======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 20:18:24 on 19/10/2011, Normal boot Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) Viamot@ESC214M ( ) ============== SEARCH ============== Folder found: C:\Program Files\Common Files\Spigot Key found: HKLM\Software\Freeze.com Key found: HKCU\Software\Zugo Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [7.0.1 (pl)] **** Plugins\npganymedenet.dll ( ) HKLM_MozillaPlugins\@research.microsoft.com/HDView (x) HKLM_MozillaPlugins\Adobe Reader (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\fcmdSrchddr.xml (hxxp://start.facemoods.com/?a=ddr&f=4&q={searchTerms}/) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\browsercomps.dll (Mozilla Foundation) -- C:\Documents and Settings\Viamot\Dane aplikacji\Mozilla\FireFox\Profiles\o3eyn82n.default -- Searchplugins\google-pl.xml (?) Searchplugins\mozilla-add-ons.xml (?) Searchplugins\yahoo.xml (?) Prefs.js - browser.download.dir, C:\\Documents and Settings\\Viamot\\Pulpit\\tg\\F Prefs.js - browser.search.selectedEngine, Google PL Prefs.js - browser.startup.homepage, hxxp://onet.pl Prefs.js - browser.startup.homepage_override.buildID, 20110928134238 Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1 ======================================== **** Internet Explorer Version [8.0.6001.18702] **** HKCU_Main|Default_Search_URL - hxxp://www.google.com/ie HKCU_Main|Search bar - hxxp://www.google.com/ie HKCU_Main|Search Page - hxxp://www.google.com HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search bar - hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF} - "Web Search..." (hxxp://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp) HKCU_SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A} - "Search" (hxxp://start.facemoods.com/?a=ddr&s={searchTerms}&f=4) HKLM_Toolbar|{D2F8F919-690B-4EA2-9FA7-A203D1E04F75} (C:\Program Files\Styler\TB\StylerTB.dll) HKCU_ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D} - C:\Documents and Settings\Viamot\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.69\GoogleUpdateOnDemand.exe (x) HKCU_ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55} - C:\Documents and Settings\Viamot\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe (x) HKLM_ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D} - C:\Program Files\Google\Update\1.3.21.69\GoogleUpdateBroker.exe (x) HKLM_ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55} - C:\Program Files\Google\Update\GoogleUpdate.exe (x) HKLM_ElevationPolicy\{D802E3EF-2513-4661-972E-BAD737EFBA88} - C:\Program Files\DivX\DivX OVS Helper\OVSHelperBroker.exe (DivX, LLC.) HKLM_Extensions\{0045D4BC-5189-4b67-969C-83BB1906C421} - "?" (?) HKLM_Extensions\{58ECB495-38F0-49cb-A538-10282ABF65E7} - "Kolekcja wycinków HP" (C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll,207) HKLM_Extensions\{700259D7-1666-479a-93B1-3250410481E8} - "Zaznaczanie HP Smart" (C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll,209) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) BHO\{053F9267-DC04-4294-A72C-58F732D338C0} - "HP Print Clips" (C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll) BHO\{5CA3D70E-1895-11CF-8E15-001234567890} - "DriveLetterAccess" (C:\WINDOWS\System32\DLA\DLASHX_W.DLL) BHO\{F040E541-A427-4CF7-85D8-75E3E0F476C5} - "CPwmIEBrowserHelper Object" (C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 19/10/2011 20:18:38 (1211 Byte(s)) End at: 20:19:49, 19/10/2011 ============== E.O.F ==============