======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 21:29:21 on 08/02/2012, Normal boot Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) Właściciel@PRIV-0597A0BCD6 ( ) ============== SEARCH ============== File found: C:\Program Files\Mozilla FireFox\Components\AskSearch.js Folder found: C:\Documents and Settings\Właściciel\Ustawienia lokalne\Dane aplikacji\OpenCandy Key found: HKLM\Software\Classes\Toolbar.CT2481033 Key found: HKLM\Software\Conduit Key found: HKCU\Software\Conduit Key found: HKCU\Software\PriceGong Key found: HKCU\Software\AppDataLow\Software\Conduit Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} ============== ADDITIONNAL SCAN ============== **** Google Chrome Version [12.0.742.91] **** Extension\jinihaffgdhejchgkogpfkdmpldnmnji (C:\DOCUME~1\WACICI~1\USTAWI~1\Temp\ccex.crx) (x) -- C:\Documents and Settings\Właściciel\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Enabled: true) (?) Preferences - homepage: hxxp://www.onet.pl/ Preferences - homepage_is_newtabpage: false Plugin - RealJukebox NS Plugin (Enabled: true) (C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll) Plugin - "Fun Web Products Plugin Stub" (Enabled: true) Plugin - "Picasa" (Enabled: true) Plugin - "RealJukebox NS Plugin" (Enabled: true) Preferences - urls_to_restore_on_startup: hxxp://search.conduit.com/?ctid=CT2481033&SearchSource=48 ======================================== **** Internet Explorer Version [8.0.6001.18702] **** HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_SearchScopes\Gazeta - "Gazeta" (hxxp://szukaj.gazeta.pl/internet/0,0.html?p=125&slowo={searchTerms}) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Ashampoo PO Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKLM_SearchScopes\Gazeta - "Gazeta" (hxxp://szukaj.gazeta.pl/internet/0,0.html?p=125&slowo={searchTerms}) HKCU_Extensions\{491A6C2B-1046-486b-8A8F-7D26BCB79A9B} - "Atomic Email Hunter" (C:\Program Files\AtomPark\Atomic Email Hunter\AtomicEmailHunter.ico) HKLM_Extensions\{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - "Create Mobile Favorite" (C:\PROGRA~1\MI3AA1~1\INetRepl.dll,210) HKLM_Extensions\{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - "?" (?) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) BHO\{DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - "IplexToALLPlayer" (C:\PROGRA~1\ALLPLA~1\Iplex\IPLEXT~1.DLL) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 08/02/2012 21:29:47 (923 Byte(s)) End at: 21:30:23, 08/02/2012 ============== E.O.F ==============