======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [2]) -> Launched at 02:21:46 on 19/10/2011, Normal boot Microsoft Windows 7 Ultimate (X64) wookash@WOOKASH-PC (MICRO-STAR INTERNATIONAL CO.,LTD MS-7577) ============== SEARCH ============== ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [7.0.1 (pl)] **** HKLM_MozillaPlugins\@esn.me/esnsonar,version=0.70.0 (x) HKLM_MozillaPlugins\@esn/esnlaunch,version=0.80.0 (x) HKLM_MozillaPlugins\@nexon.net/NxGame (x) HKLM_MozillaPlugins\@ngm.nexoneu.com/NxGame (x) HKLM_MozillaPlugins\@pandonetworks.com/PandoWebPlugin (x) HKLM_MozillaPlugins\Adobe Reader (x) HKCU_MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin (x) HKCU_MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0 (x) HKCU_MozillaPlugins\pandonetworks.com/PandoWebPlugin (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) -- d:\Users\wookash\AppData\Roaming\Mozilla\FireFox\Profiles\rjn369qw.default -- Extensions\cacaoweb@cacaoweb.org (cacaoweb) Extensions\en-GB@dictionaries.addons.mozilla.org (British English Dictionary) Extensions\https-everywhere@eff.org (HTTPS-Everywhere) Extensions\staged (?) Extensions\support@lastpass.com (LastPass) Extensions\ubiquity@labs.mozilla.com (?) Extensions\YoutubeDownloader@PeterOlayev.com (1-Click YouTube Video Downloader) Prefs.js - browser.download.lastDir, d:\\Users\\wookash\\Desktop Prefs.js - browser.search.defaultenginename, Prefs.js - browser.search.selectedEngine, Google Prefs.js - browser.startup.homepage, about:home Prefs.js - browser.startup.homepage_override.buildID, 20110928134238 Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1 ======================================== **** Google Chrome Version [14.0.835.202] **** Extension\bejbohlohkkgompgecdcbbglkpjfjgdj (d:\Users\wookash\AppData\Local\Temp\crx94B4.tmp) (x) Extension\hdokiejnpimakedhajhdlcegeplioahd (C:\Program Files (x86)\LastPass\lpchrome.crx) (?) -- d:\Users\wookash\AppData\Local\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Enabled: true) (?) Preferences - homepage: Preferences - homepage_is_newtabpage: true Plugin - Veetle TV Player (Enabled: true) (C:\Program Files (x86)\Veetle\Player\npvlc.dll) Plugin - Veetle Broadcaster Plugin (Enabled: true) (C:\Program Files (x86)\Veetle\VLCBroadcast\npvbp.dll) Plugin - Veetle TV Core (Enabled: true) (C:\Program Files (x86)\Veetle\plugins\npVeetle.dll) Plugin - Windows Live\u0099 Photo Gallery (Enabled: true) (C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll) Plugin - "Windows Live\u0099 Photo Gallery" (Enabled: true) Plugin - "Nexon Game Controller" (Enabled: true) Plugin - "Picasa" (Enabled: true) Plugin - "Veetle TV Core" (Enabled: true) Plugin - "MetaStream 3 Plugin" (Enabled: true) Plugin - "Veetle Broadcaster Plugin" (Enabled: true) Plugin - "Veetle TV Player" (Enabled: true) Plugin - "Panda ActiveScan 2.0" (Enabled: true) Preferences - urls_to_restore_on_startup: hxxp://www.pajacyk.pl/ ======================================== **** Internet Explorer Version [8.0.7600.16385] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Toolbar|{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} (C:\Program Files (x86)\LastPass\LPBar.dll) HKCU_ElevationPolicy\{1024F1BE-76DC-40d5-AB98-664A4185E5FA} - d:\Users\wookash\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe (Skype Limited) HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files (x86)\Veetle\Player\vtl_hfs.exe (?) HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files (x86)\Veetle\Player\player.exe (?) HKCU_ElevationPolicy\{7AEFE841-DCA1-4A95-80CB-BE935D005000} - C:\Program Files (x86)\Battlelog Web Plugins\esnlauncher.exe (?) HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files (x86)\Veetle\Player\vtl_hfax.exe (?) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{1024F1BE-76DC-40d5-AB98-664A4185E5FA} - d:\Users\wookash\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe (Skype Limited) HKLM_ElevationPolicy\{2BBB430C-B340-4BA2-A119-8EBAD25E5A55} - C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass) HKLM_ElevationPolicy\{49CF0734-BF9A-4444-BC9F-C26E56AF042F} - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\SonarHost.exe (ESN Social Software AB) HKLM_ElevationPolicy\{57D6E18D-E946-4D8C-B3CD-46C6689CE25F} - C:\Program Files (x86)\LastPass\lastpass.exe (LastPass) HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files (x86)\Veetle\Player\vtl_hfs.exe (?) HKLM_ElevationPolicy\{63F463ED-322A-4DE8-8E6F-65DD293F7461} - C:\Program Files\Microsoft Office\Office14\VISIO.EXE (x) HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files (x86)\Veetle\Player\player.exe (?) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{7AEFE841-DCA1-4A95-80CB-BE935D005000} - C:\Program Files (x86)\Battlelog Web Plugins\esnlauncher.exe (?) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files (x86)\Veetle\Player\vtl_hfax.exe (?) HKLM_Extensions\{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - "@C:\Windows\WindowsMobile\INetRepl.dll,-222" (C:\Windows\WindowsMobile\INetRepl.dll,210) HKLM_Extensions\{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - "?" (?) HKLM_Extensions\{43699cd0-e34f-11de-8a39-0800200c9a66} - "LastPass" (C:\Program Files (x86)\LastPass\LPBar.dll,250) BHO\{31FF080D-12A3-439A-A2EF-4BA95A3148E8} - "IE to GetRight Helper" (C:\Program Files (x86)\GetRight\xx2gr.dll) BHO\{9030D464-4C02-4ABF-8ECC-5164760863C6} - "Pomocnik logowania za pomocą identyfikatora Windows Live" (C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll) BHO\{95D9ECF5-2A4D-4550-BE49-70D42F71296E} - "LastPass Browser Helper Object" (C:\Program Files (x86)\LastPass\LPBar.dll) BHO\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} - "FDMIECookiesBHO Class" (C:\Program Files (x86)\Free Download Manager\iefdm2.dll) BHO\{FFCB3198-32F3-4E8B-9539-4324694ED664} - "SimpleAdblock Class" (C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblock.dll) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 277 File(s) C:\Program Files (x86)\Ad-Remover\Backup: 17 File(s) d:\Ad-Report-CLEAN[1].txt - 19/10/2011 02:14:35 (21204 Byte(s)) d:\Ad-Report-SCAN[1].txt - 18/10/2011 19:24:24 (21534 Byte(s)) d:\Ad-Report-SCAN[2].txt - 19/10/2011 02:21:49 (0 Byte(s)) End at: 02:22:25, 19/10/2011 ============== E.O.F ==============