======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org D:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Launched at 21:51:00 on 24/07/2011, Normal boot Microsoft Windows 7 Ultimate (X86) Reaper@REAPER-PRO (System manufacturer P5K/EPU) ============== SEARCH ============== Folder found: D:\Users\Reaper\AppData\Roaming\Mozilla\FireFox\Profiles\dlz0ljxo.default\conduit Folder found: D:\Users\Reaper\AppData\Roaming\Mozilla\FireFox\Profiles\dlz0ljxo.default\ConduitEngine Folder found: D:\Users\Reaper\AppData\LocalLow\Conduit File found: D:\Users\Reaper\Downloads\iMeshV10.exe Key found: HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} Key found: HKLM\Software\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E} Key found: HKLM\Software\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333} Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO Key found: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO.1 Key found: HKLM\Software\Classes\Toolbar.CT2304157 Key found: HKLM\Software\Classes\Toolbar.CT2786678 Key found: HKLM\Software\Classes\AppID\AutocompletePro.DLL Key found: HKLM\Software\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153} Key found: HKLM\Software\Conduit Key found: HKCU\Software\AutocompletePro Key found: HKCU\Software\AutocompleteProBHO Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{42168F92-DA71-42E6-BC7F-132EAC1F1899} Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKCU\Software\Microsoft\Internet Explorer\MenuExt\Crawler Search Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Key found: HKLM\Software\Google\Chrome\Extensions\defdhglnppeioeflggkmglipcecffkhk Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{4B3803EA-5230-4DC3-A7FC-33638F3D3542} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [5.0 (pl)] **** Plugins\npBitCometAgent.dll (BitComet) Plugins\npwachk.dll (Nullsoft, Inc.) HKLM_MozillaPlugins\@nvidia.com/3DVision (x) HKLM_MozillaPlugins\@nvidia.com/3DVisionStreaming (x) HKLM_MozillaPlugins\Adobe Reader (x) HKCU_MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0 (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) HKLM_Extensions|smartwebprinting@hp.com - D:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 HKCU_Extensions|smartwebprinting@hp.com - D:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 -- D:\Users\Reaper\AppData\Roaming\Mozilla\FireFox\Profiles\dlz0ljxo.default -- Extensions\DeviceDetection@logitech.com (???????????? ?? ?????????? Logitech) Extensions\firedownload@mozilla.org (FireDownload) Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} (iMacros for Firefox) Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} (BitComet Video Downloader) Extensions\{ea2b95c2-9be8-48ed-bdd1-5fcd2ad0ff99} (Edit Cookies) Prefs.js - browser.download.lastDir, D:\\Users\\Reaper\\Desktop Prefs.js - browser.search.selectedEngine, Prefs.js - browser.startup.homepage, google.pl Prefs.js - browser.startup.homepage_override.mstone, false ======================================== **** Google Chrome Version [12.0.742.122] **** Extension\bejbohlohkkgompgecdcbbglkpjfjgdj (D:\Users\Reaper\AppData\Local\Temp\crxA0A6.tmp) (x) Extension\defdhglnppeioeflggkmglipcecffkhk (D:\Program Files\AutocompletePro\chrome\autocompleteprochrome.crx) (x) Extension - jfmjfhklogoienhpfnppmbcbjfjnkonk (x) -- D:\Users\Reaper\AppData\Local\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Enabled: true) (hxxp://www.google.com/cse?cx=partner-pub-5462406484424654%3A8q0sn8-w2ss&ie=ISO-8859-1&q={searchTerms}&sa=Search&siteurl=qooqlle.com%2F) Preferences - homepage: hxxp://www.qooqlle.com/ Preferences - homepage_is_newtabpage: true ======================================== **** Internet Explorer Version [8.0.7600.16385] **** HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "Ask Search" (hxxp://websearch.ask.com/redirect?client=ie&tb=UTR&o=15467&src=crm&q={searchTerm...) HKCU_SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - "Szukanie Crawler" (hxxp://www.crawler.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=60347) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - " " (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKLM_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - " " (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_Toolbar\WebBrowser|{32099AAC-C132-4136-9E9A-4E364A424E17} (x) HKCU_Toolbar\WebBrowser|{4B3803EA-5230-4DC3-A7FC-33638F3D3542} (x) HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x) HKLM_ElevationPolicy\372f86a6-2c0c-4506-81c8-278076dacf46 - D:\Program Files\XfireXO\XfireXOToolbarHelper.exe (x) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - D:\Windows\System32\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - D:\Windows\System32\winfxdocobj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - D:\Program Files\Internet Explorer\iedw.exe (x) HKLM_Extensions\{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - "BitComet" (D:\Program Files\BitComet\tools\BitCometBHO_1.4.6.22.dll,203) BHO\{0FB6A909-6086-458F-BD92-1F8EE10042A0} (?) BHO\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} (?) BHO\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - "BitComet Helper" (D:\Program Files\BitComet\tools\BitCometBHO_1.4.6.22.dll) BHO\{5e5ab302-7f65-44cd-8211-c1d4caaccea3} (?) ======================================== D:\Program Files\Ad-Remover\Quarantine: 0 File(s) D:\Program Files\Ad-Remover\Backup: 3 File(s) D:\Ad-Report-SCAN[1].txt - 24/07/2011 00:42:27 (7740 Byte(s)) D:\Ad-Report-SCAN[2].txt - 24/07/2011 21:51:04 (7602 Byte(s)) End at: 21:51:51, 24/07/2011 ============== E.O.F ==============