
:OTL
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0StByDtCtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1597354299
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0StByDtCtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1597354299
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0StByDtCtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1597354299
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0StByDtCtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1597354299
FF - prefs.js..browser.search.defaultenginename: "Search"
FF - prefs.js..browser.search.selectedEngine: "Search"
O4 - HKLM..\Run: [ROC_roc_ssl_v12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 File not found
O4 - HKLM..\Run: [TrayServer] C:\Program Files (x86)\MAGIX\Video_deluxe_MX_Download_Version\TrayServer_pl.exe File not found
O4 - HKCU..\Run: [cxbjblxw] C:\Users\ADA\AppData\Roaming\Yhlfzyybh\zywmzblxw.exe (Codejock Software)
O4 - HKCU..\Run: [KB00655434.exe] C:\Users\ADA\AppData\Roaming\KB00655434.exe ()
O4 - HKCU..\Run: [packvl] C:\Users\ADA\AppData\Roaming\packvl.exe ()
O4 - HKCU..\Run: [Yfazz] C:\Users\ADA\AppData\Roaming\Xyhau\obova.exe ()
[2013.03.08 13:59:02 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Qupy
[2013.03.08 13:59:02 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Lokana
[2013.03.08 13:59:02 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Foqybu
[2013.03.08 05:42:05 | 000,000,000 | -H-D | C] -- C:\Users\ADA\AppData\Roaming\6A47E20E
[2013.03.07 21:52:32 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Quve
[2013.03.07 21:52:32 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Ciruen
[2013.03.07 21:52:32 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Azxu
[2013.03.07 16:36:52 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Unabu
[2013.03.07 16:36:52 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Ucohe
[2013.03.07 16:36:52 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Icxogo
[2013.03.07 05:42:40 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Vimo
[2013.03.07 05:42:40 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Ivehha
[2013.03.07 05:42:40 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Ahdag
[2013.03.06 17:13:53 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Xyhau
[2013.03.06 17:13:53 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Ikeqyz
[2013.03.06 17:13:53 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Alwup
[2013.03.01 18:14:56 | 000,000,000 | ---D | C] -- C:\Users\ADA\AppData\Roaming\Yhlfzyybh
[1601.01.01 01:00:00 | 000,253,952 | ---- | C] () -- C:\Users\ADA\AppData\Roaming\packvl.exe
:Files
C:\Users\ADA\AppData\Roaming\*.exe
C:\Users\ADA\AppData\Roaming\Xyhau
:Commands
[emptytemp]
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 8 gości