======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 =======

Updated by TeamXscript on 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
website: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 17:44:40 on 02/12/2011, Normal boot

Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) 
Cichy@CICHY-B1AFECBEC ( ) 
 
============== SEARCH ==============


Folder found: C:\Documents and Settings\Cichy\Ustawienia lokalne\Dane aplikacji\Conduit
Folder found: C:\Program Files\Conduit
Folder found: C:\Documents and Settings\Cichy\Dane aplikacji\OpenCandy
Folder found: C:\Documents and Settings\Cichy\Ustawienia lokalne\Dane aplikacji\OpenCandy

Key found: HKLM\Software\Classes\Toolbar.CT2786678
Key found: HKLM\Software\Conduit
Key found: HKCU\Software\Conduit
Key found: HKCU\Software\AppDataLow\Software\Conduit
Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}


============== ADDITIONNAL SCAN ==============

**** Google Chrome Version [15.0.874.121] ****

Extension\bejbohlohkkgompgecdcbbglkpjfjgdj (C:\DOCUME~1\Cichy\USTAWI~1\Temp\crx385.tmp) (x)
Extension\icmlaeflemplmjndnaapfdbbnpncnbda (C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx) (?)

-- C:\Documents and Settings\Cichy\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default --
Preferences - homepage: hxxp://search.conduit.com/?SearchSource=10&ctid=CT2786678
Preferences - homepage_is_newtabpage: false
Plugin - Remoting Viewer (Enabled: true) (internal-remoting-viewer) (x)
Plugin - Native Client (Enabled: true) (C:\Documents and Settings\Cichy\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\15.0.874.121\ppGoogleNaClPluginChrome.dll)
Plugin - Facebook Video Calling Plugin (Enabled: true) (C:\Documents and Settings\Cichy\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll)
Plugin - "Silverlight" (Enabled: true)
Plugin - "Remoting Viewer" (Enabled: true)
Plugin - "Native Client" (Enabled: true)
Plugin - "McAfee SiteAdvisor" (Enabled: true)
Plugin - "Facebook Video Calling Plugin" (Enabled: true)

========================================

**** Internet Explorer Version [8.0.6001.18702] ****

HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Start Page - hxxp://search.conduit.com?SearchSource=10&ctid=CT2786678
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157
HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "  " (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...)
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
HKCU_ElevationPolicy\{1024F1BE-76DC-40d5-AB98-664A4185E5FA} - C:\Documents and Settings\Cichy\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\FacebookVideoCalling.exe (Skype Limited)
HKLM_ElevationPolicy\{1024F1BE-76DC-40d5-AB98-664A4185E5FA} - C:\Documents and Settings\Cichy\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\FacebookVideoCalling.exe (Skype Limited)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 File(s)
C:\Program Files\Ad-Remover\Backup: 0 File(s)

C:\Ad-Report-SCAN[1].txt - 02/12/2011 17:44:56 (1008 Byte(s)) 

End at: 17:45:27, 02/12/2011 
 
============== E.O.F ==============