======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 13:32:36 on 12/06/2011, Normal boot Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) Właściciel@W-SPQLTMSMAWDXN ( ) ============== ACTION(S) ============== Folder deleted: C:\Documents and Settings\Właściciel\Ustawienia lokalne\Dane aplikacji\Conduit Folder deleted: C:\Documents and Settings\Właściciel\Ustawienia lokalne\Dane aplikacji\Gameztar Toolbar Folder deleted: C:\Program Files\Seekdns (!) -- Temporary files deleted. Key deleted: HKLM\Software\Classes\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{100EB1FD-D03E-47FD-81F3-EE91287F9465} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{100EB1FD-D03E-47FD-81F3-EE91287F9465} Key deleted: HKLM\Software\Classes\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC} Key deleted: HKLM\Software\Classes\CLSID\{A16AD1E9-F69A-45AF-9462-B1C286708842} Key deleted: HKLM\Software\Classes\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} Key deleted: HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} Key deleted: HKLM\Software\Classes\CLSID\{C9CCBB35-D123-4A31-AFFC-9B2933132116} Key deleted: HKLM\Software\Classes\Interface\{3CEB04AB-08AF-45F4-81B4-70D13C1F7B85} Key deleted: HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB} Key deleted: HKLM\Software\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B} Key deleted: HKLM\Software\Classes\Interface\{A7213D71-47E1-4832-92D7-D61DFE9F231F} Key deleted: HKLM\Software\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0} Key deleted: HKLM\Software\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8} Key deleted: HKLM\Software\Classes\Interface\{CF82F350-E1C4-4916-AC12-BA73DB60AFB7} Key deleted: HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082} Key deleted: HKLM\Software\Classes\TypeLib\{03D7FF6E-9781-40B5-BB7F-94291A361604} Key deleted: HKLM\Software\Classes\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2} Key deleted: HKLM\Software\Classes\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF} Key deleted: HKLM\Software\Classes\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80} Key deleted: HKLM\Software\Classes\TypeLib\{F0CF944C-F160-4F65-8F0A-2773322FF357} Key deleted: HKLM\Software\Classes\Conduit.Engine Key deleted: HKLM\Software\Classes\ShoppingReport.HbAx Key deleted: HKLM\Software\Classes\ShoppingReport.HbAx.1 Key deleted: HKLM\Software\Classes\ShoppingReport.HbInfoBand Key deleted: HKLM\Software\Classes\ShoppingReport.HbInfoBand.1 Key deleted: HKLM\Software\Classes\ShoppingReport.IEButton Key deleted: HKLM\Software\Classes\ShoppingReport.IEButton.1 Key deleted: HKLM\Software\Classes\ShoppingReport.IEButtonA Key deleted: HKLM\Software\Classes\ShoppingReport.IEButtonA.1 Key deleted: HKLM\Software\Classes\ShoppingReport.RprtCtrl Key deleted: HKLM\Software\Classes\ShoppingReport.RprtCtrl.1 Key deleted: HKLM\Software\Classes\Srv.CoreServices Key deleted: HKLM\Software\Classes\Srv.CoreServices.1 Key deleted: HKLM\Software\Classes\Toolbar.CT2720081 Key deleted: HKLM\Software\Conduit Key deleted: HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\DataMngr Key deleted: HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\HotbarSA Key deleted: HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\WeatherDPA Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EDDBB5EE-BB64-4bfc-9DBE-E7C85941335B} Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{DA95E878-B181-4366-A433-6145592707A8} Key deleted: HKCU\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B2} Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B3} Value deleted: HKCU\Software\Microsoft\Internet Explorer\Extensions\CmdMapping|{c5428486-50a0-4a02-9d20-520b59a9f9b2} Value deleted: HKCU\Software\Microsoft\Internet Explorer\Extensions\CmdMapping|{c5428486-50a0-4a02-9d20-520b59a9f9b3} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.6.17 (pl)] **** Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) HKLM_Extensions|{23fcfd51-4958-4f00-80a3-ae97e717ed8b} - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video HKLM_Extensions|{6904342A-8307-11DF-A508-4AE2DFD72085} - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa -- C:\Documents and Settings\Właściciel\Dane aplikacji\Mozilla\FireFox\Profiles\z4csxbf3.default -- Prefs.js - browser.download.lastDir, E:\\Moje dokumenty\\OLA Prefs.js - browser.search.defaultenginename, Prefs.js - browser.search.defaulturl, Prefs.js - browser.search.selectedEngine, Prefs.js - browser.startup.homepage, Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.17 ======================================== **** Internet Explorer Version [8.0.6001.18702] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} - "Web Search" (hxxp://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms}) HKLM_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} - "Web Search" (hxxp://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms}) HKLM_ElevationPolicy\0d1964e4-f91f-4d3b-8700-8576bc041ce6 - C:\Program Files\Babylon-English\Babylon-EnglishToolbarHelper.exe (x) HKLM_ElevationPolicy\e9b9c387-2798-438b-9dd6-9ab9af787f77 - C:\Program Files\Babylon-English\Babylon-EnglishToolbarHelper.exe (x) HKLM_ElevationPolicy\{5F17E524-3447-4c7d-8E5F-4EFF31CDE3B7} - C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe (x) HKLM_ElevationPolicy\{64903E32-AE0B-408D-909C-09A08791F28D} - C:\Program Files\DivX\DivX Plus Web Player\dwpBroker.exe (DivX, LLC) HKLM_ElevationPolicy\{D802E3EF-2513-4661-972E-BAD737EFBA88} - C:\Program Files\DivX\DivX OVS Helper\OVSHelperBroker.exe (DivX, LLC.) HKLM_Extensions\AutorunsDisabled - "?" (?) HKLM_Extensions\{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - "Create Mobile Favorite" (C:\PROGRA~1\MI3AA1~1\INetRepl.dll,210) HKLM_Extensions\{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - "?" (?) HKLM_Extensions\{58ECB495-38F0-49cb-A538-10282ABF65E7} - "Kolekcja wycinków HP" (C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll,207) HKLM_Extensions\{700259D7-1666-479a-93B1-3250410481E8} - "Zaznaczanie HP Smart" (C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll,209) HKLM_Extensions\{CCA281CA-C863-46ef-9331-5C8D4460577F} - "@btrez.dll,-4015" (C:\Program Files\Billionton\Bluetooth Software\bt_cold_icon.ico) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) HKLM_Extensions\{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - "Translate this web page with Babylon" (C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll,202) BHO\{053F9267-DC04-4294-A72C-58F732D338C0} - "HP Print Clips" (C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "Adobe PDF Reader Link Helper" (C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll) BHO\{326E768D-4182-46FD-9C16-1449A49795F4} - "DivX Plus Web Player HTML5