======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 13:18:41 on 21/07/2011, Normal boot Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) Gosiaaa@AMILOPRO ( ) ============== SEARCH ============== Folder found: C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\FireFox\Profiles\a71rlclf.default\extensions\vshare@toolbar File found: C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\FireFox\Profiles\a71rlclf.default\searchplugins\web-search.xml -- File opened: C:\Documents and Settings\Gosiaaa\Dane aplikacji\Mozilla\FireFox\Profiles\ucy3df2d.default\Prefs.js -- Line found: user_pref("vshare.install.date", "1287619200000"); Line found: user_pref("vshare.install.finished", "1.0.0"); Line found: user_pref("vshare.install.guid", "{7db472ad-c2bc-4820-b40f-bc521f4cc5a5}"); Line found: user_pref("vshare.install.isHidden", true); Line found: user_pref("vshare.install.laststatreq", "1308700800000"); -- File closed -- -- File opened: C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\FireFox\Profiles\a71rlclf.default\Prefs.js -- Line found: user_pref("extensions.enabledItems", "{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21,jqs@sun.com:1.0,... Line found: user_pref("keyword.URL", "hxxp://vshare.toolbarhome.com/search.aspx?srch=ku&q="); Line found: user_pref("vshare.install.date", "1287619200000"); Line found: user_pref("vshare.install.finished", "1.0.0"); Line found: user_pref("vshare.install.guid", "{78c92ce1-685a-4bc3-bd7a-341efa24570f}"); Line found: user_pref("vshare.install.isHidden", true); Line found: user_pref("vshare.install.istoolbarhp", true); Line found: user_pref("vshare.install.istoolbarsearch", true); Line found: user_pref("vshare.install.laststatreq", "1297468800000"); Line found: user_pref("vshare.install.newtab", false); -- File closed -- ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [5.0 (pl)] **** Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) Extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} (Skype extension ) -- C:\Documents and Settings\Gosiaaa\Dane aplikacji\Mozilla\FireFox\Profiles\ucy3df2d.default -- Searchplugins\wrzutapl.xml (?) Prefs.js - browser.download.dir, E:\\Pobieranie Prefs.js - browser.download.lastDir, E:\\sggw Prefs.js - browser.startup.homepage, hxxp://www.facebook.com/ Prefs.js - browser.startup.homepage_override.buildID, 20110615151330 Prefs.js - browser.startup.homepage_override.mstone, rv:5.0 -- C:\Documents and Settings\Dom\Dane aplikacji\Mozilla\FireFox\Profiles\a71rlclf.default -- Extensions\vshare@toolbar (vShare Plugin) Searchplugins\web-search.xml (?) Prefs.js - browser.search.selectedEngine, Web Search... Prefs.js - browser.startup.homepage, nk.pl Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.13 Prefs.js - keyword.URL, hxxp://vshare.toolbarhome.com/search.aspx?srch=ku&q= ======================================== **** Internet Explorer Version [8.0.6001.18702] **** HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Start Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search bar - hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_ElevationPolicy\{08FF730A-494F-4cba-AA0B-E4F1D44715F9} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\symerr.exe (x) HKLM_Extensions\{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - "Create Mobile Favorite" (E:\PROGRA~1\MICROS~1\INetRepl.dll,210) HKLM_Extensions\{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - "?" (?) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 21/07/2011 13:18:49 (4494 Byte(s)) End at: 13:19:15, 21/07/2011 ============== E.O.F ==============