
To samo mam z TS3, Xfire,
OTL http://wklej.org/id/521835/
Extras http://wklej.org/id/521834/
:OTL
IE - HKU\S-1-5-21-1375203052-2010973673-3624461392-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2304157
IE - HKU\S-1-5-21-1375203052-2010973673-3624461392-1000\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - Reg Error: Key error. File not found
FF - prefs.js..browser.search.defaultthis.engineName: "XfireXO Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2304157&SearchSource=3&q={searchTerms}"
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2304157&q="
[2011-04-23 17:26:54 | 000,000,000 | ---D | M] (XfireXO Community Toolbar) -- C:\Users\Lukasz\AppData\Roaming\mozilla\Firefox\Profiles\jyykn3wp.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
[2011-04-23 17:26:54 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Lukasz\AppData\Roaming\mozilla\Firefox\Profiles\jyykn3wp.default\extensions\engine@conduit.com
[2011-04-06 11:00:00 | 000,000,917 | ---- | M] () -- C:\Users\Lukasz\AppData\Roaming\Mozilla\Firefox\Profiles\jyykn3wp.default\searchplugins\conduit.xml
[2010-07-07 07:48:10 | 000,002,059 | ---- | M] () -- C:\Users\Lukasz\AppData\Roaming\Mozilla\Firefox\Profiles\jyykn3wp.default\searchplugins\daemon-search.xml
File not found (No name found) --
O3 - HKU\S-1-5-21-1375203052-2010973673-3624461392-1000\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O33 - MountPoints2\G\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\Autorun.exe
:Files
C:\Users\Lukasz\AppData\Local\Temp*.html
:Commands
[emptytemp]
[emptyflash]
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 14 gości