======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [3]) -> Launched at 22:07:28 on 25/10/2011, Normal boot Microsoft Windows 7 Home Premium (X64) Matisz@MATISZ-KOMPUTER (Acer Aspire 5740D) ============== SEARCH ============== Service: "RelevantKnowledge" Service found File found: C:\Program Files (x86)\Mozilla FireFox\searchplugins\iMeshWebSearch.xml File found: C:\Users\Matisz\AppData\Roaming\Mozilla\FireFox\Profiles\ub2337zl.default\searchplugins\askcom.xml Folder found: C:\Users\Matisz\AppData\Roaming\Mozilla\FireFox\Profiles\ub2337zl.default\conduit Folder found: C:\Users\Matisz\AppData\Roaming\Mozilla\FireFox\Profiles\ub2337zl.default\ConduitEngine File found: C:\Users\Matisz\AppData\Roaming\Mozilla\FireFox\Profiles\ub2337zl.default\searchplugins\conduit.xml File found: C:\Users\Matisz\AppData\Roaming\Mozilla\FireFox\Profiles\ub2337zl.default\searchplugins\iMeshWebSearch.xml Folder found: C:\Users\Matisz\Documents\Imesh File found: C:\Users\Matisz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\imesh.lnk Folder found: C:\Users\Matisz\Music\Imesh Folder found: C:\Users\Matisz\AppData\LocalLow\Conduit Folder found: C:\Program Files (x86)\Conduit Folder found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge Folder found: C:\Users\Matisz\AppData\LocalLow\Toolbar4 Folder found: C:\ProgramData\iMesh Folder found: C:\Users\Matisz\AppData\Local\iMesh Folder found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iMesh Folder found: C:\Program Files (x86)\iMesh Applications -- File opened: C:\Users\Matisz\AppData\Roaming\Mozilla\FireFox\Profiles\ub2337zl.default\Prefs.js -- Line found: user_pref("CT1601497.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER... Line found: user_pref("CT1601497.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT160... Line found: user_pref("CT1601497.ct1601497.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_... Line found: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/PL", "\"0\"")... Line found: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\... Line found: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20... Line found: user_pref("CommunityToolbar.EngineOwner", "ConduitEngine"); Line found: user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com"); Line found: user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine"); Line found: user_pref("CommunityToolbar.IsEngineShown", true); Line found: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Line found: user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine"); Line found: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com"); Line found: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine"); Line found: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr... Line found: user_pref("CommunityToolbar.ToolbarsList", "CT1601497,ConduitEngine"); Line found: user_pref("CommunityToolbar.ToolbarsList2", "CT1601497"); Line found: user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun May 01 2011 00:21:21 GMT+02... Line found: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); Line found: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Thu Jun 30 2011 08:04:15 GMT+0200"); Line found: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Line found: user_pref("CommunityToolbar.alert.locale", "en"); Line found: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Line found: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Jun 29 2011 11:58:56 GMT+0200"); Line found: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); Line found: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Line found: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Line found: user_pref("CommunityToolbar.alert.showTrayIcon", false); Line found: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Line found: user_pref("CommunityToolbar.alert.userId", "85639eca-202d-4c91-b236-13ed0de390af"); Line found: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Fri Feb 25 2011 01:19:43 GMT+0100"); Line found: user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Line found: user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Line found: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1601497"); Line found: user_pref("ConduitEngine.AppTrackingLastCheckTime", "Tue May 10 2011 10:38:28 GMT+0200"); Line found: user_pref("ConduitEngine.CTID", "ConduitEngine"); Line found: user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Mon Jun 27 2011 15:48:18 GMT+0200"); Line found: user_pref("ConduitEngine.FirstServerDate", "04/08/2011 17"); Line found: user_pref("ConduitEngine.FirstTime", true); Line found: user_pref("ConduitEngine.FirstTimeFF3", true); Line found: user_pref("ConduitEngine.HasUserGlobalKeys", true); Line found: user_pref("ConduitEngine.Initialize", true); Line found: user_pref("ConduitEngine.InitializeCommonPrefs", true); Line found: user_pref("ConduitEngine.InstalledDate", "Fri Apr 08 2011 16:43:39 GMT+0200"); Line found: user_pref("ConduitEngine.IsMulticommunity", false); Line found: user_pref("ConduitEngine.IsOpenThankYouPage", false); Line found: user_pref("ConduitEngine.IsOpenUninstallPage", true); Line found: user_pref("ConduitEngine.LanguagePackLastCheckTime", "Wed Jun 29 2011 11:58:57 GMT+0200"); Line found: user_pref("ConduitEngine.LastLogin_3.3.3.2", "Thu Jun 30 2011 08:04:09 GMT+0200"); Line found: user_pref("ConduitEngine.SearchFromAddressBarIsInit", true); Line found: user_pref("ConduitEngine.SettingsLastCheckTime", "Thu Jun 30 2011 08:04:08 GMT+0200"); Line found: user_pref("ConduitEngine.UserID", "UN66024032179550631"); Line found: user_pref("ConduitEngine.componentAlertEnabled", false); Line found: user_pref("ConduitEngine.engineLocale", "pl"); Line found: user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Wed Jun 29 2011 11:58:57 GMT+0200"); Line found: user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Thu Jun 30 2011 08:04:09 GMT+0200"); Line found: user_pref("ConduitEngine.initDone", true); Line found: user_pref("ConduitEngine.isAppTrackingManagerOn", true); Line found: user_pref("ConduitEngine.usagesFlag", 2); Line found: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1601497&Sea... Line found: user_pref("extensions.enabledItems", "DTToolbar@toolbarnet.com:1.1.2.0185,{CAFEEFAC-0016-0000-0020-A... Line found: user_pref("extensions.installCache", "[{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a2... -- File closed -- Key found: HKLM\Software\Classes\CLSID\{01AD9322-02FF-4f4f-AC52-92FDA5AE65F0} Key found: HKLM\Software\Classes\CLSID\{03F14321-8FED-4CBC-B01A-4B57FC199062} Key found: HKLM\Software\Classes\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033} Key found: HKLM\Software\Classes\CLSID\{148132E6-626D-4A5E-8063-A761EB29A50B} Key found: HKLM\Software\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7} Key found: HKLM\Software\Classes\CLSID\{23BDC78C-B7BB-42E5-B970-54B292592D72} Key found: HKLM\Software\Classes\AppID\{69E54DE2-C4ED-4BEC-8046-E3F9AC74B4B0} Key found: HKLM\Software\Classes\CLSID\{2656B92B-0207-4afb-BEBF-F5FD231ECD39} Key found: HKLM\Software\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6} Key found: HKLM\Software\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4} Key found: HKLM\Software\Classes\CLSID\{2C6F7E96-73BC-47A5-9F51-B67F0BAFE24D} Key found: HKLM\Software\Classes\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E} Key found: HKLM\Software\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516} Key found: HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581} Key found: HKLM\Software\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47} Key found: HKLM\Software\Classes\CLSID\{4C58EB04-7B72-4D3D-A36E-66167A99BC31} Key found: HKLM\Software\Classes\CLSID\{4EE0B011-604C-47F3-8F2B-39F79640B85E} Key found: HKLM\Software\Classes\CLSID\{59570C1F-B692-48c9-91B4-7809E6945287} Key found: HKLM\Software\Classes\CLSID\{5D637FAD-E202-48D1-8F18-5B9C459BD1E3} Key found: HKLM\Software\Classes\CLSID\{5D9E7BE9-95E5-4392-8CD2-D82DE89589ED} Key found: HKLM\Software\Classes\CLSID\{5EB0259D-AB79-4ae6-A6E6-24FFE21C3DA4} Key found: HKLM\Software\Classes\AppID\{AD71F65D-CD13-4837-A2DC-E4D90020E7D4} Key found: HKLM\Software\Classes\CLSID\{63A0F7FA-2C95-4d7e-AF25-EFCC303D20A1} Key found: HKLM\Software\Classes\CLSID\{6559E502-6EE1-46b8-A83C-F3A45BDA23EE} Key found: HKLM\Software\Classes\CLSID\{69D3F709-9DE2-479F-980F-532D46895703} Key found: HKLM\Software\Classes\Interface\{69D3F709-9DE2-479F-980F-532D46895703} Key found: HKLM\Software\Classes\CLSID\{6BC38BF4-E84D-46E1-920B-42D31AEA617E} Key found: HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839} Key found: HKLM\Software\Classes\CLSID\{7C3B01BC-53A5-48A0-A43B-0C67731134B9} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7C3B01BC-53A5-48A0-A43B-0C67731134B9} Key found: HKLM\Software\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291} Key found: HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F} Key found: HKLM\Software\Classes\CLSID\{87CD3140-EEC0-463F-8872-6E564D9DEDE5} Key found: HKLM\Software\Classes\CLSID\{98ED0D10-F1FC-4113-A095-9BD7F96040C9} Key found: HKLM\Software\Classes\AppID\{5E50AE1D-BC76-418B-94C4-EFEAC0CEF80C} Key found: HKLM\Software\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA} Key found: HKLM\Software\Classes\CLSID\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} Key found: HKLM\Software\Classes\CLSID\{B0639356-335C-4E47-B63C-12531A7A5206} Key found: HKLM\Software\Classes\CLSID\{B162A975-6C7C-4202-9167-306028913A3D} Key found: HKLM\Software\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD} Key found: HKLM\Software\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48} Key found: HKLM\Software\Classes\CLSID\{C63CA8A4-AB4E-49e5-A6C0-33FC86D80205} Key found: HKLM\Software\Classes\CLSID\{C6A7847E-8931-4a9a-B4EF-72A91E3CCF4D} Key found: HKLM\Software\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B} Key found: HKLM\Software\Classes\CLSID\{CD5175E2-7CC1-418C-B66C-0AB95DAD4103} Key found: HKLM\Software\Classes\CLSID\{D8BFC514-1135-4393-B09A-193D2AAC5037} Key found: HKLM\Software\Classes\CLSID\{DD0F1D24-E250-4e93-966C-65615720AEFB} Key found: HKLM\Software\Classes\CLSID\{DEF4ED0D-E666-4631-A35A-A634332F0550} Key found: HKLM\Software\Classes\CLSID\{EC1277BB-1C71-4c0d-BA6D-BFEA16E773A6} Key found: HKLM\Software\Classes\CLSID\{F42C7B47-5234-4BF5-8882-DAAC0D64870D} Key found: HKLM\Software\Classes\Interface\{F42C7B47-5234-4BF5-8882-DAAC0D64870D} Key found: HKLM\Software\Classes\CLSID\{F8AB43ED-EC88-4de7-B213-F89157D29C62} Key found: HKLM\Software\Classes\AppID\{1FC41815-FA4C-4F8B-B143-2C045C8EA2FC} Key found: HKLM\Software\Classes\CLSID\{FD675817-9EFE-40cd-A75E-E94D1C85D1FE} Key found: HKLM\Software\Classes\Interface\{F7BEBBB1-7E6B-4561-9444-6F4866D60C7C} Key found: HKLM\Software\Classes\TypeLib\{252C2315-CCE0-4446-8DA7-C00292A690BA} Key found: HKLM\Software\Classes\TypeLib\{2D77AC8A-0A4C-40D0-9557-51907A575E45} Key found: HKLM\Software\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7} Key found: HKLM\Software\Classes\TypeLib\{43B4B831-F41F-4F73-8F14-4FFF0BA75B1B} Key found: HKLM\Software\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48} Key found: HKLM\Software\Classes\TypeLib\{6C9945B7-1D19-46CB-88C0-45A24DF6CD6E} Key found: HKLM\Software\Classes\TypeLib\{81CA8FCD-1420-4A07-B47D-B30F3DDA79E1} Key found: HKLM\Software\Classes\TypeLib\{84B9B044-17C0-48FB-A300-C9747D5DF29C} Key found: HKLM\Software\Classes\TypeLib\{85672EDB-2CC8-40B9-A9E8-77D3478F2EFB} Key found: HKLM\Software\Classes\TypeLib\{969D2C61-9B16-407C-86B7-397BF4579BE6} Key found: HKLM\Software\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B} Key found: HKLM\Software\Classes\TypeLib\{ADEA3C4E-2184-40A2-9556-488456427E80} Key found: HKLM\Software\Classes\TypeLib\{C4C4F1F4-3074-4CB6-9FB8-0A64273166F0} Key found: HKLM\Software\Classes\TypeLib\{EC96F516-51B2-4B46-8451-8665F5A6BA2B} Key found: HKLM\Software\Classes\TypeLib\{F07FBD3E-2048-44A4-9065-71BF551E2672} Key found: HKLM\Software\Classes\DiscoveryHelper.iMesh6Discovery Key found: HKLM\Software\Classes\DiscoveryHelper.iMesh6Discovery.1 Key found: HKLM\Software\Classes\iMesh.AudioCD Key found: HKLM\Software\Classes\iMesh.Device Key found: HKLM\Software\Classes\iMesh.file Key found: HKLM\Software\Classes\iMesh.LauncherEventHandler Key found: HKLM\Software\Classes\iMesh.LauncherEventHandler.1 Key found: HKLM\Software\Classes\Toolbar.CT1601497 Key found: HKLM\Software\Conduit Key found: HKLM\Software\iMesh Key found: HKCU\Software\iMesh Key found: HKCU\Software\AppDataLow\Software\Conduit Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5} Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} Key found: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0ABE0FED-50E7-4e42-A125-57C0A11DBCDE} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Imesh Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Value found: HKLM\Software\Mozilla\Firefox\Extensions|{6E19037A-12E3-4295-8915-ED48BC341614} Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [7.0.1 (pl)] **** Plugins\npijjiautoinstallpluginff.dll (NHN USA Inc.) HKLM_MozillaPlugins\@idsoftware.com/QuakeLive (x) HKLM_MozillaPlugins\@ngm.nexoneu.com/NxGame (x) HKLM_MozillaPlugins\Adobe Reader (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\babylon.xml (hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=a4366488000000000000c217fe6f920d&tlver=1.4.19.19&affID=19579/) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\iMeshWebSearch.xml ( hxxp://search.iMesh.com/web?src=ffb&systemid=1&q={searchTerms}/) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) Extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} (Skype extension for Firefox ) HKLM_Extensions|{6E19037A-12E3-4295-8915-ED48BC341614} - C:\Program Files (x86)\RelevantKnowledge (x) -- C:\Users\Matisz\AppData\Roaming\Mozilla\FireFox\Profiles\ub2337zl.default -- Extensions\battlefieldheroespatcher@ea.com (Battlefield Heroes Updater) Extensions\fastdial@telega.phpnet.us (Fast Dial) Extensions\maps@ovi.com (Ovi Maps 3D browser plugin) Extensions\{28D35620-51D9-11DE-9D13-2DB156D89593}chrome (?) Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} (Greasemonkey) Searchplugins\askcom.xml (?) Searchplugins\conduit.xml (hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1601497&SearchSource=3&q={searchTerms} /) Searchplugins\iMeshWebSearch.xml ( hxxp://search.iMesh.com/web?src=ffb&systemid=1&q={searchTerms}/) Searchplugins\seek.xml ( hxxp://seek.mk/search?Ref=9&s=1&) User.js - browser.search.defaultenginename, Seek User.js - browser.search.selectedEngine, Seek User.js - keyword.URL, hxxp://seek.mk/search?Ref=9s=1&q= Prefs.js - browser.download.lastDir, C:\\Users\\Matisz\\Desktop Prefs.js - browser.search.defaultenginename, Seek Prefs.js - browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1601497&SearchSource=3&q={searchTerms} Prefs.js - browser.search.selectedEngine, Seek Prefs.js - browser.startup.homepage, chrome://foxtab/content/homepage.html Prefs.js - browser.startup.homepage_override.buildID, 20110928134238 Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1 Prefs.js - keyword.URL, hxxp://seek.mk/search?Ref=9s=1&q= ======================================== **** Internet Explorer Version [8.0.7600.16385] **** HKCU_Main|Default_Page_URL - hxxp://www.maxiwe.com HKCU_Main|Start Page - hxxp://www.ask.com/?l=dis&o=13760 HKLM_Main|Default_Page_URL - hxxp://www.maxiwe.com HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://www.maxiwe.com HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "Ask Search" (hxxp://websearch.ask.com/redirect?client=ie&tb=WCV5&o=13757&src=crm&q={searchTer...) HKCU_SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5} - "Search the web (Babylon)" (hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=a4366488000000000...) HKCU_SearchScopes\{75894E4F-B1C0-42a9-AB80-2F02EF897ACD} - "Seek" (hxxp://seek.mk/Search.aspx?Ref=9&s=1&q={searchTerms}) HKCU_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} - "Web Search" (hxxp://search.imesh.com/web?src=ieb&systemid=1&q={searchTerms}) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Reganam Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKLM_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59} - "Web Search" (hxxp://search.imesh.com/web?src=ieb&systemid=1&q={searchTerms}) HKLM_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Reganam Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_Toolbar\WebBrowser|{32099AAC-C132-4136-9E9A-4E364A424E17} (x) HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x) HKLM_ElevationPolicy\2972dc93-f590-4bca-a42f-64ea7dc2f68d - C:\Program Files (x86)\Reganam\ReganamToolbarHelper.exe (x) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{0ABE0FED-50E7-4e42-A125-57C0A11DBCDE} - C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe (iMesh, Inc) HKLM_ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} - C:\Program Files (x86)\HyperCam Toolbar\TbHelper2.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files (x86)\Common Files\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) BHO\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} (?) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 File(s) C:\Program Files (x86)\Ad-Remover\Backup: 2 File(s) C:\Ad-Report-SCAN[1].txt - 25/10/2011 21:40:30 (480 Byte(s)) C:\Ad-Report-SCAN[2].txt - 25/10/2011 22:04:16 (21244 Byte(s)) C:\Ad-Report-SCAN[3].txt - 25/10/2011 22:07:36 (21170 Byte(s)) End at: 22:08:50, 25/10/2011 ============== E.O.F ==============