
Oto logi, bardzo proszę o pomoc.
http://wklejto.pl/226949
http://wklejto.pl/226950
http://wklejto.pl/226951
C:\ProgramData\68f7eaff-0da4-47f4-8262-425ca2a087dd
C:\Program Files (x86)\Common Files\68f7eaff-0da4-47f4-8262-425ca2a087dd
C:\Program Files (x86)\XTab
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
HKU\S-1-5-21-2272141642-493560452-1084974370-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.uk.msn.com/HPALL13/175
URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1422732960&from=cor&uid=HitachiXHTS545050A7E380_TEJ51239H8HHNXH8HHNXX&q={searchTerms}
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1422732960&from=cor&uid=HitachiXHTS545050A7E380_TEJ51239H8HHNXH8HHNXX&q={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\S-1-5-21-2272141642-493560452-1084974370-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2272141642-493560452-1084974370-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2272141642-493560452-1084974370-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2272141642-493560452-1084974370-1001 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2272141642-493560452-1084974370-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1422732960&from=cor&uid=HitachiXHTS545050A7E380_TEJ51239H8HHNXH8HHNXX&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2272141642-493560452-1084974370-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2272141642-493560452-1084974370-1001 -> {DC53C5B4-C397-47A0-BB67-4AD8989DCAB2} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2272141642-493560452-1084974370-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
FF Extension: Web Protector - C:\Users\Marcin W\AppData\Roaming\Mozilla\Firefox\Profiles\krmunyqp.default\Extensions\{8a167a0d-2593-78be-dffa-baa301a8d989} [2015-05-12]
FF Extension: Crazy Score - C:\Users\Marcin W\AppData\Roaming\Mozilla\Firefox\Profiles\krmunyqp.default\Extensions\{59993c10-330a-47ed-916d-3a4ee4b9c6fe}.xpi [2015-05-12]
CHR StartupUrls: Default -> "hxxp://google.com/", "hxxp://isearch.omiga-plus.com/?type=hppp&ts=1422732960&from=cor&uid=HitachiXHTS545050A7E380_TEJ51239H8HHNXH8HHNXX"
CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
R2 Update Mgr CrazyScore; C:\Program Files (x86)\Common Files\68f7eaff-0da4-47f4-8262-425ca2a087dd\Updater.exe [478984 2015-05-12] ()
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [464384 2015-01-31] (SysTool PasSame LIMITED) [File not signed] <==== ATTENTION
C:\Users\Marcin W\Downloads\CCleaner(13061)-dp.exe
C:\ProgramData\WindowsMangerProtect
EmptyTemp:
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 11 gości