======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 17:21:28 on 10/07/2011, Normal boot Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) STACHU@STACHU-PC (TOSHIBA EQUIUM P300) ============== SEARCH ============== Folder found: C:\Program Files\AskTBar Folder found: C:\Users\STACHU\AppData\LocalLow\FunWebProducts Folder found: C:\Users\STACHU\AppData\LocalLow\MyWebSearch Key found: HKCU\Software\AppDataLow\Software\Fun Web Products Key found: HKCU\Software\AppDataLow\Software\FunWebProducts Key found: HKCU\Software\AppDataLow\Software\MyWebSearch Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Key found: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FCBA2C7B-B038-412F-A12C-9FA7C8C49EB7} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [5.0 (pl)] **** HKLM_MozillaPlugins\Adobe Reader (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) HKCU_Extensions|{3A149812-36FE-42BB-B813-DF39C3FA81E2} - C:\Users\STACHU\AppData\Local\{3A149812-36FE-42BB-B813-DF39C3FA81E2} -- C:\Users\STACHU\AppData\Roaming\Mozilla\FireFox\Profiles\0ltb19vw.default -- Prefs.js - browser.download.dir, C:\\Users\\STACHU\\Downloads Prefs.js - browser.search.defaultenginename, Prefs.js - browser.search.defaulturl, Prefs.js - browser.startup.homepage, hxxp://www.google.com/firefox Prefs.js - browser.startup.homepage_override.buildID, 20110615151330 Prefs.js - browser.startup.homepage_override.mstone, rv:5.0 ======================================== **** Internet Explorer Version [9.0.8112.16421] **** IEXPLORE.EXE\Shell\Open\Command - iexplore.exe HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKCU_Main|Start Page - hxxp://www.wp.pl/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "Ask Search" (hxxp://websearch.ask.com/redirect?client=ie&tb=CCS&o=15769&src=crm&q={searchTerm...) HKCU_SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E} - "Google Desktop" (hxxp://127.0.0.1:4664/search&s=BQS5SRZKn7-BBHQQEbSm5AfeOns?q={searchTerms}) HKCU_ElevationPolicy\{1A84286C-B9A7-4CB6-AB1A-A81E9E0B05E5} - C:\Program Files\Veetle\VLCBroadcast\lbclient.exe (?) HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?) HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?) HKCU_ElevationPolicy\{72BDDF2B-0ABC-4B8F-AAE6-47426B11D634} - C:\Program Files\Winamp\winamp.exe (x) HKCU_ElevationPolicy\{AD6C7CB1-6324-401E-94F4-A09BDC10C866} - C:\Program Files\Veetle\VLCBroadcast\vlc_encoder.exe (?) HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?) HKCU_ElevationPolicy\{FCBA2C7B-B038-412F-A12C-9FA7C8C49EB7} - C:\Program Files\alot\bin\ALOTSettings.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{74351F14-5437-4d87-805B-04D409B09976} - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google) HKLM_ElevationPolicy\{D62088BE-DBCC-11DB-8D0A-D0DD55D89595} - C:\Program Files\RealArcade\Installer\bin\gameinstaller.exe (?) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 10/07/2011 17:22:13 (4512 Byte(s)) End at: 17:23:09, 10/07/2011 ============== E.O.F ==============