SystemLook 30.07.11 by jpshortstuff
Log created at 20:14 on 23/01/2013 by szymon
Administrator - Elevation successful

========== regfind ==========

Searching for "certified"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="http://newtab.certified-toolbar.com/nie?si=41460&tid=3201&st=newtab"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si=41460&st=bs&tid=3201&q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.certified-toolbar.com?si=41460&st=bs&tid=3201&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="http://newtab.certified-toolbar.com/nie?si=41460&tid=3201&st=newtab"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page"="http://search.certified-toolbar.com?si=41460&st=home&tid=3201"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Default_Page_URL"="http://search.certified-toolbar.com?si=41460&st=home&tid=3201"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://search.certified-toolbar.com?si=41460&tid=3201&st=bs&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]
"Search Bar"="http://search.certified-toolbar.com?si=41460&tid=3201&st=bs&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]
"Search Page"="http://search.certified-toolbar.com?si=41460&tid=3201&st=bs&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]
"Start Page"="http://search.certified-toolbar.com?si=41460&st=home&tid=3201"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]
"Start Default_Page_URL"="http://search.certified-toolbar.com?si=41460&st=home&tid=3201"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://search.certified-toolbar.com?si=41460&tid=3201&st=bs&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]
"Search Bar"="http://search.certified-toolbar.com?si=41460&tid=3201&st=bs&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]
"Search Page"="http://search.certified-toolbar.com?si=41460&tid=3201&st=bs&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"URL"="http://search.certified-toolbar.com?si=41460&st=bs&tid=3201&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"TopResultURLFallback"="http://search.certified-toolbar.com?si=41460&st=bs&tid=3201&q={searchTerms}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si=41460&st=bs&tid=3201&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.certified-toolbar.com?si=41460&st=bs&tid=3201&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si=41460&st=bs&tid=3201&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.certified-toolbar.com?si=41460&st=bs&tid=3201&q=%s"
[HKEY_USERS\S-1-5-21-1720691108-1976613385-736957928-1000\Software\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="http://newtab.certified-toolbar.com/nie?si=41460&tid=3201&st=newtab"
[HKEY_USERS\S-1-5-21-1720691108-1976613385-736957928-1000\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si=41460&st=bs&tid=3201&q=%s"
[HKEY_USERS\S-1-5-21-1720691108-1976613385-736957928-1000\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.certified-toolbar.com?si=41460&st=bs&tid=3201&q=%s"

Searching for "protected search"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FFF935FD-2A8F-4B77-9282-53F91BBFAB98}]
"Path"="\ProtectedSearch\Protected Search"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ProtectedSearch\Protected Search]

========== folderfind ==========

Searching for "*certified*"
No folders found.

Searching for "protected search"
No folders found.

========== filefind ==========

Searching for "*certified*"
C:\Users\szymon\AppData\Roaming\Microsoft\Windows\Cookies\szymon@search.certified-toolbar[2].txt	--a---- 955 bytes	[23:11 22/01/2013]	[23:11 22/01/2013] F57533C228791F34AC0727B88C8ABE05

Searching for "protectedsearch*"
No files found.

Searching for "protected search*"
C:\Windows\System32\Tasks\ProtectedSearch\Protected Search	--a---- 3110 bytes	[12:43 19/01/2013]	[12:43 19/01/2013] 98BA660091049A2B88B8BBDD30119B88

-= EOF =-