
:OTL
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://searchfunmoods.com/?f=1&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1Qzu0CzztD0A0AzytC0D0AyDtCtAzy0E0CtDtN0D0Tzu0StByByEtN1L2XzutBtFtBtFtDtFtAyEyE&cr=1299440606
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1Qzu0CzztD0A0AzytC0D0AyDtCtAzy0E0CtDtN0D0Tzu0StByByEtN1L2XzutBtFtBtFtDtFtAyEyE&cr=1299440606
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=idg&from=idg&uid=WDC_WD6400BEVT-60A0RT0_WD-WXH1A10A6461A6461&ts=1351177624
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?utm_source=b&utm_medium=idg&from=idg&uid=WDC_WD6400BEVT-60A0RT0_WD-WXH1A10A6461A6461&ts=1351177624
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1Qzu0CzztD0A0AzytC0D0AyDtCtAzy0E0CtDtN0D0Tzu0StByByEtN1L2XzutBtFtBtFtDtFtAyEyE&cr=1299440606
IE - HKU\S-1-5-21-4243294440-1559839883-1297428141-1000\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://search.babylon.com/?affID=110823&tt=120912_ccp_3812_5&babsrc=HP_ss&mntrId=5a399ec0000000000000c417feb8e787
IE - HKU\S-1-5-21-4243294440-1559839883-1297428141-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=idg&from=idg&uid=WDC_WD6400BEVT-60A0RT0_WD-WXH1A10A6461A6461&ts=1351177624
IE - HKU\S-1-5-21-4243294440-1559839883-1297428141-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com/?affID=119654&tt=120912_ccp_3812_5&babsrc=HP_ss&mntrId=5a399ec0000000000000c417feb8e787
IE - HKU\S-1-5-21-4243294440-1559839883-1297428141-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.v9.com/web/?q={searchTerms}
IE - HKU\S-1-5-21-4243294440-1559839883-1297428141-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&affID=119654&tt=120912_ccp_3812_5&babsrc=SP_ss&mntrId=5a399ec0000000000000c417feb8e787
IE - HKU\S-1-5-21-4243294440-1559839883-1297428141-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.v9.com/web/?q={searchTerms}
IE - HKU\S-1-5-21-4243294440-1559839883-1297428141-1000\..\SearchScopes\{3873B114-E471-B888-E767-175790926FB2}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110823&tt=120912_ccp_3812_5&babsrc=SP_ss&mntrId=5a399ec0000000000000c417feb8e787
IE - HKU\S-1-5-21-4243294440-1559839883-1297428141-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={8207BE3B-F896-4987-8BA5-220D2AD2ADCA}&mid=571b32d83c4d47d0ae5dd16e557bca6e-32f98217f475d0c089313dc313197d190bfe6b6f&lang=pl&ds=xn011&pr=sa&d=2012-09-29 15:10:30&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms}
FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"
FF - prefs.js..browser.search.order.1: "v9"
FF - prefs.js..browser.search.selectedEngine: "Delta Search"
FF - prefs.js..browser.startup.homepage: "http://www.delta-search.com/?affID=119654&tt=120912_ccp_3812_5&babsrc=HP_ss&mntrId=5a399ec0000000000000c417feb8e787"
FF - prefs.js..extensions.enabledAddons: ffxtlbr@funmoods.com:1.5.1
FF - prefs.js..extensions.enabledAddons: ffxtlbr@babylon.com:1.5.0
FF - prefs.js..keyword.URL: "http://isearch.avg.com/search?cid={8207BE3B-F896-4987-8BA5-220D2AD2ADCA}&mid=571b32d83c4d47d0ae5dd16e557bca6e-32f98217f475d0c089313dc313197d190bfe6b6f&lang=pl&ds=xn011&pr=sa&d=2012-09-29 15:10:30&pid=avg&sg=&v=14.0.2.14&sap=ku&q="
[2013-03-08 20:40:07 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\ka42aubi.default\extensions\ffxtlbr@babylon.com
[2013-03-08 20:40:11 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\ka42aubi.default\extensions\ffxtlbr@delta.com
[2012-10-07 16:23:33 | 000,000,000 | ---D | M] (Funmoods.com) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\ka42aubi.default\extensions\ffxtlbr@funmoods.com
[2012-09-18 19:52:06 | 000,002,223 | ---- | M] () -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\ka42aubi.default\searchplugins\BabylonMngr.xml
[2013-03-08 20:40:27 | 000,001,294 | ---- | M] () -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\ka42aubi.default\searchplugins\delta.xml
[2012-10-07 16:23:46 | 000,002,349 | ---- | M] () -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\ka42aubi.default\searchplugins\Funmoods.xml
[2013-02-18 19:07:51 | 000,003,716 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
[2013-03-08 20:39:56 | 000,006,531 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012-10-25 16:07:06 | 000,000,402 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\v9.xml
O2 - BHO: (no name) - {2EECD738-5844-4a99-B4B6-146BF802613B} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: &Download All using 4shared Desktop - res://d:\gry\4shared Desktop\Desktop.32/D_ALL_LINK File not found
O8:64bit: - Extra context menu item: &Download using 4shared Desktop - res://d:\gry\4shared Desktop\Desktop.32/D_ONE_LINK File not found
O8 - Extra context menu item: &Download All using 4shared Desktop - res://d:\gry\4shared Desktop\Desktop.32/D_ALL_LINK File not found
O8 - Extra context menu item: &Download using 4shared Desktop - res://d:\gry\4shared Desktop\Desktop.32/D_ONE_LINK File not found
[2013-02-26 15:23:04 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\TuneUp Software
[2013-02-26 15:22:54 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2013-02-26 15:22:45 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2013-02-26 15:22:14 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\OpenCandy
[2013-03-13 12:49:29 | 000,000,446 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for User.job
[2012-10-01 15:18:00 | 000,290,500 | ---- | C] () -- C:\Users\User\AppData\Local\funmoods-speeddial_sf.crx
[2012-10-01 15:17:57 | 000,031,465 | ---- | C] () -- C:\Users\User\AppData\Local\funmoods.crx
[2012-09-14 15:41:44 | 000,000,017 | ---- | C] () -- C:\Users\User\AppData\Local\resmon.resmoncfg
:Commands
[emptytemp]
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 7 gości