======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Launched at 18:15:09 on 26/10/2011, Normal boot Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) WWW@OK ( ) ============== SEARCH ============== File found: C:\Documents and Settings\WWW\Dane aplikacji\Mozilla\FireFox\Profiles\l8pxaxsz.default\searchplugins\askcom.xml Folder found: C:\Documents and Settings\WWW\Ustawienia lokalne\Dane aplikacji\Conduit Folder found: C:\Documents and Settings\WWW\Dane aplikacji\OpenCandy Folder found: C:\Documents and Settings\WWW\Ustawienia lokalne\Dane aplikacji\OpenCandy Folder found: C:\Documents and Settings\WWW\Dane aplikacji\vShare Folder found: C:\Program Files\iMesh Applications Key found: HKLM\Software\Classes\CLSID\{28387537-e3f9-4ed7-860c-11e69af4a8a0} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{28387537-e3f9-4ed7-860c-11e69af4a8a0} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{28387537-e3f9-4ed7-860c-11e69af4a8a0} Key found: HKLM\Software\Classes\Interface\{115CCBAE-27B0-47C3-BA42-BAB708424393} Key found: HKLM\Software\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48} Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\Toolbar.CT1460988 Key found: HKLM\Software\Classes\Toolbar.CT1708250 Key found: HKLM\Software\Classes\Toolbar.CT2117678 Key found: HKLM\Software\Classes\Toolbar.CT2724386 Key found: HKLM\Software\Conduit Key found: HKCU\Software\DataMngr Key found: HKCU\Software\Toolbar Key found: HKCU\Software\vShare Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\iMesh Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{85F11B56-963C-4FAF-B8CD-EAE9590AAAE7} Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.6.21 (pl)] **** Plugins\npBitCometAgent.dll (BitComet) Plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.) HKLM_MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) HKLM_Extensions|{0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\SPFireFox (x) -- C:\Documents and Settings\WWW\Dane aplikacji\Mozilla\FireFox\Profiles\l8pxaxsz.default -- Extensions\staged-xpis (?) Extensions\{20a82645-c095-46ed-80e3-08825760534b}(2) (?) Searchplugins\askcom.xml (?) Prefs.js - browser.search.selectedEngine, Prefs.js - browser.startup.homepage, Prefs.js - browser.startup.homepage_override.mstone, false -- C:\Documents and Settings\ka$ka\Dane aplikacji\Mozilla\FireFox\Profiles\3d9hp5a1.default -- Extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} (Panda Security Toolbar) Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.1.8 -- C:\Documents and Settings\kasia\Dane aplikacji\Mozilla\FireFox\Profiles\8gny6day.default -- Extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} (Panda Security Toolbar) Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.1.5 ======================================== **** Internet Explorer Version [8.0.6001.18702] **** HKCU_Main|Default_Search_URL - hxxp://www.google.com/ie HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Start Page - hxxp://www.google.pl/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKCU_SearchScopes\{85F11B56-963C-4FAF-B8CD-EAE9590AAAE7} - "Ask Search" (hxxp://websearch.ask.com/redirect?client=ie&tb=DDR&o=16621&src=crm&q={searchTerm...) HKLM_Extensions\{5067A26B-1337-4436-8AFE-EE169C2DA79F} - "?" (?) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) BHO\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - "QuickStores-Toolbar" (mscoree.dll) (x) BHO\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - "Panda Security Toolbar" (C:\Program Files\Panda Security\Panda Security Toolbar\PandaSecurityDx.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 25/10/2011 16:46:10 (14909 Byte(s)) C:\Ad-Report-SCAN[2].txt - 26/10/2011 18:15:15 (3539 Byte(s)) End at: 18:15:41, 26/10/2011 ============== E.O.F ==============