======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [5]) -> Launched at 21:17:54 on 13/09/2011, Safeboot mode Microsoft Windows 7 Home Premium (X86) Xxx@XXX-KOMPUTER (Gigabyte Technology Co., Ltd. G31M-ES2L) ============== SEARCH ============== ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.6.18 (pl)] **** Plugins\npdeployJava1.dll (Oracle) Plugins\npqtplugin.dll (Apple Computer, Inc.) Plugins\npqtplugin2.dll (Apple Computer, Inc.) Plugins\npqtplugin3.dll (Apple Computer, Inc.) Plugins\npqtplugin4.dll (Apple Computer, Inc.) Plugins\npqtplugin5.dll (Apple Computer, Inc.) Plugins\npqtplugin6.dll (Apple Computer, Inc.) Plugins\npqtplugin7.dll (Apple Computer, Inc.) HKLM_MozillaPlugins\@pandonetworks.com/PandoWebPlugin (x) HKCU_MozillaPlugins\pandonetworks.com/PandoWebPlugin (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Extensions\quickstores@quickstores.de (QuickStores-Toolbar) HKLM_Extensions|{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\ (x) HKLM_Extensions|{BBDA0591-3099-440a-AA10-41764D9DB4DB} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\IPSFFPlgn\ HKLM_Extensions|{2D3F3651-74B9-4795-BDEC-6DA2F431CB62} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\coFFPlgn_2010_9_0_6 -- C:\Users\Xxx\AppData\Roaming\Mozilla\FireFox\Profiles\xshjr7dj.default -- Extensions\ffox@bandoo.com (Bandoo for Firefox) Extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3} (XfireXO Toolbar) Prefs.js - browser.search.selectedEngine, Prefs.js - browser.startup.homepage, Prefs.js - browser.startup.homepage_override.mstone, false ======================================== **** Internet Explorer Version [8.0.7600.16385] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://www.interia.pl/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKLM_Toolbar|{8dcb7100-df86-4384-8842-8fa844297b3f} ("C:\Program Files\Microsoft\BingBar\BingExt.dll") (x) HKLM_ElevationPolicy\33ee504f-4379-4bd4-8edc-43b50165599b - C:\Program Files\XfireXO\XfireXOToolbarHelper.exe (x) HKLM_ElevationPolicy\462cde8a-a59e-4d24-9f4a-0b497648f19e - C:\Program Files\XfireXO\XfireXOToolbarHelper.exe (x) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x) HKLM_ElevationPolicy\{3B9A6E32-36C9-4946-B78C-3F58E3785EC1} - C:\Program Files\Java\jre6\bin\unpack200.exe (Oracle) HKLM_ElevationPolicy\{44D1B085-E495-4b5f-9EE6-34795C46E7E7} - C:\Program Files\Java\jre6\bin\jp2launcher.exe (Oracle) HKLM_ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284} - C:\Program Files\Java\jre6\bin\javaws.exe (Oracle) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{A1777E38-3B47-40CC-BD3A-15B19AB1AC0B} - C:\PROGRA~1\WI3C8A~1\Datamngr\ToolBar\dtUser.exe (Visicom Media Inc.) HKLM_ElevationPolicy\{aa851425-0109-43f3-9ed2-7b7090125861} - C:\Program Files\Microsoft\BingBar\BingBar.exe (Microsoft Corporation.) HKLM_ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A} - C:\Program Files\Java\jre6\bin\ssvagent.exe (Oracle) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "AcroIEHlprObj Class" (C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx) BHO\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "Bing Bar Helper" ("C:\Program Files\Microsoft\BingBar\BingExt.dll") (x) ======================================== C:\Program Files\Ad-Remover\Quarantine: 1284 File(s) C:\Program Files\Ad-Remover\Backup: 21 File(s) C:\Ad-Report-CLEAN[1].txt - 12/09/2011 17:41:04 (26627 Byte(s)) C:\Ad-Report-CLEAN[2].txt - 12/09/2011 17:58:13 (12252 Byte(s)) C:\Ad-Report-SCAN[1].txt - 12/09/2011 17:38:09 (29388 Byte(s)) C:\Ad-Report-SCAN[2].txt - 12/09/2011 21:01:30 (8982 Byte(s)) C:\Ad-Report-SCAN[3].txt - 13/09/2011 20:05:43 (9093 Byte(s)) C:\Ad-Report-SCAN[4].txt - 13/09/2011 21:12:38 (5474 Byte(s)) C:\Ad-Report-SCAN[5].txt - 13/09/2011 21:17:58 (0 Byte(s)) End at: 21:18:24, 13/09/2011 ============== E.O.F ==============