======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Users\Jaro\Desktop\Ad-Remover\main.exe (SCAN [1]) -> Launched at 14:04:08 on 07/01/2012, Normal boot Microsoft Windows 7 Professional (X64) Jaro@JARO-KOMPUTER (System manufacturer P5Q-PRO) ============== SEARCH ============== Folder found: C:\Users\Jaro\AppData\LocalLow\AskToolbar -- File opened: C:\Users\Jaro\AppData\Roaming\Mozilla\FireFox\Profiles\tit9lrc1.default\Prefs.js -- Line found: user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{ABDE892B-13A8-... -- File closed -- Key found: HKLM\Software\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FF2271AE-86C0-49DD-8960-52F41D8A3E08} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [9.0.1 (pl)] **** HKLM_MozillaPlugins\@nvidia.com/3DVision (x) HKLM_MozillaPlugins\@nvidia.com/3DVisionStreaming (x) HKLM_MozillaPlugins\Adobe Reader (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\avg-secure-search.xml ( hxxp://isearch.avg.com/search?cid={A96AEE0A-8EA3-4A74-855D-595A42944533}&mid=ba220518693b47d1a329d15756fbb957-d2cb598395325632bb6493783fdaa0ccc4e833a7&ds=ts024&lang=pl&v=9.0.0.22&pr=&d=2012-01-05 00:04:21&sap=dsp&q={searchTerms}/) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) -- C:\Users\Jaro\AppData\Roaming\Mozilla\FireFox\Profiles\tit9lrc1.default -- Extensions\avg@toolbar (AVG Security Toolbar) Searchplugins\avg-secure-search.xml (?) Prefs.js - browser.download.lastDir, C:\\Users\\Jaro\\Desktop Prefs.js - browser.search.selectedEngine, Google Prefs.js - browser.startup.homepage, hxxp://www.google.pl/ Prefs.js - browser.startup.homepage_override.buildID, 20111220165912 Prefs.js - browser.startup.homepage_override.mstone, rv:9.0.1 Prefs.js - keyword.URL, hxxp://isearch.avg.com/search?cid=%7B5060aa4d-ccd2-42cc-871d-9e7f484f45c7%7D&mid=ba220518693b47d1a329d15756... Prefs.js - browser.search.defaultenginename, Google ======================================== **** Internet Explorer Version [8.0.7600.16385] **** HKCU_Main|Default_Search_URL - hxxp://www.google.com/ie HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Start Page - hxxp://isearch.avg.com/?cid={A96AEE0A-8EA3-4A74-855D-595A42944533}&mid=ba220518693b47d1a329d15756fbb957-d2cb598395325632... HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 AboutUrls|Tabs - hxxp://isearch.avg.com/tab?cid={A96AEE0A-8EA3-4A74-855D-595A42944533}&mid=ba220518693b47d1a329d15756fbb957-d2cb598395325632bb6493783fdaa0ccc4e833a7&lang=pl&ds=ts024&pr=&d=2012-01-05 00:04:21&v=9.0.0.22&sap=nt HKCU_SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} - "AVG Secure Search" (hxxp://isearch.avg.com/search?cid={A96AEE0A-8EA3-4A74-855D-595A42944533}&mid=ba2...) HKCU_SearchScopes\{FF2271AE-86C0-49DD-8960-52F41D8A3E08} - "Ask Search" (hxxp://websearch.ask.com/redirect?client=ie&tb=ALSV5&o=1665&src=crm&q={searchTer...) HKCU_Toolbar\WebBrowser|{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} (x) HKLM_Toolbar|{95B7759C-8C7F-4BF1-B163-73684A933233} (C:\Program Files (x86)\AVG Secure Search\9.0.0.22\AVG Secure Search_toolbar.dll) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) HKLM_ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - C:\Program Files (x86)\AVG Secure Search\lip.exe (?) HKLM_ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706} - C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\9.0.1\ScriptHelper.exe (?) BHO\{95B7759C-8C7F-4BF1-B163-73684A933233} - "AVG Security Toolbar" (C:\Program Files (x86)\AVG Secure Search\9.0.0.22\AVG Secure Search_toolbar.dll) ======================================== C:\Users\Jaro\Desktop\Ad-Remover\Quarantine: 0 File(s) C:\Users\Jaro\Desktop\Ad-Remover\Backup: 17 File(s) C:\Ad-Report-SCAN[1].txt - 07/01/2012 14:04:23 (5216 Byte(s)) End at: 14:04:49, 07/01/2012 ============== E.O.F ==============