======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Launched at 21:01:26 on 12/09/2011, Normal boot Microsoft Windows 7 Home Premium (X86) Xxx@XXX-KOMPUTER (Gigabyte Technology Co., Ltd. G31M-ES2L) ============== SEARCH ============== Key found: HKCU\Software\AppDataLow\Software\Conduit Key found: HKCU\Software\AppDataLow\Software\Toolbar Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{42168F92-DA71-42E6-BC7F-132EAC1F1899} Key found: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.6.18 (pl)] **** Plugins\npdeployJava1.dll (Oracle) Plugins\npqtplugin.dll (Apple Computer, Inc.) Plugins\npqtplugin2.dll (Apple Computer, Inc.) Plugins\npqtplugin3.dll (Apple Computer, Inc.) Plugins\npqtplugin4.dll (Apple Computer, Inc.) Plugins\npqtplugin5.dll (Apple Computer, Inc.) Plugins\npqtplugin6.dll (Apple Computer, Inc.) Plugins\npqtplugin7.dll (Apple Computer, Inc.) HKLM_MozillaPlugins\@pandonetworks.com/PandoWebPlugin (x) HKCU_MozillaPlugins\pandonetworks.com/PandoWebPlugin (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Extensions\quickstores@quickstores.de (QuickStores-Toolbar) HKLM_Extensions|{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\ (x) HKLM_Extensions|{BBDA0591-3099-440a-AA10-41764D9DB4DB} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\IPSFFPlgn\ HKLM_Extensions|{2D3F3651-74B9-4795-BDEC-6DA2F431CB62} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\coFFPlgn_2010_9_0_6 -- C:\Users\Xxx\AppData\Roaming\Mozilla\FireFox\Profiles\xshjr7dj.default -- Extensions\ffox@bandoo.com (Bandoo for Firefox) Extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3} (XfireXO Toolbar) Prefs.js - browser.search.selectedEngine, Prefs.js - browser.startup.homepage, Prefs.js - browser.startup.homepage_override.mstone, false ======================================== **** Internet Explorer Version [8.0.7600.16385] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_URLSearchHooks|{87d5d709-40f2-48a7-8f47-7bb821af70ab} - "Softonic-Polska2 Toolbar" (C:\Program Files\Softonic-Polska2\tbSoft.dll) HKCU_URLSearchHooks|{09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - "4shared.com Toolbar" (C:\Program Files\4shared.com\prxtb4sha.dll) HKCU_URLSearchHooks|{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - "uTorrentBar Toolbar" (C:\Program Files\uTorrentBar\prxtbuTor.dll) HKLM_URLSearchHooks|{87d5d709-40f2-48a7-8f47-7bb821af70ab} - "Softonic-Polska2 Toolbar" (C:\Program Files\Softonic-Polska2\tbSoft.dll) HKLM_URLSearchHooks|{09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - "4shared.com Toolbar" (C:\Program Files\4shared.com\prxtb4sha.dll) HKLM_URLSearchHooks|{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - "uTorrentBar Toolbar" (C:\Program Files\uTorrentBar\prxtbuTor.dll) HKCU_SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e} - "Search" (hxxp://www.bigseekpro.com/search/browser/hypercam/{60D0AB11-F762-4FC5-8ABE-C2E62...) HKCU_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} - "Search Results" (hxxp://dts.search-results.com/sr?src=ieb&appid=101&systemid=406&q={searchTerms}) HKLM_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} - "Search Results" (hxxp://dts.search-results.com/sr?src=ieb&appid=101&systemid=406&q={searchTerms}) HKCU_Toolbar\WebBrowser|{87D5D709-40F2-48A7-8F47-7BB821AF70AB} (C:\Program Files\Softonic-Polska2\tbSoft.dll) HKCU_Toolbar\WebBrowser|{09EC805C-CB2E-4D53-B0D3-A75A428B81C7} (C:\Program Files\4shared.com\prxtb4sha.dll) HKLM_Toolbar|{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} (x) HKLM_Toolbar|{87d5d709-40f2-48a7-8f47-7bb821af70ab} (C:\Program Files\Softonic-Polska2\tbSoft.dll) HKLM_Toolbar|{09ec805c-cb2e-4d53-b0d3-a75a428b81c7} (C:\Program Files\4shared.com\prxtb4sha.dll) HKLM_Toolbar|{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} (C:\Program Files\uTorrentBar\prxtbuTor.dll) HKLM_Toolbar|{8dcb7100-df86-4384-8842-8fa844297b3f} ("C:\Program Files\Microsoft\BingBar\BingExt.dll") (x) HKLM_ElevationPolicy\17c9af48-7122-4b36-9340-1d58d8b2ab41 - C:\Program Files\XfireXO\XfireXOToolbarHelper.exe (x) HKLM_ElevationPolicy\33ee504f-4379-4bd4-8edc-43b50165599b - C:\Program Files\XfireXO\XfireXOToolbarHelper.exe (x) HKLM_ElevationPolicy\462cde8a-a59e-4d24-9f4a-0b497648f19e - C:\Program Files\XfireXO\XfireXOToolbarHelper.exe (x) HKLM_ElevationPolicy\4dd672f2-9f1a-4858-98a6-78136895271e - C:\Program Files\Free_Lunch_Design\Free_Lunch_DesignToolbarHelper.exe (x) HKLM_ElevationPolicy\64150b37-e6cf-4a55-b7f2-3266c1201efc - C:\Program Files\Babylon-English\Babylon-EnglishToolbarHelper.exe (x) HKLM_ElevationPolicy\{02E6478D-F6A6-4D2D-830C-3B68D5C32A3B} - C:\Users\Xxx\AppData\Local\Conduit\CT2786678\uTorrentBarAutoUpdateHelper.exe (x) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x) HKLM_ElevationPolicy\{3638813D-C263-419E-9BA3-82322FD5D1AC} - C:\Program Files\uTorrentBar\uTorrentBarToolbarHelper.exe (?) HKLM_ElevationPolicy\{3B9A6E32-36C9-4946-B78C-3F58E3785EC1} - C:\Program Files\Java\jre6\bin\unpack200.exe (Oracle) HKLM_ElevationPolicy\{436263CF-3032-42DB-8625-4C953A7D2507} - C:\Program Files\Softonic-Polska2\Softonic-Polska2ToolbarHelper.exe (?) HKLM_ElevationPolicy\{44D1B085-E495-4b5f-9EE6-34795C46E7E7} - C:\Program Files\Java\jre6\bin\jp2launcher.exe (Oracle) HKLM_ElevationPolicy\{4D373D58-35CE-4236-919B-04482ADCE852} - C:\Program Files\4shared.com\4shared.comToolbarHelper.exe (?) HKLM_ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284} - C:\Program Files\Java\jre6\bin\javaws.exe (Oracle) HKLM_ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} - C:\Program Files\HyperCam Toolbar\TbHelper2.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{9075399F-593D-46E6-B913-97D0CB55F3F2} - C:\Users\Xxx\AppData\Local\Conduit\CT2233703\4shared.comAutoUpdateHelper.exe (x) HKLM_ElevationPolicy\{A1777E38-3B47-40CC-BD3A-15B19AB1AC0B} - C:\PROGRA~1\WI3C8A~1\Datamngr\ToolBar\dtUser.exe (Visicom Media Inc.) HKLM_ElevationPolicy\{aa851425-0109-43f3-9ed2-7b7090125861} - C:\Program Files\Microsoft\BingBar\BingBar.exe (Microsoft Corporation.) HKLM_ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A} - C:\Program Files\Java\jre6\bin\ssvagent.exe (Oracle) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "AcroIEHlprObj Class" (C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx) BHO\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - "4shared.com Toolbar" (C:\Program Files\4shared.com\prxtb4sha.dll) BHO\{87d5d709-40f2-48a7-8f47-7bb821af70ab} - "Softonic-Polska2 Toolbar" (C:\Program Files\Softonic-Polska2\tbSoft.dll) BHO\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - "uTorrentBar Toolbar" (C:\Program Files\uTorrentBar\prxtbuTor.dll) BHO\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "Bing Bar Helper" ("C:\Program Files\Microsoft\BingBar\BingExt.dll") (x) ======================================== C:\Program Files\Ad-Remover\Quarantine: 1284 File(s) C:\Program Files\Ad-Remover\Backup: 18 File(s) C:\Ad-Report-CLEAN[1].txt - 12/09/2011 17:41:04 (26627 Byte(s)) C:\Ad-Report-CLEAN[2].txt - 12/09/2011 17:58:13 (12252 Byte(s)) C:\Ad-Report-SCAN[1].txt - 12/09/2011 17:38:09 (29388 Byte(s)) C:\Ad-Report-SCAN[2].txt - 12/09/2011 21:01:30 (8844 Byte(s)) End at: 21:01:59, 12/09/2011 ============== E.O.F ==============