-185BD617E4EC}
[-] Key deleted: HKCU\Software\Microsoft\Internet
Explorer\DOMStorage\castplatform.com
[-] Key deleted: HKCU\Software\Microsoft\Internet
Explorer\DOMStorage\cdn.castplatform.com
[-] Key deleted: HKCU\Software\Microsoft\Internet
Explorer\LowRegistry\DOMStorage\www-searching.com
[-] Key deleted: HKCU\Software\Classes\Local
Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.m
icrosoftedge_8wekyb3d8bbwe\Children\001\Internet
Explorer\EdpDomStorage\piroga.space
[-] Key deleted: HKCU\Software\Classes\Local
Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.m
icrosoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www-
searching.com
[-] Key deleted: HKCU\Software\Classes\Local
Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.m
icrosoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\piroga.space
[-] Key deleted: HKCU\Software\Classes\Local
Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.m
icrosoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www-
searching.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet
Explorer\DOMStorage\castplatform.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet
Explorer\DOMStorage\cdn.castplatform.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet
Explorer\LowRegistry\DOMStorage\www-searching.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local
Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.m
icrosoftedge_8wekyb3d8bbwe\Children\001\Internet
Explorer\EdpDomStorage\piroga.space
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local
Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.m
icrosoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www-
searching.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local
Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.m
icrosoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\piroga.space
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local
Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.m
icrosoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www-
searching.com
[-] Value deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
[SpaceSoundPro]
[-] Value deleted: HKU\S-1-5-21-1168519326-309544570-3247456480-
1001\Software\Microsoft\Windows\CurrentVersion\Run [msiql]
[#] Value deleted on reboot: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
[msiql]
[#] Value deleted on reboot: [x64]
HKCU\Software\Microsoft\Windows\CurrentVersion\Run [msiql]
[-] Key deleted: HKLM\SOFTWARE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9

***** [ Web browsers ] *****

*************************

:: "Tracing" keys deleted

:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [5990 Bytes] - [19/10/2016 12:05:25]

C:\AdwCleaner\AdwCleaner[C2].txt - [9314 Bytes] - [07/12/2016 00:09:03]
C:\AdwCleaner\AdwCleaner[S0].txt - [3464 Bytes] - [30/09/2016 05:58:42]
C:\AdwCleaner\AdwCleaner[S1].txt - [5519 Bytes] - [19/10/2016 12:03:58]
C:\AdwCleaner\AdwCleaner[S2].txt - [11044 Bytes] - [07/12/2016 00:08:33]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [9607 Bytes] ##########