======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org F:\Ad-Remover\main.exe (SCAN [1]) -> Launched at 22:28:55 on 29/08/2011, Normal boot Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) Administrator@ANETA-PC ( ) ============== SEARCH ============== Folder found: C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\FireFox\Profiles\e1fbb0si.default\conduit Folder found: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Conduit Folder found: C:\Program Files\Conduit Folder found: C:\Documents and Settings\Administrator\Dane aplikacji\OpenCandy Folder found: C:\Documents and Settings\Administrator\Dane aplikacji\Toolbar4 Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\Toolbar.CT2776682 Key found: HKLM\Software\Conduit Key found: HKLM\Software\Freeze.com Key found: HKCU\Software\Conduit Key found: HKLM\Software\Cheat Engine\OpenCandy Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{42168F92-DA71-42E6-BC7F-132EAC1F1899} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [6.0 (pl)] **** HKLM_MozillaPlugins\@gamersfirst.com/LiveLauncher (x) HKLM_MozillaPlugins\@ngm.nexoneu.com/NxGame (x) HKLM_MozillaPlugins\@pandonetworks.com/PandoWebPlugin (x) HKLM_MozillaPlugins\Adobe Reader (x) HKCU_MozillaPlugins\pandonetworks.com/PandoWebPlugin (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) Extensions - "afurladvisor@anchorfree.com" (?) HKLM_Extensions|smartwebprinting@hp.com - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 HKCU_Extensions|smartwebprinting@hp.com - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\FireFox\Profiles\e1fbb0si.default -- Prefs.js - browser.startup.homepage, about:home Prefs.js - browser.startup.homepage_override.buildID, 20110811165603 Prefs.js - browser.startup.homepage_override.mstone, rv:6.0 ======================================== **** Internet Explorer Version [8.0.6001.18702] **** HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_SearchScopes\{c99fdc39-a1ae-4b24-8d71-e5274f8d7c54} - "Private Search" (hxxp://search.hotspotshield.com/g/results.php?c=s&q={searchTerms}) HKLM_ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} - C:\Program Files\Hyperionics DB Toolbar\TbHelper2.exe (x) HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Common Files\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) ======================================== F:\Ad-Remover\Quarantine: 0 File(s) F:\Ad-Remover\Backup: 0 File(s) C:\Ad-Report-SCAN[1].txt - 29/08/2011 22:29:02 (1200 Byte(s)) End at: 22:29:44, 29/08/2011 ============== E.O.F ==============