======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 14:25:23 on 09/08/2011, Normal boot Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) Paweł@PIŁKARZ (Acer Aspire 5730) ============== ACTION(S) ============== File deleting error: C:\Windows\system32\f3PSSavr.scr File deleted: C:\Users\Paweł\AppData\Roaming\Mozilla\FireFox\Profiles\68s1donw.default\searchplugins\mywebsearch.xml File deleted: C:\Users\Kuba\AppData\Roaming\Mozilla\FireFox\Profiles\jrgischm.default\searchplugins\mywebsearch.xml Folder deleted: C:\Users\Paweł\AppData\LocalLow\Conduit Folder deleted: C:\Users\Paweł\AppData\LocalLow\FunWebProducts Folder deleted: C:\Program Files\FunWebProducts Folder deleted: C:\Users\Paweł\AppData\LocalLow\Internet Saving Optimizer Folder deleted: C:\Users\Paweł\AppData\LocalLow\Media Access Startup Folder deleted: C:\Users\Paweł\AppData\LocalLow\MyWebSearch Folder deleted: C:\Program Files\MyWebSearch Folder deleted: C:\ProgramData\Sukoku Folder deleted: C:\Program Files\Sukoku Folder deleting error: C:\Program Files\System Search Dispatcher (!) -- Temporary files deleted. -- File opened: C:\Users\Paweł\AppData\Roaming\Mozilla\FireFox\Profiles\68s1donw.default\Prefs.js -- Line deleted: user_pref("desktopsmiley.startonce", "false"); Line deleted: user_pref("extensions.enabledItems", "{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{CAFEEFAC-0016-0... Line deleted: user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea... Line deleted: user_pref("extensions.mywebsearch.prevKwdEnabled", true); Line deleted: user_pref("extensions.mywebsearch.prevKwdURL", "chrome://browser-region/locale/region.properties"); Line deleted: user_pref("keyword.URL", "hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=GRman000&fl=0&ptb=ZvvnsNZ... -- File closed -- -- File opened: C:\Users\Kuba\AppData\Roaming\Mozilla\FireFox\Profiles\jrgischm.default\Prefs.js -- Line deleted: user_pref("desktopsmiley.startonce", "false"); Line deleted: user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea... Line deleted: user_pref("extensions.mywebsearch.prevKwdEnabled", true); Line deleted: user_pref("extensions.mywebsearch.prevKwdURL", "chrome://browser-region/locale/region.properties"); Line deleted: user_pref("general.useragent.extra.desktopsmiley", "desktopsmiley_2_3_92816308413767971_776_97 DS_ga... Line deleted: user_pref("keyword.URL", "hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZRxdm185YYPL&fl=0&ptb=R7x... -- File closed -- Key deleting error: HKLM\Software\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} Key deleting error: HKLM\Software\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EAB-A523-4961-B6BB-170DE4475CCA} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA} Key deleting error: HKLM\Software\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70} Key deleting error: HKLM\Software\Classes\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} Key deleting error: HKLM\Software\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A} Key deleting error: HKLM\Software\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} Key deleting error: HKLM\Software\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906} Key deleting error: HKLM\Software\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5} Key deleting error: HKLM\Software\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} Key deleting error: HKLM\Software\Classes\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9} Key deleting error: HKLM\Software\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} Key deleting error: HKLM\Software\Classes\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9} Key deleting error: HKLM\Software\Classes\CLSID\{799391D3-EB86-4bac-9BD3-CBFEA58A0E15} Key deleting error: HKLM\Software\Classes\CLSID\{819FFE22-35C7-4925-8CDA-4E0E2DB94302} Key deleting error: HKLM\Software\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983} Key deleting error: HKLM\Software\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14} Key deleting error: HKLM\Software\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA} Key deleting error: HKLM\Software\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB} Key deleting error: HKLM\Software\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF} Key deleting error: HKLM\Software\Classes\CLSID\{A9571378-68A1-443d-B082-284F960C6D17} Key deleting error: HKLM\Software\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC} Key deleting error: HKLM\Software\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987} Key deleting error: HKLM\Software\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7} Key deleting error: HKLM\Software\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835} Key deleting error: HKLM\Software\Classes\CLSID\{D858DAFC-9573-4811-B323-7011A3AA7E61} Key deleting error: HKLM\Software\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805} Key deleting error: HKLM\Software\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612} Key deleted: HKLM\Software\Classes\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA} Key deleted: HKLM\Software\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA} Key deleted: HKLM\Software\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17} Key deleted: HKLM\Software\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390} Key deleted: HKLM\Software\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC} Key deleted: HKLM\Software\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728} Key deleted: HKLM\Software\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A} Key deleted: HKLM\Software\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC} Key deleted: HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC} Key deleted: HKLM\Software\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495} Key deleted: HKLM\Software\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82} Key deleted: HKLM\Software\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906} Key deleted: HKLM\Software\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906} Key deleted: HKLM\Software\Classes\Interface\{480098C6-F6AD-4C61-9B5C-2BAE228A34D1} Key deleted: HKLM\Software\Classes\Interface\{6160F76A-1992-4B17-A32D-0C706D159105} Key deleted: HKLM\Software\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C} Key deleted: HKLM\Software\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C} Key deleted: HKLM\Software\Classes\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA} Key deleted: HKLM\Software\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A} Key deleted: HKLM\Software\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF} Key deleted: HKLM\Software\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9} Key deleted: HKLM\Software\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9} Key deleted: HKLM\Software\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9} Key deleted: HKLM\Software\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9} Key deleted: HKLM\Software\Classes\Interface\{877F3EAB-4462-44DF-8475-6064EAFD7FBF} Key deleted: HKLM\Software\Classes\Interface\{8E9CF769-3D3B-40EB-9E2D-76E7A205E4D2} Key deleted: HKLM\Software\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8} Key deleted: HKLM\Software\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69} Key deleted: HKLM\Software\Classes\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC} Key deleted: HKLM\Software\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D} Key deleted: HKLM\Software\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} Key deleted: HKLM\Software\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1} Key deleted: HKLM\Software\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477} Key deleted: HKLM\Software\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E} Key deleted: HKLM\Software\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F} Key deleted: HKLM\Software\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612} Key deleted: HKLM\Software\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612} Key deleted: HKLM\Software\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8} Key deleted: HKLM\Software\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978} Key deleted: HKLM\Software\Classes\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA} Key deleted: HKLM\Software\Classes\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A} Key deleted: HKLM\Software\Classes\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554} Key deleted: HKLM\Software\Classes\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906} Key deleted: HKLM\Software\Classes\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9} Key deleted: HKLM\Software\Classes\TypeLib\{819FFE20-35C7-4925-8CDA-4E0E2DB94302} Key deleted: HKLM\Software\Classes\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C} Key deleted: HKLM\Software\Classes\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14} Key deleted: HKLM\Software\Classes\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144} Key deleted: HKLM\Software\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E} Key deleted: HKLM\Software\Classes\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D} Key deleted: HKLM\Software\Classes\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612} Key deleted: HKLM\Software\Classes\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C} Key deleted: HKLM\Software\Classes\Conduit.Engine Key deleted: HKLM\Software\Classes\FunWebProducts.DataControl Key deleted: HKLM\Software\Classes\FunWebProducts.DataControl.1 Key deleted: HKLM\Software\Classes\FunWebProducts.HistoryKillerScheduler Key deleted: HKLM\Software\Classes\FunWebProducts.HistoryKillerScheduler.1 Key deleted: HKLM\Software\Classes\FunWebProducts.HistorySwatterControlBar Key deleted: HKLM\Software\Classes\FunWebProducts.HistorySwatterControlBar.1 Key deleted: HKLM\Software\Classes\FunWebProducts.HTMLMenu Key deleted: HKLM\Software\Classes\FunWebProducts.HTMLMenu.1 Key deleted: HKLM\Software\Classes\FunWebProducts.HTMLMenu.2 Key deleted: HKLM\Software\Classes\FunWebProducts.IECookiesManager Key deleted: HKLM\Software\Classes\FunWebProducts.IECookiesManager.1 Key deleted: HKLM\Software\Classes\FunWebProducts.KillerObjManager Key deleted: HKLM\Software\Classes\FunWebProducts.KillerObjManager.1 Key deleted: HKLM\Software\Classes\FunWebProducts.PopSwatterBarButton Key deleted: HKLM\Software\Classes\FunWebProducts.PopSwatterBarButton.1 Key deleted: HKLM\Software\Classes\FunWebProducts.PopSwatterSettingsControl Key deleted: HKLM\Software\Classes\FunWebProducts.PopSwatterSettingsControl.1 Key deleted: HKLM\Software\Classes\MyWebSearch.ChatSessionPlugin Key deleted: HKLM\Software\Classes\MyWebSearch.ChatSessionPlugin.1 Key deleted: HKLM\Software\Classes\MyWebSearch.HTMLPanel Key deleted: HKLM\Software\Classes\MyWebSearch.HTMLPanel.1 Key deleted: HKLM\Software\Classes\MyWebSearch.MultipleButton Key deleted: HKLM\Software\Classes\MyWebSearch.MultipleButton.1 Key deleted: HKLM\Software\Classes\MyWebSearch.OutlookAddin Key deleted: HKLM\Software\Classes\MyWebSearch.OutlookAddin.1 Key deleted: HKLM\Software\Classes\MyWebSearch.PseudoTransparentPlugin Key deleted: HKLM\Software\Classes\MyWebSearch.PseudoTransparentPlugin.1 Key deleted: HKLM\Software\Classes\MyWebSearch.UrlAlertButton Key deleted: HKLM\Software\Classes\MyWebSearch.UrlAlertButton.1 Key deleted: HKLM\Software\Classes\MyWebSearchToolBar.SettingsPlugin Key deleted: HKLM\Software\Classes\MyWebSearchToolBar.SettingsPlugin.1 Key deleted: HKLM\Software\Classes\MyWebSearchToolBar.ToolbarPlugin Key deleted: HKLM\Software\Classes\MyWebSearchToolBar.ToolbarPlugin.1 Key deleted: HKLM\Software\Classes\ScreenSaverControl.ScreenSaverInstaller Key deleted: HKLM\Software\Classes\ScreenSaverControl.ScreenSaverInstaller.1 Key deleted: HKLM\Software\Classes\Toolbar.CT1142338 Key deleted: HKLM\Software\Classes\Toolbar.CT1708250 Key deleted: HKLM\Software\Classes\Toolbar.CT2786678 Key deleting error: HKLM\Software\Classes\AppID\AIMActiveXDLL.dll Key deleting error: HKLM\Software\Classes\AppID\{57ABA38E-6535-48F3-99FD-EFDC62137C78} Key deleting error: HKLM\Software\Classes\AppID\AxGifAnimator.DLL Key deleting error: HKLM\Software\Classes\AppID\{E97BE7A8-7FBA-49FA-A742-BCFB5DAA0ED5} Key deleted: HKLM\Software\Conduit Key deleted: HKLM\Software\FocusInteractive Key deleted: HKLM\Software\Fun Web Products Key deleted: HKLM\Software\Media Access Startup Key deleted: HKLM\Software\MyWebSearch Key deleted: HKLM\Software\Sukoku Key deleted: HKLM\Software\AppDataLow\Software\Internet Saving Optimizer Key deleted: HKLM\Software\AppDataLow\Software\Media Access Startup Key deleted: HKCU\Software\MyWebSearch Key deleted: HKCU\Software\AppDataLow\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} Key deleted: HKCU\Software\AppDataLow\Software\conduitEngine Key deleted: HKCU\Software\AppDataLow\Software\DoubleD Key deleted: HKCU\Software\AppDataLow\Software\Fun Web Products Key deleted: HKCU\Software\AppDataLow\Software\FunWebProducts Key deleted: HKCU\Software\AppDataLow\Software\Internet Saving Optimizer Key deleted: HKCU\Software\AppDataLow\Software\Media Access Startup Key deleted: HKCU\Software\AppDataLow\Software\MyWebSearch Key deleted: HKCU\Software\AppDataLow\Software\Toolbar Key deleted: HKLM\Software\Classes\Installer\Products\014206B1389D749489EFEE4709371DE5 Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\014206B1389D749489EFEE4709371DE5 Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5} Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CDBFB47B-58A8-4111-BF95-06178DCE326D} Key deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} Key deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F84D69AA-3E20-4305-984E-18E640D7F7FF} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C5096216-7703-409E-B85A-8A6EE7395128}}_is1 Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\GamingHarbor Toolbar Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1B602410-D983-4947-98FE-EE749073D15E} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C5096216-7703-409E-B85A-8A6EE7395128}}_is1 Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\GamingHarbor Toolbar Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall Key deleting error: HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search Key deleted: HKCU\Software\Microsoft\Office\Outlook\Addins\OEActiveXDLL.DesktopOEAddin1 Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25B8D58C-B0CB-46B0-BA64-05B3804E4E86} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{35B8D58C-B0CB-46B0-BA64-05B3804E4E86} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CDBFB47B-58A8-4111-BF95-06178DCE326D} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25B8D58C-B0CB-46B0-BA64-05B3804E4E86} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{35B8D58C-B0CB-46B0-BA64-05B3804E4E86} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CDBFB47B-58A8-4111-BF95-06178DCE326D} Key deleting error: HKLM\Software\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} Key deleting error: HKLM\Software\Classes\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3} Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7} Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll Key deleted: HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss Key deleted: HKLM\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin Key deleted: HKLM\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin Key deleted: HKLM\Software\MozillaPlugins\@mywebsearch.com/Plugin Value deleted: HKLM\Software\Microsoft\Windows Media\Wmsdk\Sources|F3PopularScreenSavers Value deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform|FunWebProducts Value deleting error: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00A6FAF6-072E-44CF-8957-5838F569A31D} Value deleting error: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{07B18EA9-A523-4961-B6BB-170DE4475CCA} Value deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{07B18EA9-A523-4961-B6BB-170DE4475CCA} ============== ADDITIONNAL SCAN ============== -- C:\Users\Paweł\AppData\Roaming\Mozilla\FireFox\Profiles\68s1donw.default -- Extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} (Winamp Toolbar) Searchplugins\winamp-search.xml (?) Prefs.js - browser.download.dir, C:\\Users\\PaweB\\Downloads Prefs.js - browser.download.lastDir, F: Prefs.js - browser.search.defaultenginename, Winamp Search Prefs.js - browser.search.defaulturl, hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinamp... Prefs.js - browser.search.selectedEngine, My Web Search Prefs.js - browser.startup.homepage, hxxp://www.theprizeday.com/today.php|hxxp://pl.start3.mozilla.com/firefox?client=firefox-a&rls... Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.3 -- C:\Users\Julia\AppData\Roaming\Mozilla\FireFox\Profiles\ih214so0.default -- Extensions\staged-xpis (?) Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2 -- C:\Users\Kuba\AppData\Roaming\Mozilla\FireFox\Profiles\jrgischm.default -- Prefs.js - browser.download.dir, C:\\Users\\Kuba\\Downloads Prefs.js - browser.startup.homepage, hxxp://www.theprizeday.com/today.php|hxxp://pl.start3.mozilla.com/firefox?client=firefox-a&rls... Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.3 -- C:\Users\Monika\AppData\Roaming\Mozilla\FireFox\Profiles\y68ix3aa.default -- Extensions\staged-xpis (?) Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2 ======================================== **** Internet Explorer Version [8.0.6001.19088] **** HKCU_Main|Default_Page_URL - hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&s=2&o=vp32&d=1008&m=aspire_5730 HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKCU_Main|Start Page - hxxp://www.google.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&s=2&o=vp32&d=1008&m=aspire_5730 HKCU_URLSearchHooks|{00A6FAF6-072E-44cf-8957-5838F569A31D} (x) HKCU_URLSearchHooks|{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} (x) HKCU_URLSearchHooks|{930f1200-f5f1-4870-bac6-e233ec8e7023} (x) HKCU_URLSearchHooks|{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} (x) HKCU_URLSearchHooks|{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} (x) HKCU_SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E} - "Google Desktop" (hxxp://127.0.0.1:4664/search&s=ZTUIIcD-ox0rFhxy9GMWiKJ3L_o?q={searchTerms}) HKCU_Toolbar\ShellBrowser|{5CBE3B7C-1E47-477E-A7DD-396DB0476E29} (x) HKCU_Toolbar\WebBrowser|{930F1200-F5F1-4870-BAC6-E233EC8E7023} (x) HKCU_Toolbar\WebBrowser|{57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} (x) HKCU_Toolbar\WebBrowser|{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} (x) HKLM_Toolbar|{07B18EA9-A523-4961-B6BB-170DE4475CCA} (C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL) (x) HKLM_ElevationPolicy\03a9581b-072d-4e5b-9f4f-950927d80d69 - C:\Program Files\Softonic_English\Softonic_EnglishToolbarHelper.exe (x) HKLM_ElevationPolicy\f9bebfd1-e9b3-462c-9c1f-7aeacf6298e1 - C:\Program Files\Softonic_English\Softonic_EnglishToolbarHelper.exe (x) HKLM_ElevationPolicy\{5F17E524-3447-4c7d-8E5F-4EFF31CDE3B7} - C:\Program Files\Common Files\DivX Shared\DesktopService\DDMService.exe (DivX, LLC) HKLM_ElevationPolicy\{64903E32-AE0B-408D-909C-09A08791F28D} - C:\Program Files\DivX\DivX Plus Web Player\dwpBroker.exe (?) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{74351F14-5437-4d87-805B-04D409B09976} - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (x) HKLM_ElevationPolicy\{7BD9A644-9DC6-42be-8872-CBF5524276BD} - C:\Program Files\Common Files\Software Update Utility\dnu.exe (AOL LLC) HKLM_ElevationPolicy\{D802E3EF-2513-4661-972E-BAD737EFBA88} - C:\Program Files\DivX\DivX OVS Helper\OVSHelperBroker.exe (DivX, LLC.) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "Adobe PDF Reader Link Helper" (C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll) BHO\{326E768D-4182-46FD-9C16-1449A49795F4} - "DivX Plus Web Player HTML5