======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 20:55:34 on 18/08/2011, Normal boot Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) x@X-2F6D32309B144 ( ) ============== SEARCH ============== File found: C:\Documents and Settings\x\Dane aplikacji\Mozilla\FireFox\Profiles\t4wkftrx.default\searchplugins\conduit.xml Folder found: C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Conduit -- File opened: C:\Documents and Settings\x\Dane aplikacji\Mozilla\FireFox\Profiles\t4wkftrx.default\Prefs.js -- Line found: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Line found: user_pref("CommunityToolbar.alert.userId", "{9e498b25-1179-4f51-a0c1-6d4de3d76d42}"); Line found: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&Sea... Line found: user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13"); Line found: user_pref("extensions.vshare@toolbar.update.enabled", false); -- File closed -- Key found: HKLM\Software\Classes\CLSID\{F42C7B47-5234-4BF5-8882-DAAC0D64870E} Key found: HKLM\Software\Classes\Interface\{F42C7B47-5234-4BF5-8882-DAAC0D64870E} Key found: HKLM\Software\Classes\Interface\{F7BEBBB1-7E6B-4561-9444-6F4866D60C7D} Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\DiscoveryHelper.iMesh6Discovery Key found: HKLM\Software\Classes\DiscoveryHelper.iMesh6Discovery.1 Key found: HKLM\Software\Classes\Toolbar.CT2269050 Key found: HKLM\Software\Conduit Key found: HKCU\Software\Conduit Key found: HKCU\Software\PriceGong Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{42168F92-DA71-42E6-BC7F-132EAC1F1899} Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.6.20 (pl)] **** Plugins\npVividasPlayer.dll ( ) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} (Skype extension for Firefox ) -- C:\Documents and Settings\x\Dane aplikacji\Mozilla\FireFox\Profiles\t4wkftrx.default -- Extensions\firefox@tvunetworks.com (TVU Web Player) Extensions\player@vividas.com (Vividas player plugin) Searchplugins\conduit.xml (hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}/) Prefs.js - browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms} Prefs.js - browser.search.selectedEngine, Search Prefs.js - browser.startup.homepage, hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13 Prefs.js - browser.startup.homepage_override.mstone, false ======================================== **** Internet Explorer Version [7.0.5730.13] **** HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_URLSearchHooks|{872b5b88-9db5-4310-bdd0-ac189557e5f5} - "DVDVideoSoftTB Toolbar" (C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "DVDVideoSoftTB Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_Toolbar\WebBrowser|{872B5B88-9DB5-4310-BDD0-AC189557E5F5} (C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll) HKLM_Toolbar|{872b5b88-9db5-4310-bdd0-ac189557e5f5} (C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll) HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?) HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?) HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?) HKLM_ElevationPolicy\263e9c66-eefc-4448-b206-ba556dd4765c - C:\Program Files\DVDVideoSoft\DVDVideoSoftToolbarHelper.exe (x) HKLM_ElevationPolicy\60aa5560-ba61-4713-bfcd-e13430029880 - C:\Program Files\DVDVideoSoft\DVDVideoSoftToolbarHelper.exe (x) HKLM_ElevationPolicy\866d7d7d-efd6-4a1d-8fbe-24444d8fd587 - C:\Program Files\DVDVideoSoft\DVDVideoSoftToolbarHelper.exe (x) HKLM_ElevationPolicy\8f5e8f29-9ab3-4cce-aa53-15e609d25ed2 - C:\Program Files\DVDVideoSoftTB\DVDVideoSoftTBToolbarHelper.exe (?) HKLM_ElevationPolicy\9b0915f3-3da0-4e7e-b8b0-bb38ee0e9e90 - C:\Program Files\DVDVideoSoft\DVDVideoSoftToolbarHelper.exe (x) HKLM_ElevationPolicy\e2d36bcc-03bb-466c-889b-1beb2a826aba - C:\Program Files\DVDVideoSoftTB\DVDVideoSoftTBToolbarHelper.exe (?) HKLM_ElevationPolicy\{1950F857-D7D8-4617-8A85-BF48A10483D8} - C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe (Hewlett-Packard) HKLM_ElevationPolicy\{2624E313-9CAF-42F8-A1F3-9D69C26E4A43} - C:\Documents and Settings\x\Ustawienia lokalne\Dane aplikacji\Conduit\CT2269050\DVDVideoSoftTBAutoUpdaterHelper.exe (?) HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?) HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?) HKLM_ElevationPolicy\{9BBA48F1-6395-4827-8329-97D060D23A76} - C:\Program Files\DVDVideoSoftTB\DVDVideoSoftTBToolbarHelper1.exe (?) HKLM_ElevationPolicy\{BB64A76C-9578-433f-949F-142997978A62} - c:\Program Files\Hewlett-Packard\IAM\Bin\asghost.exe (Bioscrypt Inc.) HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?) HKLM_Extensions\{CCA281CA-C863-46ef-9331-5C8D4460577F} - "@btrez.dll,-4015" (C:\Program Files\WIDCOMM\Bluetooth Software\bt_cold_icon.ico) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) BHO\{3134413B-49B4-425C-98A5-893C1F195601} - "BHO_Startup Class" (C:\Program Files\Hewlett-Packard\File Sanitizer\IEBHO.dll) BHO\{872b5b88-9db5-4310-bdd0-ac189557e5f5} - "DVDVideoSoftTB Toolbar" (C:\Program Files\DVDVideoSoftTB\prxtbDVD0.dll) BHO\{DF21F1DB-80C6-11D3-9483-B03D0EC10000} - "Credential Manager for HP ProtectTools" (c:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 0 File(s) C:\Ad-Report-SCAN[1].txt - 18/08/2011 20:55:48 (6195 Byte(s)) End at: 20:56:24, 18/08/2011 ============== E.O.F ==============