======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 20:21:10 on 29/02/2012, Normal boot Microsoft Windows 7 Professional Service Pack 1 (X86) Mikołaj@MIKOŁAJPC (Gigabyte Technology Co., Ltd. P43-ES3G) ============== SEARCH ============== File found: C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar Folder found: C:\Users\Mikołaj\AppData\LocalLow\Conduit Folder found: C:\Users\Mikołaj\AppData\LocalLow\Toolbar4 Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\Toolbar.CT2233703 Key found: HKLM\Software\Classes\Toolbar.CT2269050 Key found: HKLM\Software\Classes\Toolbar.CT2304157 Key found: HKLM\Software\Classes\Toolbar.CT2843462 Key found: HKLM\Software\Conduit Key found: HKCU\Software\Conduit Key found: HKCU\Software\AppDataLow\Toolbar Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.6.27 (pl)] **** Plugins\npwachk.dll (Nullsoft, Inc.) HKLM_MozillaPlugins\@nvidia.com/3DVision (x) HKLM_MozillaPlugins\@nvidia.com/3DVisionStreaming (x) HKLM_MozillaPlugins\Adobe Reader (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} (Skype Click to Call) HKLM_Extensions|smartwebprinting@hp.com - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 HKCU_Extensions|smartwebprinting@hp.com - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 -- C:\Users\Mikołaj\AppData\Roaming\Mozilla\FireFox\Profiles\o1kauu88.default -- Extensions\IplextoALL@ALLPlayer.org (Iplex to ALLPlayer) Prefs.js - browser.download.lastDir, C:\\Users\\Mikołaj\\Desktop Prefs.js - browser.startup.homepage, hxxp://www.gazeta.pl/0,0.html?p=125 Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.27 ======================================== **** Internet Explorer Version [9.0.8112.16421] **** HKCU_Main|Start Page - hxxp://www.wp.pl/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKCU_URLSearchHooks|{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - "Winamp Search Class" (C:\Program Files\Winamp Toolbar\winamptb.dll) HKCU_URLSearchHooks|{0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - "DeviceVM Url Search Hook" (C:\Windows\System32\dvmurl.dll) HKCU_URLSearchHooks|{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - "XfireXO Toolbar" (C:\Program Files\XfireXO\tbXfi1.dll) HKCU_URLSearchHooks|{5c81f57f-3cf7-4785-b4ef-11ace31aec4f} (x) HKLM_URLSearchHooks|{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - "Winamp Search Class" (C:\Program Files\Winamp Toolbar\winamptb.dll) HKLM_URLSearchHooks|{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - "XfireXO Toolbar" (C:\Program Files\XfireXO\tbXfi1.dll) HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "Ask Search" (hxxp://tbsearch.ask.com/redirect?client=ie&tb=UT2V5&o=15158&src=crm&q={searchTer...) HKCU_SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e} - "BigSeekPro" (hxxp://www.bigseekpro.com/search/browser/hypercam/{F853D6DC-F22F-4156-BBF3-F1802...) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Bigpoint Games PL Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKLM_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Bigpoint Games PL Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_Toolbar\WebBrowser|{32099AAC-C132-4136-9E9A-4E364A424E17} (x) HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x) HKCU_Toolbar\WebBrowser|{472734EA-242A-422B-ADF8-83D1E48CC825} (x) HKCU_Toolbar\WebBrowser|{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} (C:\Program Files\Winamp Toolbar\winamptb.dll) HKCU_Toolbar\WebBrowser|{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} (C:\Program Files\XfireXO\tbXfi1.dll) HKCU_Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} (x) HKCU_Toolbar\WebBrowser|{5C81F57F-3CF7-4785-B4EF-11ACE31AEC4F} (x) HKLM_Toolbar|{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} (C:\Program Files\Winamp Toolbar\winamptb.dll) HKLM_Toolbar|{5e5ab302-7f65-44cd-8211-c1d4caaccea3} (C:\Program Files\XfireXO\tbXfi1.dll) HKCU_ElevationPolicy\{B295748D-FD8E-4EF2-A822-A3FF237E53DD} - C:\Program Files\KGB Archiver\kgb_arch_decompress.exe (Tomasz Pawlak) HKLM_ElevationPolicy\3319d2ea-6217-4f8f-a3f8-916f292380f7 - C:\Program Files\4shared.com\4shared.comToolbarHelper.exe (x) HKLM_ElevationPolicy\824738c0-9220-48e4-9249-4c74408ff2b9 - C:\Program Files\DVDVideoSoftTB\DVDVideoSoftTBToolbarHelper.exe (x) HKLM_ElevationPolicy\e27ea69f-8dc8-4d71-9c1b-bafc528d28af - C:\Program Files\4shared.com\4shared.comToolbarHelper.exe (x) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x) HKLM_ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} - C:\Program Files\HypreCam Toolbar\TbHelper2.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{826FA984-EC85-4164-BA05-EAE031CE2631} - C:\Program Files\XfireXO\XfireXOToolbarHelper.exe (?) HKLM_ElevationPolicy\{ADADAEE2-457A-4984-A57C-E01C3A2BA612} - c:\program files\winamp toolbar\WinampTbServer.exe (AOL LLC.) HKLM_Extensions\{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - "@C:\Windows\WindowsMobile\INetRepl.dll,-222" (C:\Windows\WindowsMobile\INetRepl.dll,210) HKLM_Extensions\{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - "?" (?) BHO\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - "Winamp Toolbar Loader" (C:\Program Files\Winamp Toolbar\winamptb.dll) BHO\{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - "XfireXO Toolbar" (C:\Program Files\XfireXO\tbXfi1.dll) BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll) BHO\{DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - "IplexToALLPlayer" (E:\ALLPlayer\Iplex\IplexToALLPlayer.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 29/02/2012 20:21:51 (7681 Byte(s)) End at: 20:22:25, 29/02/2012 ============== E.O.F ==============