======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 =======

Updated by TeamXscript on 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
website: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Launched at 02:42:43 on 31/05/2011, Normal boot

Microsoft Windows XP Professional Dodatek Service Pack 2 (X86) 
Ania@53CCD542F731494 ( ) 
 
============== SEARCH ==============


Folder found: C:\Documents and Settings\Ania\Dane aplikacji\Mozilla\FireFox\Profiles\ttr74es4.default\conduit
Folder found: C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\Conduit
Folder found: C:\Program Files\Conduit
Folder found: C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\OpenCandy

-- File opened: C:\Documents and Settings\Ania\Dane aplikacji\Mozilla\FireFox\Profiles\ttr74es4.default\Prefs.js --
Line found: user_pref("CT1561552.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER... 
Line found: user_pref("CT1561552.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT156... 
Line found: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr... 
Line found: user_pref("CommunityToolbar.ToolbarsList", "CT1561552"); 
Line found: user_pref("CommunityToolbar.ToolbarsList2", "CT1561552"); 
Line found: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1561552"); 
-- File closed --
 

Key found: HKLM\Software\Classes\Toolbar.CT1561552
Key found: HKLM\Software\Classes\Toolbar.CT2417076
Key found: HKLM\Software\Conduit
Key found: HKCU\Software\Conduit


============== ADDITIONNAL SCAN ==============

**** Mozilla Firefox Version [3.6.17 (pl)] ****

Plugins\npdnu.dll (AOL LLC)
Plugins\npdnupdater2.dll (AOL LLC)
Plugins\npwachk.dll (Nullsoft, Inc.)
Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search)
Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results)
Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb)
Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms})
Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj)
Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms})

-- C:\Documents and Settings\Ania\Dane aplikacji\Mozilla\FireFox\Profiles\ttr74es4.default --
Extensions\IplextoALL@ALLPlayer.org (Iplex to ALLPlayer)
Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\Ania\\Pulpit
Prefs.js - browser.search.defaultenginename, 
Prefs.js - browser.search.defaulturl, 
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://pl.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official
Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.17
Prefs.js - privacy.popups.showBrowserMessage, false

-- C:\Documents and Settings\anna lompa\Dane aplikacji\Mozilla\FireFox\Profiles\x71v7lrk.default --
Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\anna lompa\\Pulpit
Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.17

========================================

**** Google Chrome Version [11.0.696.71] ****

Extension\icmlaeflemplmjndnaapfdbbnpncnbda (C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx) (?)

-- C:\Documents and Settings\Ania\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default --
Preferences - default_search_provider: "Google" (Enabled: true) (?)
Plugin - "Picasa" (Enabled: true)
Plugin - "Winamp Application Detector" (Enabled: true)

========================================

**** Internet Explorer Version [7.0.5730.13] ****

HKCU_Main|Default_Search_URL - hxxp://www.google.com/ie
HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Start Page - hxxp://www.yahoo.com
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://www.yahoo.com
HKCU_URLSearchHooks|{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - "Winamp Toolbar Search Class" (C:\Program Files\Winamp Toolbar\winamptb.dll) (x)
HKLM_URLSearchHooks|{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - "Winamp Toolbar Search Class" (C:\Program Files\Winamp Toolbar\winamptb.dll) (x)
HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Hotspot Shield Customized Web Search" (hxxp://findgala.com/?&uid=231&q={searchTerms})
HKLM_Toolbar|{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} (C:\Program Files\Winamp Toolbar\winamptb.dll) (x)
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
HKLM_ElevationPolicy\0347511a-3b02-4f61-acf4-333f00fa9cb5 - C:\Program Files\gry\gryToolbarHelper.exe (?)
HKLM_ElevationPolicy\290b57c2-8247-4208-9914-1ff4572e7045 - C:\Program Files\gry\gryToolbarHelper.exe (?)
HKLM_ElevationPolicy\2ac3bf7c-aed4-48d4-b73e-7522a7ee99ec - C:\Program Files\gry\gryToolbarHelper.exe (?)
HKLM_ElevationPolicy\362e26ea-e0f9-4f35-a5c9-40b380b56d54 - C:\Program Files\gry\gryToolbarHelper.exe (?)
HKLM_ElevationPolicy\39b386ee-69d0-4529-b52d-82b5af9aacce - C:\Program Files\Hotspot_Shield\Hotspot_ShieldToolbarHelper.exe (x)
HKLM_ElevationPolicy\8b6bf0e3-6c78-4800-8d27-7858bbfff636 - C:\Program Files\gry\gryToolbarHelper.exe (?)
HKLM_ElevationPolicy\91f761b3-71c8-4893-8e6d-def955cd3481 - C:\Program Files\gry\gryToolbarHelper.exe (?)
HKLM_ElevationPolicy\a2d34782-b9ef-43eb-b170-f42f8d5b2adc - C:\Program Files\gry\gryToolbarHelper.exe (?)
HKLM_ElevationPolicy\a5b32307-13c9-463e-a92e-1f58a8d98bb0 - C:\Program Files\gry\gryToolbarHelper.exe (?)
HKLM_ElevationPolicy\cf7386c4-6bd7-4d5a-8316-e523f64bb724 - C:\Program Files\Hotspot_Shield\Hotspot_ShieldToolbarHelper.exe (x)
HKLM_ElevationPolicy\d510fe29-a2b6-4d19-8ad9-9b0f49ab32f6 - C:\Program Files\gry\gryToolbarHelper.exe (?)
HKLM_ElevationPolicy\{a8c2644d-bf72-4a89-a88c-d85f565f2f46} - c:\program files\winamp toolbar\winamptbServer.exe (x)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - "Winamp Toolbar Loader" (C:\Program Files\Winamp Toolbar\winamptb.dll) (x)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
BHO\{DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - "IplexToALLPlayer" (C:\PROGRA~1\ALLPLA~1\Iplex\IPLEXT~1.DLL)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 File(s)
C:\Program Files\Ad-Remover\Backup: 2 File(s)

C:\Ad-Report-SCAN[1].txt - 31/05/2011 02:39:28 (7023 Byte(s)) 
C:\Ad-Report-SCAN[2].txt - 31/05/2011 02:42:46 (1481 Byte(s)) 

End at: 02:43:07, 31/05/2011 
 
============== E.O.F ==============