# AdwCleaner v2.007 - Logfile created 12/20/2012 at 22:14:21
# Updated 06/11/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Marika - SEMPRON
# Boot Mode : Normal
# Running from : G:\AdwCleaner.exe
# Option [Delete]
***** [Services] *****
Stopped & Deleted : ICQ Service
***** [Files / Folders] *****
File Deleted : C:\Documents and Settings\Marika\Application Data\Microsoft\Internet Explorer\qipsearchbar.dll
File Deleted : C:\Documents and Settings\Marika\Application Data\Mozilla\Firefox\Profiles\fhdf5c3b.default\searchplugins\icqplugin.xml
File Deleted : C:\Documents and Settings\Marika\Application Data\Mozilla\Firefox\Profiles\fhdf5c3b.default\searchplugins\icqplugin-1.xml
File Deleted : C:\Documents and Settings\Marika\Application Data\Mozilla\Firefox\Profiles\fhdf5c3b.default\searchplugins\icqplugin-2.xml
File Deleted : C:\Documents and Settings\Marika\Application Data\Mozilla\Firefox\Profiles\fhdf5c3b.default\searchplugins\icqplugin-3.xml
File Deleted : C:\Program Files\Mozilla Firefox\.autoreg
Folder Deleted : C:\Documents and Settings\All Users\Application Data\ICQ\ICQToolbar
Folder Deleted : C:\Program Files\ICQ6Toolbar
***** [Registry] *****
Key Deleted : HKCU\Software\CToolbar
Key Deleted : HKCU\Software\Headlight
Key Deleted : HKCU\Software\ICQToolbar
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
Key Deleted : HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\7EE743314C844C7F445B8B1D7617612DF1FDD50F
Key Deleted : HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\E6A6A4A475FCE37F8B5AC2F1244DEB2BFCA5615A
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ICQToolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
***** [Internet Browsers] *****
-\\ Internet Explorer v8.0.6001.18702
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] =
hxxp://search.qip.ru/ie -->
hxxp://www.google.com-\\ Mozilla Firefox v3.0.19 (sk)
Profile name : default
File : C:\Documents and Settings\Marika\Application Data\Mozilla\Firefox\Profiles\fhdf5c3b.default\prefs.js
Deleted : user_pref("keyword.URL", "hxxp://search.qip.ru/search?from=FF&query=");
-\\ Google Chrome v [Unable to get version]
File : C:\Documents and Settings\Marika\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
Deleted [l.45] : keyword = "search.qip.ru",
Deleted [l.48] : search_url = "hxxp://search.qip.ru/?query={searchTerms}",
*************************
AdwCleaner[S1].txt - [3557 octets] - [20/12/2012 22:14:21]
########## EOF - C:\AdwCleaner[S1].txt - [3617 octets] ##########