======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [1]) -> Launched at 16:36:26 on 28/09/2011, Normal boot Microsoft Windows 7 Home Premium (X64) świtek@ŚWITEK-KOMPUTER (Gigabyte Technology Co., Ltd. GA-MA770T-UD3P) ============== SEARCH ============== Folder found: C:\Users\świtek\AppData\Local\Conduit Folder found: C:\Users\świtek\AppData\LocalLow\Conduit Folder found: C:\Users\świtek\AppData\LocalLow\PriceGong Folder found: C:\Users\świtek\AppData\LocalLow\Toolbar4 Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\Toolbar.CT2304157 Key found: HKLM\Software\Classes\Toolbar.CT2530240 Key found: HKLM\Software\Classes\Toolbar.CT2786678 Key found: HKLM\Software\Conduit Key found: HKCU\Software\AppDataLow\Software\PriceGong Key found: HKCU\Software\AppDataLow\Software\Toolbar Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{42168F92-DA71-42E6-BC7F-132EAC1F1899} Key found: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{42168F92-DA71-42E6-BC7F-132EAC1F1899} Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [6.0.2 (pl)] **** HKLM_MozillaPlugins\@ganymede/BREAKOUT,version=1.0 (x) HKLM_MozillaPlugins\@nvidia.com/3DVision (x) HKLM_MozillaPlugins\@nvidia.com/3DVisionStreaming (x) HKLM_MozillaPlugins\Adobe Reader (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) HKLM_Extensions|smartwebprinting@hp.com - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 HKCU_Extensions|smartwebprinting@hp.com - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 -- C:\Users\świtek\AppData\Roaming\Mozilla\FireFox\Profiles\tfmmmq7l.default -- Prefs.js - browser.search.selectedEngine, Prefs.js - browser.startup.homepage_override.mstone, false ======================================== **** Google Chrome Version [14.0.835.186] **** -- C:\Users\świtek\AppData\Local\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Enabled: true) (?) Plugin - Remoting Viewer (Enabled: true) (internal-remoting-viewer) (x) Plugin - Native Client (Enabled: true) (C:\Users\\u015Bwitek\AppData\Local\Google\Chrome\Application\14.0.835.186\ppGoogleNaClPluginChrome.dll) (x) Plugin - NVIDIA 3D Vision (Enabled: true) (C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll) Plugin - NVIDIA 3D VISION (Enabled: true) (C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll) Plugin - "Java" (Enabled: true) Plugin - "Silverlight" (Enabled: true) Plugin - "Remoting Viewer" (Enabled: true) Plugin - "Native Client" (Enabled: true) Plugin - "Ganymede BreakOut Plugin" (Enabled: true) Plugin - "Picasa" (Enabled: true) Plugin - "NVIDIA 3D Vision" (Enabled: true) Plugin - "NVIDIA 3D VISION" (Enabled: true) ======================================== **** Internet Explorer Version [8.0.7600.16385] **** HKCU_Main|Default_Search_URL - hxxp://www.google.com/ie HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKCU_URLSearchHooks|{0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - "DeviceVM Url Search Hook" (C:\Windows\SysWOW64\dvmurl.dll) HKCU_URLSearchHooks|{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - "Softonic-Polska Toolbar" (C:\Program Files (x86)\Softonic-Polska\tbSoft.dll) HKCU_URLSearchHooks|{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - "XfireXO Toolbar" (C:\Program Files (x86)\XfireXO\prxtbXfir.dll) HKLM_URLSearchHooks|{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - "Softonic-Polska Toolbar" (C:\Program Files (x86)\Softonic-Polska\tbSoft.dll) HKLM_URLSearchHooks|{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - "XfireXO Toolbar" (C:\Program Files (x86)\XfireXO\prxtbXfir.dll) HKCU_Toolbar\WebBrowser|{C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} (C:\Program Files (x86)\Softonic-Polska\tbSoft.dll) HKCU_Toolbar\WebBrowser|{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} (C:\Program Files (x86)\XfireXO\prxtbXfir.dll) HKCU_Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} (x) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{136E9AC7-56B3-4A02-B1FC-EE80BA4B50C2} - C:\Program Files (x86)\XfireXO\XfireXOToolbarHelper.exe (?) HKLM_ElevationPolicy\{56BCA8DA-6602-4A6A-B320-970B2C3FFF8B} - C:\Program Files (x86)\Softonic-Polska\Softonic-PolskaToolbarHelper.exe (?) HKLM_ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} - C:\Program Files (x86)\AccmeWare DB Toolbar\TbHelper2.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{7BD9A644-9DC6-42be-8872-CBF5524276BD} - C:\Program Files (x86)\Common Files\Software Update Utility\dnu.exe (AOL LLC) HKLM_ElevationPolicy\{89DF3ACE-5CBA-44C4-A714-118B30551422} - C:\Users\świtek\AppData\Local\Conduit\CT2304157\XfireXOAutoUpdateHelper.exe (?) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) HKLM_ElevationPolicy\{B7A3FC47-8BC4-4311-9971-BB3993703A39} - C:\Program Files (x86)\uTorrentBar\uTorrentBarToolbarHelper.exe (?) BHO\{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - "XfireXO Toolbar" (C:\Program Files (x86)\XfireXO\prxtbXfir.dll) BHO\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - "Softonic-Polska Toolbar" (C:\Program Files (x86)\Softonic-Polska\tbSoft.dll) BHO\{DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - "IplexToALLPlayer" (C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 File(s) C:\Program Files (x86)\Ad-Remover\Backup: 0 File(s) C:\Ad-Report-SCAN[1].txt - 28/09/2011 16:37:10 (6790 Byte(s)) End at: 16:38:19, 28/09/2011 ============== E.O.F ==============