======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Launched at 17:50:36 on 19/08/2011, Normal boot Microsoft Windows 7 Home Premium Service Pack 1 (X86) Przemek@RIZI (Gigabyte Technology Co., Ltd. M61PME-S2P) ============== SEARCH ============== -- File opened: C:\Users\Przemek\AppData\Roaming\Mozilla\FireFox\Profiles\parugpc1.default\Prefs.js -- Line found: user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"wrc@avast.com\"... Line found: user_pref("extensions.vshare@toolbar.install-event-fired", true); Line found: user_pref("vshare.install.date", "1313607110"); Line found: user_pref("vshare.install.dumpFileCount", 0); Line found: user_pref("vshare.install.dumpFileDisabled", false); Line found: user_pref("vshare.install.finished", "1.0.0"); Line found: user_pref("vshare.install.fresh", "false"); Line found: user_pref("vshare.install.guid", "{28e8a7f9-0329-45aa-9195-0aab99597643}"); Line found: user_pref("vshare.install.isHidden", true); Line found: user_pref("vshare.install.laststatreq", "1304467200000"); Line found: user_pref("vshare.install.newtab", false); Line found: user_pref("vshare.install.newtabDisabledByUser", true); Line found: user_pref("vshare.install.overlayVersion", 1); Line found: user_pref("vshare.install.userHPSettings", "hxxp://www.google.pl/"); Line found: user_pref("vshare.install.userSPSettings", "Google"); -- File closed -- ============== ADDITIONNAL SCAN ============== -- C:\Users\Przemek\AppData\Roaming\Mozilla\FireFox\Profiles\parugpc1.default -- Prefs.js - browser.download.lastDir, C:\\Users\\Przemek\\Pictures Prefs.js - browser.search.defaultenginename, Prefs.js - browser.search.defaulturl, Prefs.js - browser.search.selectedEngine, Prefs.js - browser.startup.homepage, Prefs.js - browser.startup.homepage_override.buildID, 20110811165603 Prefs.js - browser.startup.homepage_override.mstone, rv:6.0 -- C:\Users\Gość\AppData\Roaming\Mozilla\FireFox\Profiles\nrq3qu1k.default -- Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2 -- C:\Users\Tata\AppData\Roaming\Mozilla\FireFox\Profiles\m6ev252a.default -- Prefs.js - browser.search.defaultenginename, Yahoo Prefs.js - browser.search.selectedEngine, Google Prefs.js - browser.startup.homepage, google.pl Prefs.js - browser.startup.homepage_override.buildID, 20110811165603 Prefs.js - browser.startup.homepage_override.mstone, rv:6.0 Prefs.js - keyword.URL, hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=382950&p= ======================================== **** Google Chrome Version [13.0.782.109] **** Extension - dhkplhfnhceodhffomolpfigojocbpcb (x) Extension\icmlaeflemplmjndnaapfdbbnpncnbda (C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx) (?) Extension\jbolfgndggfhhpbnkgnpjkfhinclbigj (K:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx) (?) Extension - jfmjfhklogoienhpfnppmbcbjfjnkonk (x) -- C:\Users\Przemek\AppData\Local\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Enabled: true) (hxxp://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t) Preferences - homepage: hxxp://www.google.pl/ig?hl=pl&source=iglk Preferences - homepage_is_newtabpage: false ======================================== **** Internet Explorer Version [9.0.8112.16421] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x) HKLM_Extensions\{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - "@C:\Windows\WindowsMobile\INetRepl.dll,-222" (C:\Windows\WindowsMobile\INetRepl.dll,210) HKLM_Extensions\{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - "?" (?) BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll) BHO\{D2C5E510-BE6D-42CC-9F61-E4F939078474} - "Lexmark " (C:\Program Files\Lexmark Printable Web\bho.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 1 File(s) C:\Program Files\Ad-Remover\Backup: 16 File(s) C:\Ad-Report-CLEAN[1].txt - 19/08/2011 17:48:35 (5493 Byte(s)) C:\Ad-Report-SCAN[1].txt - 19/08/2011 15:39:53 (6486 Byte(s)) C:\Ad-Report-SCAN[2].txt - 19/08/2011 17:50:39 (5433 Byte(s)) End at: 17:51:15, 19/08/2011 ============== E.O.F ==============