======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 =======

Updated by TeamXscript on 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
website: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Launched at 16:34:53 on 08/09/2011, Normal boot

Microsoft Windows 7 Ultimate  Service Pack 1 (X86) 
Ernest@ERNEST-KOMPUTER (System manufacturer System Product Name) 
 
============== SEARCH ==============



-- File opened: C:\Users\Ernest\AppData\Roaming\Mozilla\FireFox\Profiles\civoq7po.default\Prefs.js --
Line found: user_pref("browser.search.selectedEngine", "qooqlle"); 
Line found: user_pref("browser.startup.homepage", "hxxp://www.qooqlle.com/"); 
-- File closed --
 

Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{42168F92-DA71-42E6-BC7F-132EAC1F1899}

Value found: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Readar_sl


============== ADDITIONNAL SCAN ==============

**** Mozilla Firefox Version [6.0.1 (pl)] ****

Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search)
Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results)
Searchplugins\fcmdSrchddr.xml (hxxp://start.facemoods.com/?a=ddr&f=4&q={searchTerms}/)
Searchplugins\McSiteAdvisor.xml (	hxxp://search.yahoo.com/search)
Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb)
Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms})
Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj)
Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms})
Components\browsercomps.dll (Mozilla Foundation)
Extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} (Click to call with Skype)
HKLM_Extensions|{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\ (x)
HKLM_Extensions|{4bcdbfd0-fa26-11de-8a39-0800200c9a66} - C:\Users\Ernest\AppData\Roaming\Mozilla\FireFox\{4bcdbfd0-fa26-11de-8a39-0800200c9a66} (x)

-- C:\Users\Ernest\AppData\Roaming\Mozilla\FireFox\Profiles\civoq7po.default --
Searchplugins\search.xml (?)
Prefs.js - browser.search.selectedEngine, qooqlle
Prefs.js - browser.startup.homepage, hxxp://www.qooqlle.com/
Prefs.js - browser.startup.homepage_override.mstone, false

========================================

**** Internet Explorer Version [9.0.8112.16421] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://www.qooqlle.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_URLSearchHooks|{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - "SearchHook Class" (C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll)
HKCU_SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A} - "Search" (hxxp://start.facemoods.com/?a=ddr&s={searchTerms}&f=4)
HKCU_SearchScopes\{D4391ED1-FE9C-44CB-A656-F43BB308FC8B} - "Search" (hxxp://www.tangosearch.com/?q={searchTerms}&a=SEARCH)
HKLM_SearchScopes\{D4391ED1-FE9C-44CB-A656-F43BB308FC8B} - "Search" (hxxp://www.tangosearch.com/?q={searchTerms}&a=SEARCH)
HKCU_Toolbar\WebBrowser|{32099AAC-C132-4136-9E9A-4E364A424E17} (x)
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
HKLM_ElevationPolicy\40a28544-0d54-4f4f-9802-9c67ad5a3354 - C:\Program Files\jdownloader-pro\jdownloader-proToolbarHelper.exe (x)
HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x)
HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x)
HKLM_ElevationPolicy\{2211118d-417c-4791-8024-4d098a848551} - C:\Program Files\Logitech\Desktop Messenger\8876480\8.1.1.87-8876480SL\Program\register.exe (x)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{7fd136df-fe1b-4e9c-b3a9-3e20315f09c8} - C:\Program Files\Logitech\Desktop Messenger\8876480\8.1.1.87-8876480SL\Program\PrvCnt.exe (x)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll)
BHO\{DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - "IplexToALLPlayer" (C:\PROGRA~1\ALLPLA~1\Iplex\IPLEXT~1.DLL)
BHO\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - "IEPluginBHO Class" () (x)

========================================

C:\Program Files\Ad-Remover\Quarantine: 10 File(s)
C:\Program Files\Ad-Remover\Backup: 17 File(s)

C:\Ad-Report-CLEAN[1].txt - 08/09/2011 16:32:00 (9196 Byte(s)) 
C:\Ad-Report-SCAN[1].txt - 07/09/2011 19:16:36 (10321 Byte(s)) 
C:\Ad-Report-SCAN[2].txt - 08/09/2011 16:34:58 (5415 Byte(s)) 

End at: 16:35:28, 08/09/2011 
 
============== E.O.F ==============