======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 23:58:17 on 27/08/2011, Normal boot Microsoft® Windows Vista™ Home Premium (X86) Rafal@RAFAL-PC (Hewlett-Packard HP Pavilion dv9700 Notebook PC) ============== SEARCH ============== Folder found: C:\Users\Rafal\AppData\Roaming\Mozilla\FireFox\Profiles\vdvm6sl1.default\conduit Folder found: C:\Users\Rafal\AppData\LocalLow\Conduit Folder found: C:\ProgramData\Viewpoint Folder found: C:\Program Files\Viewpoint Folder found: C:\Program Files\IZArc\OpenCandy Key found: HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E} Key found: HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD} Key found: HKLM\Software\Classes\Interface\{115CCBAE-27B0-47C3-BA42-BAB708424393} Key found: HKLM\Software\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2} Key found: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl Key found: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl.1 Key found: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary Key found: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1 Key found: HKLM\Software\Classes\Toolbar.CT2405280 Key found: HKLM\Software\Classes\Toolbar.CT2504091 Key found: HKLM\Software\MetaStream Key found: HKLM\Software\Viewpoint Key found: HKCU\Software\Conduit Key found: HKCU\Software\AppDataLow\Software\Conduit Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Key found: HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E} Key found: HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD} Key found: HKLM\Software\MozillaPlugins\@viewpoint.com/VMP Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [6.0 (pl)] **** Plugins\npwachk.dll (Nullsoft) HKLM_MozillaPlugins\@viewpoint.com/VMP (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) HKLM_Extensions|{20978f0f-2978-4992-ae97-7d373c44e04e} - C:\Program Files\Common Files\Techland\Translator\MozillaTranslator\ -- C:\Users\Rafal\AppData\Roaming\Mozilla\FireFox\Profiles\vdvm6sl1.default -- Prefs.js - browser.download.lastDir, C:\\Users\\Rafal\\Desktop Prefs.js - browser.search.defaulturl, Prefs.js - browser.search.selectedEngine, Prefs.js - browser.startup.homepage, hxxp://google.pl/ Prefs.js - browser.startup.homepage_override.buildID, 20110811165603 Prefs.js - browser.startup.homepage_override.mstone, rv:6.0 ======================================== **** Internet Explorer Version [7.0.6000.16512] **** HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKCU_Main|Start Page - hxxp://google.pl/ HKLM_Main|Default_Page_URL - hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_pl&c=81&bd=Pavilion&pf=laptop HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_pl&c=81&bd=Pavilion&pf=laptop HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "?" (?) HKCU_SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} - "DAEMON Search" (hxxp://findgala.com/?&uid=2208&q={searchTerms}) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Softonic-Eng7 Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKLM_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Softonic-Eng7 Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_Toolbar\WebBrowser|{32099AAC-C132-4136-9E9A-4E364A424E17} (x) HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x) HKLM_Toolbar|{0D704FAD-66E9-4F0A-BFED-4F665770DDB3} (C:\Program Files\Common Files\Techland\Translator\InternetTranslator.dll) HKLM_ElevationPolicy\29256854-b73c-49a7-8121-d101f17263e0 - C:\Program Files\Vuze_Remote\Vuze_RemoteToolbarHelper.exe (x) HKLM_ElevationPolicy\2fb41bf2-592d-4e8b-946d-11513803b185 - C:\Program Files\Softonic-Eng7\Softonic-Eng7ToolbarHelper.exe (x) HKLM_ElevationPolicy\c8df4553-985e-44c1-a0e3-52ddf1399c27 - C:\Program Files\Softonic-Eng7\Softonic-Eng7ToolbarHelper.exe (x) HKLM_Extensions\{58ECB495-38F0-49cb-A538-10282ABF65E7} - "HP Smart Select" (c:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll,209) HKLM_Extensions\{B46B0919-62BA-4D99-A5C4-916B57A6805C} - "?" (?) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "Adobe PDF Reader Link Helper" (C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll) BHO\{FFFFFFFF-FF12-44C5-91EC-068E3AA1B2D7} - "HP Print Clips" (c:\Program Files\HP\Smart Web Printing\hpswp_framework.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 0 File(s) C:\Ad-Report-SCAN[1].txt - 27/08/2011 23:58:37 (6277 Byte(s)) End at: 00:00:55, 28/08/2011 ============== E.O.F ==============