======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [2]) -> Launched at 22:25:51 on 08/08/2011, Normal boot Microsoft Windows 7 Home Premium Service Pack 1 (X64) Daniel@DANIEL-KOMPUTER (Hewlett-Packard HP Pavilion dv7 Notebook PC) ============== SEARCH ============== Folder found: C:\Users\Daniel\AppData\Roaming\OpenCandy Folder found: C:\Users\Daniel\AppData\Local\OpenCandy ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [5.0.1 (pl)] **** HKLM_MozillaPlugins\Adobe Reader (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) HKLM_Extensions|otis@digitalpersona.com - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\ HKLM_Extensions|{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\ (x) HKLM_Extensions|{cb84136f-9c44-433a-9048-c5cd9df1dc16} - C:\Program Files (x86)\PC Tools Security\BDT\Firefox\ HKCU_Extensions|otis@digitalpersona.com - C:\Program Files (x86)\DigitalPersona\Bin\firefoxext -- C:\Users\Daniel\AppData\Roaming\Mozilla\FireFox\Profiles\bxf11bbf.default -- Prefs.js - browser.startup.homepage_override.buildID, 20110707182747 Prefs.js - browser.startup.homepage_override.mstone, rv:5.0.1 ======================================== **** Google Chrome Version [13.0.782.109] **** -- C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Enabled: true) (?) Preferences - homepage: hxxp://www.google.com Preferences - homepage_is_newtabpage: true ======================================== **** Internet Explorer Version [9.0.8112.16421] **** HKCU_Main|Start Page - hxxp://www.msn.com/ HKLM_Main|Default_Page_URL - hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_PL&c=94&bd=Pavilion&pf=cnnb HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_PL&c=94&bd=Pavilion&pf=cnnb HKCU_Toolbar\WebBrowser|{472734EA-242A-422B-ADF8-83D1E48CC825} (C:\Program Files (x86)\PC Tools Security\BDT\PCTBrowserDefender.dll) HKLM_Toolbar|{472734EA-242A-422B-ADF8-83D1E48CC825} (C:\Program Files (x86)\PC Tools Security\BDT\PCTBrowserDefender.dll) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?) BHO\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - "PC Tools Browser Guard BHO" (C:\Program Files (x86)\PC Tools Security\BDT\PCTBrowserDefender.dll) BHO\{395610AE-C624-4f58-B89E-23733EA00F9A} - "DigitalPersona Personal Extension" (C:\Program Files (x86)\DigitalPersona\Bin\DpOtsPluginIe8.dll) BHO\{9030D464-4C02-4ABF-8ECC-5164760863C6} - "Pomocnik rejestracji usługi Windows Live" (C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll) BHO\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} - "FDMIECookiesBHO Class" (C:\Program Files (x86)\Free Download Manager\iefdm2.dll) BHO\{ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - "ChromeFrame BHO" (C:\Program Files (x86)\Google\Chrome Frame\Application\13.0.782.109\npchrome_frame.dll) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 File(s) C:\Program Files (x86)\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 08/08/2011 22:11:05 (4659 Byte(s)) C:\Ad-Report-SCAN[2].txt - 08/08/2011 22:25:56 (4585 Byte(s)) End at: 22:27:11, 08/08/2011 ============== E.O.F ==============