======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Launched at 16:36:06 on 29/10/2011, Normal boot Microsoft Windows 7 Ultimate (X86) Andrzej@LAPTOK (Hewlett-Packard HP Pavilion dv9500 Notebook PC) ============== SEARCH ============== File found: C:\Users\Andrzej\AppData\Roaming\Mozilla\FireFox\Profiles\x84iee44.default\searchplugins\conduit.xml Folder found: C:\Users\Andrzej\AppData\Local\Conduit Folder found: C:\Users\Andrzej\AppData\LocalLow\Conduit Folder found: C:\Users\Andrzej\AppData\Roaming\OpenCandy Folder found: C:\Users\Andrzej\AppData\Local\OpenCandy Folder found: C:\Users\Andrzej\AppData\LocalLow\Toolbar4 -- File opened: C:\Users\Andrzej\AppData\Roaming\Mozilla\FireFox\Profiles\x84iee44.default\Prefs.js -- Line found: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3031607&Sea... -- File closed -- Key found: HKLM\Software\Classes\Interface\{384FE458-A963-450D-9187-EEFF81913FD0} Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\Toolbar.CT3031607 Key found: HKLM\Software\Conduit Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [6.0.2 (pl)] **** Plugins\npdap.dll (SpeedBit Ltd.) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) Extensions\{906305f7-aafc-45e9-8bbd-941950a84dad} (G Data BankGuard) Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE} (G Data WebFilter) HKLM_Extensions|searchpredict@speedbit.com - C:\Program Files\SearchPredict\PRFireFox (x) HKLM_Extensions|{0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\SPFireFox (x) HKLM_Extensions|otis@digitalpersona.com - C:\Program Files\DigitalPersona\Bin\FirefoxExt\ HKCU_Extensions|otis@digitalpersona.com - C:\Program Files\DigitalPersona\Bin\firefoxext HKCU_Extensions|{F17C1572-C9EC-4e5c-A542-D05CBB5C5A08} - C:\Program Files\DAP\DAPFireFox -- C:\Users\Andrzej\AppData\Roaming\Mozilla\FireFox\Profiles\x84iee44.default -- Extensions\IplextoALL@ALLPlayer.org (Iplex to ALLPlayer) Searchplugins\conduit.xml (hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3031607&SearchSource=3&q={searchTerms} /) Searchplugins\speedbit.xml (hxxp://search.speedbit.com/searchresults.asp) Prefs.js - browser.download.lastDir, C:\\Users\\Andrzej\\Desktop Prefs.js - browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3031607&SearchSource=3&q={searchTerms} Prefs.js - browser.search.selectedEngine, SFT_eng7 Customized Web Search Prefs.js - browser.startup.homepage, hxxp://www.google.pl/ Prefs.js - browser.startup.homepage_override.buildID, 20110902133214 Prefs.js - browser.startup.homepage_override.mstone, rv:6.0.2 ======================================== **** Internet Explorer Version [8.0.7600.16385] **** HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Start Page - hxxp://search.conduit.com?SearchSource=10&ctid=CT3031607/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 AboutUrls|Tabs - hxxp://search.speedbit.com/tab/ HKCU_URLSearchHooks|{472734EA-242A-422b-ADF8-83D1E48CC825} (x) HKCU_SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A} - "SpeedBit Search" (hxxp://search.speedbit.com/searchresults.asp?src=default&q={searchTerms}) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "SFT_eng7 Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKLM_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "SFT_eng7 Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_Toolbar\WebBrowser|{0329E7D6-6F54-462D-93F6-F5C3118BADF2} (x) HKCU_ElevationPolicy\{603C4CC9-5DC6-4C44-873F-8281509DF953} - C:\Program Files\SpeedBit Video Downloader\Converter.exe (x) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x) HKLM_ElevationPolicy\{08f24d68-9087-4b24-81ad-7b34af3e3ed6} - C:\Program Files\DAP\DAP.exe (SpeedBit Ltd.) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x) HKLM_ElevationPolicy\{603C4CC9-5DC6-4C44-873F-8281509DF953} - C:\Program Files\SpeedBit Video Downloader\Converter.exe (x) HKLM_ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} - C:\Program Files\SpeedBit Video Downloader\Toolbar\TbHelper2.exe (x) HKLM_ElevationPolicy\{6a0490af-eadc-416c-abda-d6146b8ea0ee} - C:\Program Files\DAP\DAPupd.exe (Speedbit Ltd.) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{C8D05139-D04A-44A1-822E-6E3737CC880B} - C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe (x) HKLM_Extensions\{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - "@C:\Windows\WindowsMobile\INetRepl.dll,-222" (C:\Windows\WindowsMobile\INetRepl.dll,210) HKLM_Extensions\{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - "?" (?) BHO\{395610AE-C624-4f58-B89E-23733EA00F9A} - "DigitalPersona Personal Extension" (C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll) BHO\{DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - "IplexToALLPlayer" (C:\PROGRA~1\ALLPLA~1\Iplex\IPLEXT~1.DLL) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 29/10/2011 16:34:17 (6675 Byte(s)) C:\Ad-Report-SCAN[2].txt - 29/10/2011 16:36:09 (6601 Byte(s)) End at: 16:36:51, 29/10/2011 ============== E.O.F ==============