======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 20:48:15 on 25/10/2011, Normal boot Microsoft® Windows Vista™ Home Premium (X86) Piotrek@PIOTREK-PC (FUJITSU SIEMENS AMILO Pa 2548) ============== SEARCH ============== Folder found: C:\Users\Piotrek\AppData\Roaming\Mozilla\FireFox\Profiles\opw87xpg.default\conduit Folder found: C:\Users\Piotrek\AppData\Roaming\Mozilla\FireFox\Profiles\opw87xpg.default\ConduitEngine Folder found: C:\Program Files\MyGlobalSearch -- File opened: C:\Users\Piotrek\AppData\Roaming\Mozilla\FireFox\Profiles\opw87xpg.default\Prefs.js -- Line found: user_pref("CT2786678.SavedHomepage", "hxxp://search.conduit.com/?ctid=&SearchSource=13"); Line found: user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278... Line found: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1061742/1057446/PL", "\"0\"... Line found: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/PL", "\"0\"... Line found: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/PL", "\"0\"")... Line found: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", ... Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo... Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc... Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo... Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local... Line found: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\... Line found: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3... Line found: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.... Line found: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678",... Line found: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63438026930213... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/20... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2786678&octid=... Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678... Line found: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"a3a... Line found: user_pref("CommunityToolbar.EngineOwner", "CT2786678"); Line found: user_pref("CommunityToolbar.EngineOwnerGuid", "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"); Line found: user_pref("CommunityToolbar.EngineOwnerToolbarId", "utorrentbar"); Line found: user_pref("CommunityToolbar.IsEngineShown", true); Line found: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Line found: user_pref("CommunityToolbar.OriginalEngineOwner", "CT2786678"); Line found: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"); Line found: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "utorrentbar"); Line found: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr... Line found: user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2786678"); Line found: user_pref("CommunityToolbar.ToolbarsList2", "ConduitEngine,CT2786678"); Line found: user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Thu Apr 14 2011 03:12:17 GMT+02... Line found: user_pref("CommunityToolbar.alert.alertInfoInterval", 60); Line found: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Oct 11 2011 20:53:53 GMT+0200"); Line found: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Line found: user_pref("CommunityToolbar.alert.firstTimeAlertShown", true); Line found: user_pref("CommunityToolbar.alert.locale", "en"); Line found: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Line found: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Oct 11 2011 20:53:44 GMT+0200"); Line found: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611"); Line found: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Line found: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Line found: user_pref("CommunityToolbar.alert.showTrayIcon", false); Line found: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Line found: user_pref("CommunityToolbar.alert.userId", "e0b79e47-ab8a-4e83-8a00-1148239fd361"); Line found: user_pref("CommunityToolbar.facebook.sessionKey", "2.AQCjOPedo77EwPDq.86400.1309255200.4-10000011110... Line found: user_pref("CommunityToolbar.facebook.sessionSecret", "__0a_YBgNw0k96UpozAu5Q__"); Line found: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Oct 11 2011 20:53:45 GMT+0200"); Line found: user_pref("CommunityToolbar.facebook.userId", "100000111102875"); Line found: user_pref("CommunityToolbar.globalUserId", "0f308c1c-a458-4047-8421-539874d7b3cf"); Line found: user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Line found: user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Line found: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2786678"); Line found: user_pref("ConduitEngine.AppTrackingLastCheckTime", "Wed Oct 05 2011 21:44:44 GMT+0200"); Line found: user_pref("ConduitEngine.BrowserCompStateIsOpen_3976808699496931956", true); Line found: user_pref("ConduitEngine.CTID", "ConduitEngine"); Line found: user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sun Oct 09 2011 20:23:20 GMT+0200"); Line found: user_pref("ConduitEngine.FirstServerDate", "01/17/2011 12"); Line found: user_pref("ConduitEngine.FirstTime", true); Line found: user_pref("ConduitEngine.FirstTimeFF3", true); Line found: user_pref("ConduitEngine.FixPageNotFoundErrors", false); Line found: user_pref("ConduitEngine.HasUserGlobalKeys", true); Line found: user_pref("ConduitEngine.HideEngineAfterRestart", false); Line found: user_pref("ConduitEngine.Initialize", true); Line found: user_pref("ConduitEngine.InitializeCommonPrefs", true); Line found: user_pref("ConduitEngine.InstallationType", "UnknownIntegration"); Line found: user_pref("ConduitEngine.InstalledDate", "Tue Jan 18 2011 10:55:42 GMT+0100"); Line found: user_pref("ConduitEngine.IsMulticommunity", false); Line found: user_pref("ConduitEngine.IsOpenThankYouPage", false); Line found: user_pref("ConduitEngine.IsOpenUninstallPage", false); Line found: user_pref("ConduitEngine.LanguagePackLastCheckTime", "Tue Oct 11 2011 20:55:09 GMT+0200"); Line found: user_pref("ConduitEngine.LastLogin_3.2.5.2", "Tue Apr 12 2011 20:57:16 GMT+0200"); Line found: user_pref("ConduitEngine.LastLogin_3.3.3.2", "Tue Oct 11 2011 20:54:16 GMT+0200"); Line found: user_pref("ConduitEngine.PublisherContainerWidth", 43); Line found: user_pref("ConduitEngine.SavedHomepage", "resource:/browserconfig.properties"); Line found: user_pref("ConduitEngine.SearchFromAddressBarIsInit", true); Line found: user_pref("ConduitEngine.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C... Line found: user_pref("ConduitEngine.SettingsLastCheckTime", "Tue Oct 11 2011 20:55:09 GMT+0200"); Line found: user_pref("ConduitEngine.UserID", "UN34919774772801093"); Line found: user_pref("ConduitEngine.counterAppsAdded", 1); Line found: user_pref("ConduitEngine.engineLocale", "pl"); Line found: user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Tue Oct 11 2011 20:56:09 GMT+0200"); Line found: user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Tue Oct 11 2011 20:54:25 GMT+0200"); Line found: user_pref("ConduitEngine.initDone", true); Line found: user_pref("ConduitEngine.isAppTrackingManagerOn", true); Line found: user_pref("ConduitEngine.usagesFlag", 2); -- File closed -- Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\Toolbar.CT2786678 Key found: HKLM\Software\Conduit Key found: HKLM\Software\MyGlobalSearch Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.5.16 (pl)] **** Plugins\npqtplugin.dll (Apple Computer, Inc.) Plugins\npqtplugin2.dll (Apple Computer, Inc.) Plugins\npqtplugin3.dll (Apple Computer, Inc.) Plugins\npqtplugin4.dll (Apple Computer, Inc.) Plugins\npqtplugin5.dll (Apple Computer, Inc.) Plugins\npqtplugin6.dll (Apple Computer, Inc.) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Components\aboutCertError.js Components\aboutPrivateBrowsing.js Components\aboutRights.js Components\aboutRobots.js Components\aboutSessionRestore.js Components\nsPostUpdateWin.js Extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} (Skype extension for Firefox ) -- C:\Users\Piotrek\AppData\Roaming\Mozilla\FireFox\Profiles\opw87xpg.default -- Prefs.js - browser.download.dir, C:\\Users\\Piotrek\\Desktop Prefs.js - browser.download.lastDir, C:\\Users\\Piotrek\\Downloads Prefs.js - browser.search.defaulturl, Prefs.js - browser.search.selectedEngine, Prefs.js - browser.startup.homepage, Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.1.16 ======================================== **** Internet Explorer Version [7.0.6000.16982] **** HKCU_Main|Default_Search_URL - hxxp://www.google.com/ie HKCU_Main|Search bar - hxxp://www.google.com/ie HKCU_Main|Search Page - hxxp://www.google.com HKCU_Main|Start Page - hxxp:// HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} - "Web Search" (hxxp://search.bearshare.com/webResults.html?src=ieb&q={searchTerms}) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - " " (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKLM_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - " " (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_ElevationPolicy\{ADE699D0-A3C7-43E2-9779-E8D9A18D6E9C} - C:\Program Files\Nero\Nero 7\Nero PhotoSnap\PhotoSnapViewer.exe (Nero AG) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 0 File(s) C:\Ad-Report-SCAN[1].txt - 25/10/2011 20:48:28 (12546 Byte(s)) End at: 20:49:06, 25/10/2011 ============== E.O.F ==============