======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Launched at 13:33:41 on 18/07/2011, Normal boot Microsoft Windows XP Professional Dodatek Service Pack 2 (X86) Administrator@XP-SPECIAL ( ) ============== SEARCH ============== Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\Toolbar.CT2086743 Key found: HKLM\Software\Classes\Toolbar.CT2405280 Key found: HKLM\Software\conduitEngine Key found: HKCU\Software\conduitEngine Key found: HKCU\Software\PriceGong Key found: HKCU\Software\Toolbar Key found: HKU\.DEFAULT\Software\Conduit Key found: HKU\.DEFAULT\Software\conduitEngine Key found: HKU\.DEFAULT\Software\PriceGong Key found: HKU\.DEFAULT\Software\Search Settings Key found: HKU\S-1-5-18\Software\Conduit Key found: HKU\S-1-5-18\Software\conduitEngine Key found: HKU\S-1-5-18\Software\PriceGong Key found: HKU\S-1-5-18\Software\Search Settings Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E299977B-0BAD-4A59-A278-FBF9A9EF77AD} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.6.18 (pl)] **** Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\fcmdSrch.xml ( hxxp://start.facemoods.com/?a=ironto&f=4&q={searchTerms}/) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Extensions\{B13721C7-F507-4982-B2E5-502A71474FED} (Skype extension for Firefox ) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\FireFox\Profiles\nj1252z3.default -- Extensions\gb@toolbar (?) Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\Administrator\\Pulpit Prefs.js - browser.search.defaultenginename, Prefs.js - browser.search.selectedEngine, Prefs.js - browser.startup.homepage, hxxp://www.google.pl/ Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.18 ======================================== **** Internet Explorer Version [7.0.5730.13] **** HKCU_Main|First Home Page - hxxp://go.microsoft.com/fwlink/?LinkId=54843 HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A} - "Facemoods Search" (hxxp://start.facemoods.com/?a=ironto&s={searchTerms}&f=4) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Softonic-Eng7 Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_SearchScopes\{C3CD744D-2FAE-4640-8297-16B5DA423104} - "Little Fighter 2 Toolbar" (hxxp://search.littlefighter2-toolbar.com/search?p=Q&ts=ne&w={searchTerms}&csrc=s...) HKLM_ElevationPolicy\2115aa34-e2bc-45f0-8bca-5dcf99370d21 - C:\Program Files\Softonic-Eng7\Softonic-Eng7ToolbarHelper.exe (x) HKLM_ElevationPolicy\c54a740e-dd7d-4610-a651-d418ca3fbe62 - C:\Program Files\PHPNukeEN\PHPNukeENToolbarHelper.exe (x) HKLM_ElevationPolicy\{E299977B-0BAD-4A59-A278-FBF9A9EF77AD} - C:\Program Files\ConduitEngine\ConduitEngineHelper.exe (x) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 2 File(s) C:\Ad-Report-SCAN[1].txt - 18/07/2011 11:12:29 (5294 Byte(s)) C:\Ad-Report-SCAN[2].txt - 18/07/2011 13:33:44 (437 Byte(s)) End at: 13:33:56, 18/07/2011 ============== E.O.F ==============