======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [1]) -> Launched at 14:44:06 on 05/07/2011, Normal boot Microsoft Windows 7 Professional (X64) Konrad@KONRAD-KOMPUTER ( ) ============== SEARCH ============== File found: C:\Windows\SysWOW64\f3PSSavr.scr Folder found: C:\Program Files (x86)\FunWebProducts Folder found: C:\Program Files (x86)\MyWebSearch Folder found: C:\Users\Konrad\AppData\LocalLow\Toolbar4 Key found: HKLM\Software\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70} Key found: HKLM\Software\Classes\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} Key found: HKLM\Software\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A} Key found: HKLM\Software\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} Key found: HKLM\Software\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906} Key found: HKLM\Software\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} Key found: HKLM\Software\Classes\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9} Key found: HKLM\Software\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} Key found: HKLM\Software\Classes\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9} Key found: HKLM\Software\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983} Key found: HKLM\Software\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14} Key found: HKLM\Software\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA} Key found: HKLM\Software\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB} Key found: HKLM\Software\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF} Key found: HKLM\Software\Classes\CLSID\{A9571378-68A1-443d-B082-284F960C6D17} Key found: HKLM\Software\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC} Key found: HKLM\Software\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987} Key found: HKLM\Software\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7} Key found: HKLM\Software\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835} Key found: HKLM\Software\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805} Key found: HKLM\Software\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612} Key found: HKLM\Software\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17} Key found: HKLM\Software\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390} Key found: HKLM\Software\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC} Key found: HKLM\Software\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728} Key found: HKLM\Software\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A} Key found: HKLM\Software\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC} Key found: HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC} Key found: HKLM\Software\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495} Key found: HKLM\Software\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82} Key found: HKLM\Software\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906} Key found: HKLM\Software\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906} Key found: HKLM\Software\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C} Key found: HKLM\Software\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C} Key found: HKLM\Software\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A} Key found: HKLM\Software\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF} Key found: HKLM\Software\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9} Key found: HKLM\Software\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9} Key found: HKLM\Software\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9} Key found: HKLM\Software\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9} Key found: HKLM\Software\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8} Key found: HKLM\Software\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69} Key found: HKLM\Software\Classes\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC} Key found: HKLM\Software\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D} Key found: HKLM\Software\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} Key found: HKLM\Software\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1} Key found: HKLM\Software\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E} Key found: HKLM\Software\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F} Key found: HKLM\Software\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612} Key found: HKLM\Software\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612} Key found: HKLM\Software\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8} Key found: HKLM\Software\Classes\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A} Key found: HKLM\Software\Classes\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554} Key found: HKLM\Software\Classes\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906} Key found: HKLM\Software\Classes\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9} Key found: HKLM\Software\Classes\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C} Key found: HKLM\Software\Classes\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14} Key found: HKLM\Software\Classes\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144} Key found: HKLM\Software\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E} Key found: HKLM\Software\Classes\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D} Key found: HKLM\Software\Classes\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612} Key found: HKLM\Software\Classes\FunWebProducts.DataControl Key found: HKLM\Software\Classes\FunWebProducts.DataControl.1 Key found: HKLM\Software\Classes\FunWebProducts.HistoryKillerScheduler Key found: HKLM\Software\Classes\FunWebProducts.HistoryKillerScheduler.1 Key found: HKLM\Software\Classes\FunWebProducts.HistorySwatterControlBar Key found: HKLM\Software\Classes\FunWebProducts.HistorySwatterControlBar.1 Key found: HKLM\Software\Classes\FunWebProducts.HTMLMenu Key found: HKLM\Software\Classes\FunWebProducts.HTMLMenu.1 Key found: HKLM\Software\Classes\FunWebProducts.HTMLMenu.2 Key found: HKLM\Software\Classes\FunWebProducts.IECookiesManager Key found: HKLM\Software\Classes\FunWebProducts.IECookiesManager.1 Key found: HKLM\Software\Classes\FunWebProducts.KillerObjManager Key found: HKLM\Software\Classes\FunWebProducts.KillerObjManager.1 Key found: HKLM\Software\Classes\FunWebProducts.PopSwatterBarButton Key found: HKLM\Software\Classes\FunWebProducts.PopSwatterBarButton.1 Key found: HKLM\Software\Classes\FunWebProducts.PopSwatterSettingsControl Key found: HKLM\Software\Classes\FunWebProducts.PopSwatterSettingsControl.1 Key found: HKLM\Software\Classes\MyWebSearch.ChatSessionPlugin Key found: HKLM\Software\Classes\MyWebSearch.ChatSessionPlugin.1 Key found: HKLM\Software\Classes\MyWebSearch.HTMLPanel Key found: HKLM\Software\Classes\MyWebSearch.HTMLPanel.1 Key found: HKLM\Software\Classes\MyWebSearch.OutlookAddin Key found: HKLM\Software\Classes\MyWebSearch.OutlookAddin.1 Key found: HKLM\Software\Classes\MyWebSearch.PseudoTransparentPlugin Key found: HKLM\Software\Classes\MyWebSearch.PseudoTransparentPlugin.1 Key found: HKLM\Software\Classes\ScreenSaverControl.ScreenSaverInstaller Key found: HKLM\Software\Classes\ScreenSaverControl.ScreenSaverInstaller.1 Key found: HKLM\Software\Conduit Key found: HKLM\Software\FocusInteractive Key found: HKLM\Software\Fun Web Products Key found: HKLM\Software\MyWebSearch Key found: HKCU\Software\Conduit Key found: HKCU\Software\MyWebSearch Key found: HKCU\Software\AppDataLow\Software\Fun Web Products Key found: HKCU\Software\AppDataLow\Software\MyWebSearch Key found: HKLM\Software\GamersFirst\OpenCandy Key found: HKLM\Software\Wow6432Node\GamersFirst\OpenCandy Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Key found: HKLM\Software\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7} Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll Key found: HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss Key found: HKLM\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin Key found: HKLM\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin Value found: HKLM\Software\Microsoft\Windows Media\Wmsdk\Sources|F3PopularScreenSavers Value found: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform|FunWebProducts Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [5.0 (pl)] **** Plugins\npijjiautoinstallpluginff.dll (NHN USA Inc.) Plugins\npijjiFFPlugin1.dll (NHN USA Inc.) Plugins\npPandoWebInst.dll (Pando Networks) HKLM_MozillaPlugins\@nvidia.com/3DVision (x) HKLM_MozillaPlugins\@nvidia.com/3DVisionStreaming (x) HKCU_MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0 (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) Extensions\KavAntiBanner@kaspersky.ru_bak (Anti-Banner ) Extensions\linkfilter@kaspersky.ru_bak (Kaspersky URL Advisor ) HKLM_Extensions|virtualKeyboard@kaspersky.ru - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru HKLM_Extensions|KavAntiBanner@Kaspersky.ru - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru HKLM_Extensions|linkfilter@kaspersky.ru - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru -- C:\Users\Konrad\AppData\Roaming\Mozilla\FireFox\Profiles\jfijlpzz.default -- Extensions\battlefieldheroespatcher@ea.com (Battlefield Heroes Updater) Extensions\battlefieldplay4free@ea.com (Battlefield Play4Free) Searchplugins\youtube.xml (?) Prefs.js - browser.download.dir, D:\\Internet Prefs.js - browser.download.lastDir, D: Prefs.js - browser.search.defaultenginename, Prefs.js - browser.search.selectedEngine, YouTube Prefs.js - browser.startup.homepage, hxxp://www.wykop.pl/ Prefs.js - browser.startup.homepage_override.buildID, 20110615151330 Prefs.js - browser.startup.homepage_override.mstone, rv:5.0 ======================================== **** Internet Explorer Version [8.0.7600.16385] **** HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "Ask Search" (hxxp://websearch.ask.com/redirect?client=ie&tb=BT5&o=15443&src=crm&q={searchTerm...) HKCU_Toolbar\WebBrowser|{32099AAC-C132-4136-9E9A-4E364A424E17} (x) HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x) HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files (x86)\Veetle\Player\vtl_hfs.exe (?) HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files (x86)\Veetle\Player\player.exe (?) HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files (x86)\Veetle\Player\vtl_hfax.exe (?) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{2BBE903C-2776-4574-9855-EC1597ABE3D6} - C:\Program Files\Microsoft Office\Office14\excel.exe (x) HKLM_ElevationPolicy\{3644F00E-747A-44aa-8DC3-139CCBEF5BFB} - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (?) HKLM_ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\m3impipe.exe (MyWebSearch.com) HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files (x86)\Veetle\Player\vtl_hfs.exe (?) HKLM_ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} - C:\Program Files (x86)\HyperCam Toolbar\TbHelper2.exe (x) HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files (x86)\Veetle\Player\player.exe (?) HKLM_ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} - C:\Windows\system32\f3PSSavr.scr (FunWebProducts.com) HKLM_ElevationPolicy\{6A7C9604-8A57-4B28-821B-BDEDF0E04788} - C:\Program Files\Microsoft Office\Office14\winproj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{8D2A5716-2205-4EB2-8443-03AB6B9F4B3B} - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSIX.exe (Futuremark Corporation) HKLM_ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\m3SkPlay.exe (MyWebSearch.com) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) HKLM_ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\m3medint.exe (MyWebSearch.com) HKLM_ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\m3SlSrch.exe (MyWebSearch.com) HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files (x86)\Veetle\Player\vtl_hfax.exe (?) HKLM_ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\m3SrchMn.exe (MyWebSearch.com) HKLM_ElevationPolicy\{FC88B53C-9B2A-1A25-5867-C8612E79DBF6} - C:\Program Files\Microsoft Office\Office14\POWERPNT.EXE (x) HKLM_Extensions\{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - "@C:\Windows\WindowsMobile\INetRepl.dll,-222" (C:\Windows\WindowsMobile\INetRepl.dll,210) HKLM_Extensions\{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - "?" (?) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "AcroIEHlprObj Class" (C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 File(s) C:\Program Files (x86)\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 05/07/2011 14:44:09 (16882 Byte(s)) End at: 14:44:43, 05/07/2011 ============== E.O.F ==============