

Frst http://www.wklej.org/hash/44eaa1fe6e1/
Addition http://www.wklej.org/id/1658836/
Shortcut http://www.wklej.org/id/1658846/




2015-03-09 17:17 - 2015-03-09 17:05 - 03389035 _____ () C:\Users\Rafał\Downloads\eMule0.50a-Installer(dobreprogramy.pl).exe
2015-03-09 17:02 - 2015-03-09 17:02 - 00713072 _____ (Soft Application ) C:\Users\Rafał\Downloads\eMule(12597)-dp.exe
FF Extension: Strong Signal - C:\Users\Rafał\AppData\Roaming\Mozilla\Firefox\Profiles\2fheknn9.default\Extensions\{02df6ed9-d89d-425c-afc3-3a79ad6ce5ef}.xpi [2015-03-09]
BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
C:\Program Files (x86)\Strong Signal
FF Extension: Strong Signal - C:\Users\Rafał\AppData\Roaming\Mozilla\Firefox\Profiles\2fheknn9.default\Extensions\{02df6ed9-d89d-425c-afc3-3a79ad6ce5ef}.xpi [2015-03-09]
HKU\S-1-5-21-3387505698-228690016-2366761355-1001\Software\Classes\.exe: exefile => <===== ATTENTION!
HKU\S-1-5-21-3387505698-228690016-2366761355-1001\Software\Classes\exefile: <===== ATTENTION!
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [NWEReboot] => [X]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3387505698-228690016-2366761355-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
Task: {83FBD379-BB69-4808-9D0D-576737BD1398} - System32\Tasks\{D50067E4-161F-463B-BF0A-37E598C239A7} => pcalua.exe -a C:\Users\Rafał\AppData\Roaming\sweet-page\UninstallManager.exe -c -ptid=cor
C:\Users\Rafał\AppData\Roaming\sweet-page
Task: {EFFFAF72-7196-413B-807B-0AC3EBB10D97} - System32\Tasks\{68D98BCE-20A3-485A-AE42-FA3570122659} => pcalua.exe -a C:\Users\Rafał\AppData\Roaming\omiga-plus\UninstallManager.exe -c -ptid=cor <==== ATTENTION
C:\Users\Rafał\AppData\Roaming\omiga-plus
SearchScopes: HKU\S-1-5-21-3387505698-228690016-2366761355-1001 -> {FAAD287F-114E-4A32-BE58-5DF26763F9EE} URL =
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKU\S-1-5-21-3387505698-228690016-2366761355-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]
C:\Users\Rafał\Downloads\eMule0.50a-Installer(dobreprogramy.pl).exe
C:\Users\Rafał\Downloads\eMule(12597)-dp.exe
EmptyTemp:
DeleteQuarantine:
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 5 gości