======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 12:41:36 on 15/09/2011, Normal boot Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) Klaudia@KLAUDIA-1A61026 ( ) ============== SEARCH ============== Folder found: C:\Documents and Settings\Klaudia\Ustawienia lokalne\Dane aplikacji\Conduit Folder found: C:\Documents and Settings\Klaudia\Ustawienia lokalne\Dane aplikacji\ConduitEngine Folder found: C:\Documents and Settings\Klaudia\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\Toolbar.CT2786678 Key found: HKLM\Software\Conduit Key found: HKLM\Software\conduitEngine Key found: HKCU\Software\Conduit Key found: HKCU\Software\conduitEngine Key found: HKCU\Software\PriceGong Key found: HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SearchSettings Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7C37FC7A-AE95-459B-8B7C-F4ED987A9567} Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine Value found: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{30F9B915-B755-4826-820B-08FBA6BD249D} ============== ADDITIONNAL SCAN ============== **** Google Chrome Version [13.0.782.220] **** Extension\bejbohlohkkgompgecdcbbglkpjfjgdj (C:\DOCUME~1\Klaudia\USTAWI~1\Temp\crx32D.tmp) (x) -- C:\Documents and Settings\Klaudia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Enabled: true) (?) Preferences - homepage: hxxp://google.pl/ Preferences - homepage_is_newtabpage: false Plugin - Chrome NaCl (Enabled: false) (C:\Documents and Settings\Klaudia\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\13.0.782.220\ppGoogleNaClPluginChrome.dll) Plugin - "Chrome NaCl" (Enabled: false) ======================================== **** Internet Explorer Version [8.0.6001.18702] **** HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Start Page - hxxp://www.google.pl/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_URLSearchHooks|{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - "uTorrentBar Toolbar" (x) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - " " (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - "AVG Secure Search" (hxxp://search.avg.com/route/?d=4c375a76&v=6.10.6.4&i=23&tp=chrome&q={searchTerms...) HKCU_Toolbar\ShellBrowser|{CCC7A320-B3CA-4199-B1A6-9F516DD69829} (x) HKCU_Toolbar\WebBrowser|{CCC7A320-B3CA-4199-B1A6-9F516DD69829} (x) HKCU_Toolbar\WebBrowser|{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} (x) HKLM_Toolbar|{CCC7A320-B3CA-4199-B1A6-9F516DD69829} (x) HKLM_Toolbar|{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} (x) HKLM_Toolbar|{30F9B915-B755-4826-820B-08FBA6BD249D} (x) HKCU_ElevationPolicy\{D9420AC0-7FFF-413D-B419-52469CCC2485} - C:\Program Files\Tracker Software\PDF Viewer\PDFXCview.exe (Tracker Software Products Ltd.) HKLM_ElevationPolicy\{7C37FC7A-AE95-459B-8B7C-F4ED987A9567} - C:\Program Files\ConduitEngine\ConduitEngineHelper.exe (x) HKLM_ElevationPolicy\{8979AD30-8DE6-4ACE-89C6-8917212E37B3} - C:\Program Files\uTorrentBar\uTorrentBarToolbarHelper.exe (x) HKLM_ElevationPolicy\{D380AE03-647F-4ABE-9420-35518998BE16} - C:\Documents and Settings\Klaudia\Ustawienia lokalne\Dane aplikacji\Conduit\CT2786678\uTorrentBarAutoUpdateHelper.exe (?) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) BHO\{30F9B915-B755-4826-820B-08FBA6BD249D} - "Conduit Engine " () (x) BHO\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - "uTorrentBar Toolbar" () (x) BHO\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - "IEPluginBHO Class" () (x) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 15/09/2011 12:43:43 (3900 Byte(s)) End at: 12:44:22, 15/09/2011 ============== E.O.F ==============