======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [2]) -> Launched at 11:37:56 on 05/02/2012, Normal boot Microsoft Windows 7 Professional (X64) SS@SSCAL (Gigabyte Technology Co., Ltd. EP31-DS3L) ============== SEARCH ============== Folder found: C:\Poker\Titan Poker File found: C:\Users\SS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Titan Poker.lnk Folder found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Everest Poker Folder found: C:\Program Files (x86)\Everest Poker File found: C:\Users\SS\Desktop\Titan Poker.lnk File found: C:\Users\Public\Desktop\Everest Poker.lnk Key found: HKCU\Software\Grand Virtual Key found: HKCU\Software\Titan Poker Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Everest Poker Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Titan Poker ============== ADDITIONNAL SCAN ============== -- C:\Users\SS\AppData\Roaming\Mozilla\FireFox\Profiles\0h3ahjwl.default -- Prefs.js - browser.startup.homepage_override.buildID, 20110928134238 Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1 ======================================== **** Google Chrome Version [16.0.912.77] **** -- C:\Users\SS\AppData\Local\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Enabled: true) (?) Preferences - homepage: hxxp://www.google.pl/ Preferences - homepage_is_newtabpage: true Plugin - Chrome NaCl (Enabled: true) (C:\Users\SS\AppData\Local\Google\Chrome\Application\14.0.835.186\ppGoogleNaClPluginChrome.dll) (x) Plugin - NVIDIA 3D Vision (Enabled: true) (C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll) Plugin - NVIDIA 3D VISION (Enabled: true) (C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll) Plugin - "Chrome NaCl" (Enabled: false) Plugin - "NVIDIA 3D Vision" (Enabled: true) Plugin - "NVIDIA 3D VISION" (Enabled: true) ======================================== **** Internet Explorer Version [9.0.8112.16421] **** HKCU_Main|Start Page - hxxp://www.msn.com/ HKLM_Main|Start Page - hxxp://www.msn.com/ HKCU_ElevationPolicy\{AF9627FC-1DE2-4640-B72D-CDBDED9995ED} - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) HKCU_ElevationPolicy\{E0A900DF-9611-4446-86BD-4B1D47E7DB2A} - C:\Users\SS\AppData\Local\Google\Chrome\Application\14.0.835.202\chrome_launcher.exe (x) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) HKCU_Extensions\{52A5EAFF-E30D-48EC-9B63-1799197CD00B} - "Cool Hand Poker" (C:\Microgaming\Poker\coolhandMPP\icon.ico,0) HKCU_Extensions\{5F629B57-D720-4EBD-BB72-01142A1B2F4C} - "NordicBet" (C:\Microgaming\Poker\NordicBetMPP\icon.ico,0) HKCU_Extensions\{76A76414-6B95-490A-B4BA-B8FA841709A6} - "Diamondbet" (C:\Microgaming\Poker\TellPokerMPP\icon.ico,0) HKCU_Extensions\{B3737FF7-3302-409D-9318-28B55E8658E3} - "Purple Lounge" (C:\Microgaming\Poker\PurpleLoungeMPP\icon.ico,0) HKCU_Extensions\{B4668CAE-6207-411D-8444-D58E5F9CE80D} - "Unibet" (C:\Microgaming\Poker\unibetpokerMPP\icon.ico,0) HKCU_Extensions\{E82D0987-2538-4964-9889-93113C7785A2} - "Ladbrokes Poker" (C:\Microgaming\Poker\LadbrokesMPP\icon.ico,0) HKCU_Extensions\{F7E0F30B-71CD-4C03-A0FE-AB04A41DCA47} - "Betway Poker" (C:\Microgaming\Poker\BetwaypokerMPP\MPPoker.exe,2) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 File(s) C:\Program Files (x86)\Ad-Remover\Backup: 2 File(s) C:\Ad-Report-SCAN[1].txt - 05/02/2012 11:30:52 (4989 Byte(s)) C:\Ad-Report-SCAN[2].txt - 05/02/2012 11:37:58 (4089 Byte(s)) End at: 11:38:40, 05/02/2012 ============== E.O.F ==============