======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [3]) -> Launched at 19:58:34 on 11/09/2011, Normal boot Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) Beker-Quake@MASTER ( ) ============== SEARCH ============== -- File opened: C:\Documents and Settings\Beker-Quake\Dane aplikacji\Mozilla\FireFox\Profiles\qbn5b0jb.default\Prefs.js -- Line found: user_pref("CT2910324.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT291... Line found: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1302229/1297900/PL", "\"0\"... Line found: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/700614/696475/PL", "\"0\"")... Line found: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/PL", "\"0\"")... Line found: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2304157", ... Line found: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2910324", ... Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo... Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc... Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo... Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local... Line found: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\... Line found: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.0... Line found: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3... Line found: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.... Line found: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.... Line found: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2304157",... Line found: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2910324",... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2304157&octid=... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2910324&octid=... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2910324/CT2910324... Line found: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Tapuz/idel.gif", "... Line found: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Tapuz/minimize.gif... Line found: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Tapuz/play.gif", "... Line found: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Tapuz/stop.gif", "... Line found: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Tapuz/vol.gif", "\... Line found: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634... Line found: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16409683.xml", "\"54235f82d0b243a2b79... Line found: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/18222378.xml", "\"adfcccfeeecf15f1297... Line found: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/21817319.xml", "\"f34925c474f956b76dc... Line found: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/2557521.xml", "\"bb69cac9fb8885b0bd04... Line found: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/2883841.xml", "\"a335e3c217b14d6c72b6... Line found: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/3004231.xml", "\"13496d2945b316bfff1b... Line found: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml", "\"e17735eb6fcba811b14ee... Line found: user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/807095.xml", "\"ce26dca53f35d54d6260a... Line found: user_pref("CommunityToolbar.EngineHiddenByUser", true); Line found: user_pref("CommunityToolbar.EngineOwner", ""); Line found: user_pref("CommunityToolbar.EngineOwnerGuid", "{b5fb4c8d-8220-4a63-8e0f-708cdd0f4c3d}"); Line found: user_pref("CommunityToolbar.EngineOwnerToolbarId", "degotb"); Line found: user_pref("CommunityToolbar.IsEngineShown", false); Line found: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Line found: user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\Beker-Quake\\Dane ... Line found: user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.6.0.10"); Line found: user_pref("CommunityToolbar.OriginalEngineOwner", "CT2910324"); Line found: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{b5fb4c8d-8220-4a63-8e0f-708cdd0f4c3d}"); Line found: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "degotb"); Line found: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://mil.toolbarhome.com/search.aspx?s... Line found: user_pref("CommunityToolbar.ToolbarsList", "CT2910324"); Line found: user_pref("CommunityToolbar.ToolbarsList2", "CT2910324"); Line found: user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Fri Mar 25 2011 09:42:32 GMT+01... Line found: user_pref("CommunityToolbar.alert.alertEnabled", true); Line found: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); Line found: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Jun 22 2011 18:33:42 GMT+0200"); Line found: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Line found: user_pref("CommunityToolbar.alert.locale", "en"); Line found: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Line found: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Jun 24 2011 11:49:55 GMT+0200"); Line found: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); Line found: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Line found: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Line found: user_pref("CommunityToolbar.alert.showTrayIcon", false); Line found: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Line found: user_pref("CommunityToolbar.alert.userId", "fe80b02b-654a-414a-b91d-a318b7e560a6"); Line found: user_pref("CommunityToolbar.globalUserId", "013a2933-7541-4d51-9fb6-cf19369ab580"); Line found: user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Line found: user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Line found: user_pref("CommunityToolbar.killedEngine", true); Line found: user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Thu Sep 08 2011 19:27:1... Line found: user_pref("CommunityToolbar.notifications.alertEnabled", true); Line found: user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440); Line found: user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Thu Sep 08 2011 17:25:05 GMT+020... Line found: user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com"); Line found: user_pref("CommunityToolbar.notifications.locale", "en"); Line found: user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); Line found: user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Thu Sep 08 2011 19:27:16 GMT+0200"); Line found: user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); Line found: user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); Line found: user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com"); Line found: user_pref("CommunityToolbar.notifications.showTrayIcon", false); Line found: user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); Line found: user_pref("CommunityToolbar.notifications.userId", "64660c01-4ecf-4b2f-b752-9b4484392449"); Line found: user_pref("CommunityToolbar.twitter.user_16409683.LastCheckTime", "Fri Mar 11 2011 17:02:49 GMT+0100... Line found: user_pref("CommunityToolbar.twitter.user_18222378.LastCheckTime", "Fri Mar 11 2011 17:02:49 GMT+0100... Line found: user_pref("CommunityToolbar.twitter.user_21817319.LastCheckTime", "Thu Sep 08 2011 19:25:34 GMT+0200... Line found: user_pref("CommunityToolbar.twitter.user_2557521.LastCheckTime", "Fri Mar 11 2011 17:02:49 GMT+0100"... Line found: user_pref("CommunityToolbar.twitter.user_2883841.LastCheckTime", "Fri Mar 11 2011 17:02:49 GMT+0100"... Line found: user_pref("CommunityToolbar.twitter.user_3004231.LastCheckTime", "Fri Mar 11 2011 17:02:49 GMT+0100"... Line found: user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Fri Mar 11 2011 17:02:49 GMT+0100")... Line found: user_pref("CommunityToolbar.twitter.user_807095.LastCheckTime", "Fri Mar 11 2011 17:02:49 GMT+0100")... Line found: user_pref("CommunityToolbar.undefined", ""); -- File closed -- ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [6.0.2 (pl)] **** Plugins\npBitCometAgent.dll (BitComet) Plugins\npdjvu.dll (LizardTech) HKLM_MozillaPlugins\Adobe Reader (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) HKLM_Extensions|{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\ (x) HKLM_Extensions|{BBDA0591-3099-440a-AA10-41764D9DB4DB} - C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.5.0.127\IPSFFPlgn\ -- C:\Documents and Settings\Beker-Quake\Dane aplikacji\Mozilla\FireFox\Profiles\qbn5b0jb.default -- Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}-trash (?) Searchplugins\wrzutapl.xml (?) Searchplugins\youtube.xml (?) Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\Beker-Quake\\Pulpit Prefs.js - browser.search.defaultenginename, SweetIM Search Prefs.js - browser.search.defaulturl, Prefs.js - browser.startup.homepage, hxxp://www.onet.pl/ Prefs.js - browser.startup.homepage_override.buildID, 20110902133214 Prefs.js - browser.startup.homepage_override.mstone, rv:6.0.2 Prefs.js - sweetim.toolbar.previous.browser.search.defaultenginename, Prefs.js - sweetim.toolbar.previous.browser.search.defaulturl, Prefs.js - sweetim.toolbar.previous.browser.search.selectedEngine, Prefs.js - sweetim.toolbar.previous.browser.startup.homepage, hxxp://www.onet.pl/ ======================================== **** Google Chrome Version [13.0.782.220] **** -- C:\Documents and Settings\Beker-Quake\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Enabled: true) (?) Preferences - homepage: hxxp://www.onet.pl/ Preferences - homepage_is_newtabpage: false Preferences - urls_to_restore_on_startup: hxxp://www.onet.pl/ ======================================== **** Internet Explorer Version [7.0.5730.13] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} - "Web Search" (hxxp://startsear.ch/?aff=1&q={searchTerms}) HKLM_SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} - "SweetIM Search" (hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}) HKCU_Toolbar\WebBrowser|{EEE6C35B-6118-11DC-9C72-001320C79847} (x) HKLM_ElevationPolicy\{a00068b1-1e4e-41c7-afa9-baeb9697e2b9} - C:\Program Files\Common Files\Research In Motion\AppLoader\Loader.exe (Research In Motion Limited) HKLM_ElevationPolicy\{D802E3EF-2513-4661-972E-BAD737EFBA88} - C:\Program Files\DivX\DivX OVS Helper\OVSHelperBroker.exe (DivX, LLC.) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) BHO\{DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - "IplexToALLPlayer" (C:\PROGRA~1\ALLPLA~1\Iplex\IPLEXT~1.DLL) ======================================== C:\Program Files\Ad-Remover\Quarantine: 56 File(s) C:\Program Files\Ad-Remover\Backup: 18 File(s) C:\Ad-Report-CLEAN[1].txt - 10/09/2011 12:53:45 (6163 Byte(s)) C:\Ad-Report-CLEAN[2].txt - 10/09/2011 13:01:29 (5252 Byte(s)) C:\Ad-Report-SCAN[1].txt - 09/09/2011 11:11:15 (14708 Byte(s)) C:\Ad-Report-SCAN[2].txt - 09/09/2011 22:45:41 (15909 Byte(s)) C:\Ad-Report-SCAN[3].txt - 11/09/2011 19:58:37 (13690 Byte(s)) End at: 19:59:03, 11/09/2011 ============== E.O.F ==============