======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 13:11:01 on 08/10/2011, Normal boot Microsoft Windows XP Home Edition Dodatek Service Pack 2 (X86) Micha³@DOMOWY ( ) ============== SEARCH ============== File found: C:\Documents and Settings\dom\Dane aplikacji\Mozilla\FireFox\Profiles\a1rxf247.default\searchplugins\mywebsearch.xml Folder found: C:\Program Files\MyGlobalSearch -- File opened: C:\Documents and Settings\Micha³\Dane aplikacji\Mozilla\FireFox\Profiles\9nj3e8iy.default\Prefs.js -- Line found: user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea... Line found: user_pref("extensions.mywebsearch.prevKwdEnabled", true); Line found: user_pref("extensions.mywebsearch.prevKwdURL", "chrome://browser-region/locale/region.properties"); -- File closed -- -- File opened: C:\Documents and Settings\dom\Dane aplikacji\Mozilla\FireFox\Profiles\a1rxf247.default\Prefs.js -- Line found: user_pref("browser.search.selectedEngine", "MyWebSearch"); Line found: user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea... Line found: user_pref("extensions.mywebsearch.prevKwdEnabled", true); Line found: user_pref("extensions.mywebsearch.prevKwdURL", "chrome://browser-region/locale/region.properties"); Line found: user_pref("keyword.URL", "hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZRfox000&fl=0&ptb=H9vff5Z... -- File closed -- Key found: HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC} Key found: HKLM\Software\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF} Key found: HKLM\Software\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} Key found: HKLM\Software\Classes\Interface\{D6094FC6-821F-474C-8D73-C13066CD178D} Key found: HKLM\Software\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E} Key found: HKLM\Software\Classes\MyGlobalSearchBar.SettingsPlugin Key found: HKLM\Software\Classes\MyGlobalSearchBar.SettingsPlugin.1 Key found: HKLM\Software\Classes\MyGlobalSearchBar.ToolbarPlugin Key found: HKLM\Software\Classes\MyGlobalSearchBar.ToolbarPlugin.1 Key found: HKLM\Software\MyGlobalSearch Key found: HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\My Web Search Bar Search Scope Monitor Key found: HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\MyWebSearch Email Plugin Key found: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} Key found: HKLM\Software\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll Key found: HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{37B85A2B-692B-4205-9CAD-2626E4993404} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.6.23 (pl)] **** Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) -- C:\Documents and Settings\Micha³\Dane aplikacji\Mozilla\FireFox\Profiles\9nj3e8iy.default -- Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\Micha³\\Pulpit Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.23 -- C:\Documents and Settings\dom\Dane aplikacji\Mozilla\FireFox\Profiles\a1rxf247.default -- Searchplugins\mywebsearch.xml (?) Prefs.js - browser.search.selectedEngine, MyWebSearch Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.22 Prefs.js - keyword.URL, hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZRfox000&fl=0&ptb=H9vff5ZAnR1ppmW5hbYWJQ&url=hxxp://search... ======================================== **** Internet Explorer Version [7.0.5730.13] **** HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search bar - hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} - "My Web Search" (hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZRfox000&fl=0&ptb=H9vff5ZAnR1pp...) HKCU_Toolbar\WebBrowser|{32099AAC-C132-4136-9E9A-4E364A424E17} (x) HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "Adobe PDF Reader Link Helper" (C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll) BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll) BHO\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - "IEPluginBHO Class" (C:\Documents and Settings\Nikola\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll) (x) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 0 File(s) C:\Ad-Report-SCAN[1].txt - 08/10/2011 13:11:06 (5603 Byte(s)) End at: 13:12:05, 08/10/2011 ============== E.O.F ==============