
C:\Documents and Settings\All Users\Dane aplikacji\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe
C:\Documents and Settings\All Users\Dane aplikacji\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\3\plugin.exe
C:\Documents and Settings\All Users\Dane aplikacji\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\5\plugin.exe
C:\Documents and Settings\All Users\Dane aplikacji\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\3\333928ee-dbb9-4373-b9cd-a6fa5fc1d224.dll
C:\Documents and Settings\All Users\Dane aplikacji\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\2\plugin.exe
C:\Program Files\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe
C:\Documents and Settings\All Users\Dane aplikacji\0780f478-67ce-4ec3-98db-39a65f4618ce
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzutDtDtCyEzzyD0EtCtB0D0DtD0F0A0FyBtN0D0Tzu0CtAyCzytN1L2XzutBtFtBtFtCtFyEtDyB&cr=163308450
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "http://searchfunmoods.com/?f=2&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzutDtDtCyEzzyD0EtCtB0D0DtD0F0A0FyBtN0D0Tzu0CtAyCzytN1L2XzutBtFtBtFtCtFyEtDyB&cr=163308450" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzutDtDtCyEzzyD0EtCtB0D0DtD0F0A0FyBtN0D0Tzu0CtAyCzytN1L2XzutBtFtBtFtCtFyEtDyB&cr=163308450
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzutDtDtCyEzzyD0EtCtB0D0DtD0F0A0FyBtN0D0Tzu0CtAyCzytN1L2XzutBtFtBtFtCtFyEtDyB&cr=163308450
SearchScopes: HKU\S-1-5-21-1644491937-1303643608-1417001333-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzutDtDtCyEzzyD0EtCtB0D0DtD0F0A0FyBtN0D0Tzu0CtAyCzytN1L2XzutBtFtBtFtCtFyEtDyB&cr=163308450
SearchScopes: HKU\S-1-5-21-1644491937-1303643608-1417001333-1003 -> {B7B664DF-3AF9-4C8E-8148-F42BB7831D27} URL = http://www.ask.com/web?o=15710&l=dis&q={searchTerms}
BHO: Funmoods Helper Object -> {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} -> C:\Program Files\Funmoods\1.5.23.22\bh\escort.dll No File
BHO: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
C:\Program Files\Strong Signal
Toolbar: HKLM - Funmoods Toolbar - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - C:\Program Files\Funmoods\1.5.23.22\escorTlbr.dll No File
FF DefaultSearchEngine: Funmoods
FF SelectedSearchEngine: Funmoods
FF Homepage: hxxp://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzutDtDtCyEzzyD0EtCtB0D0DtD0F0A0FyBtN0D0Tzu0CtAyCzytN1L2XzutBtFtBtFtCtFyEtDyB&cr=163308450
FF SearchPlugin: C:\Documents and Settings\Właściciel\Dane aplikacji\Mozilla\Firefox\Profiles\y06pxlos.default\searchplugins\Funmoods.xml
CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\DOCUME~1\WACICI~1\USTAWI~1\DANEAP~1\funmoods.crx [2013-01-03]
CHR HKU\S-1-5-21-1644491937-1303643608-1417001333-1003\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\DOCUME~1\WACICI~1\USTAWI~1\DANEAP~1\funmoods.crx [2013-01-03]
R2 Service Mgr StrongSignal; C:\Documents and Settings\All Users\Dane aplikacji\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [577272 2015-02-14] ()
R2 Update Mgr StrongSignal; C:\Program Files\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [384760 2015-02-15] ()
C:\Program Files\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce
EmptyTemp:
HKU\S-1-5-21-1644491937-1303643608-1417001333-1003\...\CurrentVersion\Windows: [Load] D:\YDPDict\watch.exe <===== ATTENTION
DeleteQuarantine:
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 4 gości