======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 21:25:03 on 18/08/2011, Normal boot Microsoft® Windows Vista™ Home Premium Service Pack 1 (X86) Kamil@KAMIL-PC (Gigabyte Technology Co., Ltd. G31M-ES2L) ============== SEARCH ============== Folder found: C:\Users\Kamil\AppData\LocalLow\Conduit Folder found: C:\Users\Kamil\AppData\LocalLow\PriceGong Key found: HKCU\Software\AutocompletePro Key found: HKCU\Software\Conduit Key found: HKCU\Software\AppDataLow\AskBarDis Key found: HKCU\Software\AppDataLow\Toolbar Key found: HKCU\Software\AppDataLow\Software\Conduit Key found: HKCU\Software\AppDataLow\Software\PriceGong Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Ask Toolbar_is1 Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AutocompletePro3_is1 Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{3041D03E-FD4B-44E0-B742-2D9B88305F98} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [4.0.1 (pl)] **** Plugins\npwachk.dll (Nullsoft) HKLM_MozillaPlugins\Adobe Reader (x) HKLM_MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) HKLM_Extensions|{0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\SPFireFox (x) HKCU_Extensions|mozilla_cc@internetdownloadmanager.com - C:\Users\Kamil\AppData\Roaming\IDM\idmmzcc3 -- C:\Users\Kamil\AppData\Roaming\Mozilla\FireFox\Profiles\276webzn.default -- Prefs.js - browser.download.lastDir, C:\\Users\\Kamil\\Downloads Prefs.js - browser.search.defaultenginename, ACPro Prefs.js - browser.search.selectedEngine, Google Prefs.js - browser.startup.homepage, hxxp://www.google.pl/ Prefs.js - browser.startup.homepage_override.buildID, 20110413222027 Prefs.js - browser.startup.homepage_override.mstone, rv:2.0.1 -- C:\Users\Guest\AppData\Roaming\Mozilla\FireFox\Profiles\3kwuq089.default -- Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.13 -- C:\Users\Joanna\AppData\Roaming\Mozilla\FireFox\Profiles\v7wn210l.default -- Prefs.js - browser.download.dir, C:\\Users\\Joanna\\Desktop Prefs.js - browser.download.lastDir, C:\\Users\\Joanna\\Desktop Prefs.js - browser.startup.homepage, about:home Prefs.js - browser.startup.homepage_override.buildID, 20110413222027 Prefs.js - browser.startup.homepage_override.mstone, rv:2.0.1 -- C:\Users\Justyna\AppData\Roaming\Mozilla\FireFox\Profiles\hwwd99xx.default -- Prefs.js - browser.download.lastDir, C:\\Users\\Justyna\\Downloads Prefs.js - browser.startup.homepage_override.buildID, 20110413222027 Prefs.js - browser.startup.homepage_override.mstone, rv:2.0.1 ======================================== **** Internet Explorer Version [7.0.6001.18000] **** HKCU_Main|Default_Search_URL - hxxp://search.autocompletepro.com/?si=7148&bi=400 HKCU_Main|Search bar - hxxp://search.autocompletepro.com/?si=7148&bi=400 HKCU_Main|Search Page - hxxp://search.autocompletepro.com/?si=7148&bi=400 HKCU_Main|Start Page - hxxp://search.autocompletepro.com/?si=7148&bi=400 HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_URLSearchHooks|{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} (x) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Web Search" (hxxp://search.autocompletepro.com/?si=7148&bi=400&q={searchTerms}) HKCU_Toolbar\WebBrowser|{C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} (x) HKCU_Toolbar\WebBrowser|{3041D03E-FD4B-44E0-B742-2D9B88305F98} (x) HKCU_ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} - C:\Program Files\Internet Download Manager\IEMonitor.exe (Tonec Inc.) HKCU_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.) HKLM_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.) BHO\{0055C089-8582-441B-A0BF-17B458C2A3A8} - "IDMIEHlprObj Class" (C:\Program Files\Internet Download Manager\IDMIECC.dll) BHO\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - "IEPluginBHO Class" (C:\Users\Kamil\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 125 File(s) C:\Program Files\Ad-Remover\Backup: 18 File(s) C:\Ad-Report-CLEAN[1].txt - 18/08/2011 16:56:30 (16120 Byte(s)) C:\Ad-Report-SCAN[1].txt - 18/08/2011 16:53:49 (5512 Byte(s)) End at: 21:25:59, 18/08/2011 ============== E.O.F ==============