
http://www.wklej.eu/index.php?id=d1ecd83946
:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query="
FF - prefs.js..extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:4.2.0.2150
FF - prefs.js..extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.2.0.5360
FF - prefs.js..extensions.enabledItems: {E889F097-B0BE-471B-89AD-B86B6F04B506}:4.2.0.2050
FF - HKLM\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.2.0.2150\FF [2009-12-22 22:52:56 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF [2009-12-22 22:53:13 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF [2009-12-22 22:53:23 | 00,000,000 | ---D | M]
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No CLSID value found.
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\4.2.0.2150\WSO.dll ()
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKU\S-1-5-21-1227081403-1339744070-2804375956-1000\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKU\S-1-5-21-1227081403-1339744070-2804375956-1000\..\Toolbar\WebBrowser: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No CLSID value found.
O33 - MountPoints2\{0ca16b0c-6a2d-11dd-9e89-001b388e601a}\Shell - "" = AutoRun
O33 - MountPoints2\{573877d4-7f44-11dd-bb9b-001b388e601a}\Shell\AutoRun\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\sys32.exe -- File not found
O33 - MountPoints2\{573877d4-7f44-11dd-bb9b-001b388e601a}\Shell\open\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\sys32.exe -- File not found
O33 - MountPoints2\{630e3656-48ea-11de-ba80-001b388e601a}\Shell\Open\command - "" = "resycled\ntldr.c
O33 - MountPoints2\{79b93ce8-072d-11dd-be04-001b388e601a}\Shell\Auto\command - "" = UFO.exe
O33 - MountPoints2\F\Shell\AutoRun\command - "" = oufddh.exe
O33 - MountPoints2\F\Shell\explore\Command - "" = oufddh.exe
O33 - MountPoints2\F\Shell\open\Command - "" = oufddh.exe
:Files
C:\Program Files\Customized Platform Advancer
C:\Program Files\Automated Content Enhancer
C:\Program Files\Web Search Operator
C:\Windows\tasks\User_Feed_Synchronization-{DB032C09-9BC1-4DB6-9170-A9A5CC865D3A}.job
:Commands
[emptytemp]
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 9 gości