SystemLook 30.07.11 by jpshortstuff Log created at 20:14 on 24/01/2013 by Marcin Administrator - Elevation successful ========== regfind ========== Searching for "certified" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\AboutURLs] "Tabs"="http://newtab.certified-toolbar.com/nie?si=41460&tid=3206&new=true" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2373884761-3315178383-1634237956-1000\Software\Avast Software\WRC\RatingStorage\<|prefix|>http://search.certified-toolbar.com/?si=41460&shortcut=true&tid=3206] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2373884761-3315178383-1634237956-1000\Software\Avast Software\WRC\RatingStorage\search.certified-toolbar.com] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURI] "(Default)"="http://search.certified-toolbar.com?si=41460&bs=true&tid=3206&q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.certified-toolbar.com?si=41460&bs=true&tid=3206&q=%s" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="http://newtab.certified-toolbar.com/nie?si=41460&tid=3206&new=true" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main] "Start Page"="http://search.certified-toolbar.com?si=41460&home=true&tid=3206" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main] "Start Default_Page_URL"="http://search.certified-toolbar.com?si=41460&home=true&tid=3206" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://search.certified-toolbar.com?si=41460&tid=3206&bs=true&q=" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main] "Search Bar"="http://search.certified-toolbar.com?si=41460&tid=3206&bs=true&q=" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main] "Search Page"="http://search.certified-toolbar.com?si=41460&tid=3206&bs=true&q=" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search] "Start Page"="http://search.certified-toolbar.com?si=41460&home=true&tid=3206" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search] "Start Default_Page_URL"="http://search.certified-toolbar.com?si=41460&home=true&tid=3206" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search] "Default_Search_URL"="http://search.certified-toolbar.com?si=41460&tid=3206&bs=true&q=" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search] "Search Bar"="http://search.certified-toolbar.com?si=41460&tid=3206&bs=true&q=" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search] "Search Page"="http://search.certified-toolbar.com?si=41460&tid=3206&bs=true&q=" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "URL"="http://search.certified-toolbar.com?si=41460&bs=true&tid=3206&q={searchTerms}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "TopResultURLFallback"="http://search.certified-toolbar.com?si=41460&bs=true&tid=3206&q={searchTerms}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI] "(Default)"="http://search.certified-toolbar.com?si=41460&bs=true&tid=3206&q=%s" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.certified-toolbar.com?si=41460&bs=true&tid=3206&q=%s" [HKEY_LOCAL_MACHINE\SOFTWARE\Synaptics\SynTPCpl] "CertifiedS"="0x78413b10" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchURI] "(Default)"="http://search.certified-toolbar.com?si=41460&bs=true&tid=3206&q=%s" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.certified-toolbar.com?si=41460&bs=true&tid=3206&q=%s" [HKEY_USERS\S-1-5-21-2373884761-3315178383-1634237956-1000\Software\Microsoft\Internet Explorer\AboutURLs] "Tabs"="http://newtab.certified-toolbar.com/nie?si=41460&tid=3206&new=true" [HKEY_USERS\S-1-5-21-2373884761-3315178383-1634237956-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2373884761-3315178383-1634237956-1000\Software\Avast Software\WRC\RatingStorage\<|prefix|>http://search.certified-toolbar.com/?si=41460&shortcut=true&tid=3206] [HKEY_USERS\S-1-5-21-2373884761-3315178383-1634237956-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2373884761-3315178383-1634237956-1000\Software\Avast Software\WRC\RatingStorage\search.certified-toolbar.com] [HKEY_USERS\S-1-5-21-2373884761-3315178383-1634237956-1000\Software\Microsoft\Internet Explorer\SearchURI] "(Default)"="http://search.certified-toolbar.com?si=41460&bs=true&tid=3206&q=%s" [HKEY_USERS\S-1-5-21-2373884761-3315178383-1634237956-1000\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.certified-toolbar.com?si=41460&bs=true&tid=3206&q=%s" Searching for "protected search" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{9CDF003F-0080-4F64-AD5E-27425808C743}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\Protected Search\ProtectedSearch.exe|Name=Protected Search|" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{5E99098D-DBE4-4171-AAFD-CA476D214F40}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|App=C:\Program Files (x86)\Protected Search\ProtectedSearch.exe|Name=Protected Search|" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{9CDF003F-0080-4F64-AD5E-27425808C743}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\Protected Search\ProtectedSearch.exe|Name=Protected Search|" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{5E99098D-DBE4-4171-AAFD-CA476D214F40}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|App=C:\Program Files (x86)\Protected Search\ProtectedSearch.exe|Name=Protected Search|" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{9CDF003F-0080-4F64-AD5E-27425808C743}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\Protected Search\ProtectedSearch.exe|Name=Protected Search|" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{5E99098D-DBE4-4171-AAFD-CA476D214F40}"="v2.10|Action=Allow|Active=TRUE|Dir=Out|App=C:\Program Files (x86)\Protected Search\ProtectedSearch.exe|Name=Protected Search|" ========== folderfind ========== Searching for "*certified*" No folders found. Searching for "protected search" No folders found. ========== filefind ========== Searching for "*certified*" No files found. Searching for "protectedsearch*" No files found. Searching for "protected search**" No files found. -= EOF =-