======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 15:52:42 on 15/08/2011, Normal boot Microsoft Windows XP Professional Dodatek Service Pack 2 (X86) rychu_tas@RYCHU ( ) ============== ACTION(S) ============== File deleted: C:\Documents and Settings\rychu_tas\Dane aplikacji\Mozilla\FireFox\Profiles\yjqd8hu2.default\searchplugins\conduit.xml Folder deleted: C:\Documents and Settings\rychu_tas\Ustawienia lokalne\Dane aplikacji\Conduit Folder deleted: C:\Program Files\Conduit (!) -- Temporary files deleted. -- File opened: C:\Documents and Settings\rychu_tas\Dane aplikacji\Mozilla\FireFox\Profiles\yjqd8hu2.default\Prefs.js -- Line deleted: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&Sea... Line deleted: user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT2790392&SearchSource=13"); -- File closed -- Key deleted: HKLM\Software\Classes\Conduit.Engine Key deleted: HKLM\Software\Classes\Toolbar.CT2790392 Key deleted: HKLM\Software\Conduit Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.6.18 (pl)] **** Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) -- C:\Documents and Settings\rychu_tas\Dane aplikacji\Mozilla\FireFox\Profiles\yjqd8hu2.default -- Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\rychu_tas\\Moje dokumenty\\Płatność-Kaspersky.pl Prefs.js - browser.search.defaultenginename, hxxp://startsear.ch/?q= Prefs.js - browser.search.selectedEngine, Google Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.18 Prefs.js - keyword.URL, hxxp://startsear.ch/?q= ======================================== **** Internet Explorer Version [6.0.2900.2180] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKLM_SearchScopes\{1645A33F-0A96-4315-904E-29E188E7720E} - "Web Search" (hxxp://startsear.ch/?q={searchTerms}) BHO\{DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - "IplexToALLPlayer" (C:\PROGRA~1\ALLPLA~1\Iplex\IPLEXT~1.DLL) ======================================== C:\Program Files\Ad-Remover\Quarantine: 3 File(s) C:\Program Files\Ad-Remover\Backup: 13 File(s) C:\Ad-Report-CLEAN[1].txt - 15/08/2011 15:52:51 (3376 Byte(s)) End at: 15:53:23, 15/08/2011 ============== E.O.F ==============