
CHR Extension: (Strong Signal) - C:\Users\Janina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aamaaompokdjbebnfbcfobpkklfkmddp [2015-03-18]
Task: {0F5D743F-2D6D-4E3C-B96E-F1CE45A0AA8A} - \{A0E3145F-5F7C-446F-BDAA-2B3B7664E09E} No Task File <==== ATTENTION
C:\ProgramData\WindowsMangerProtect
C:\Program Files (x86)\XTab
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1426592068&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dspp&ts=1426592125&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&q={searchTerms}
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1426592068&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dspp&ts=1426592125&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&q={searchTerms}
HKU\S-1-5-21-2322281506-924598918-1386665992-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dspp&ts=1426592125&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&q={searchTerms}
HKU\S-1-5-21-2322281506-924598918-1386665992-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dspp&ts=1426592125&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_ca19b750-2310-4833-b5d6-f60098035262&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_ca19b750-2310-4833-b5d6-f60098035262&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1426592125&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1426592125&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2322281506-924598918-1386665992-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1426592125&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2322281506-924598918-1386665992-1000 -> OldSearch URL =
SearchScopes: HKU\S-1-5-21-2322281506-924598918-1386665992-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&ts=1426592148&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2322281506-924598918-1386665992-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&ts=1426592148&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2322281506-924598918-1386665992-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&ts=1426592148&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2322281506-924598918-1386665992-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1426592125&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2322281506-924598918-1386665992-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979&ts=1426592148&type=default&q={searchTerms}
BHO-x32: No Name -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> No File
BHO-x32: No Name -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://start.qone8.com/?type=sc&ts=1382798268&from=cor&uid=WDCXWD3200BEVT-80A0RT0_WD-WX11A504497944979
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\delta-homes.xml [2014-01-03]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\qone8.xml [2013-10-26]
CHR RestoreOnStartup: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-19__alt__ddc_dsssyc_bd_com"
CHR DefaultSearchKeyword: Default -> yahoo.com
CHR DefaultNewTabURL: Default -> http://search.yahoo.com/?fr=hp-ddc-bd-tab&type=bg_616_bl-is-19__alt__ddc_dsssyctab_bd_com
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Janina\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [Not Found]
OPR StartupUrls: "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-19__alt__ddc_dsssyc_bd_com"
OPR Extension: (Strong Signal) - C:\Users\Janina\AppData\Roaming\Opera Software\Opera Stable\Extensions\aamaaompokdjbebnfbcfobpkklfkmddp [2015-05-02]
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158816 2015-03-10] (XTab system)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-17] (SysTool PasSame LIMITED) <==== ATTENTION
S2 Update AdvanceElite; No ImagePath
R1 {bb7b7a60-f574-47c2-8a0b-4c56f2da9802}w64; C:\Windows\System32\drivers\{bb7b7a60-f574-47c2-8a0b-4c56f2da9802}w64.sys [48784 2014-09-30] (StdLib)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
C:\Windows\Minidump\*.dmp
EmptyTemp:
DeleteQuarantine:
W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 1 gość