01 Maj 2016, 16:50
01 Maj 2016, 17:08
01 Maj 2016, 18:15
02 Maj 2016, 22:37
Task: {371409FD-A033-42AB-B445-62F0ECB06763} - System32\Tasks\SPDriver => C:\Program Files\ShopperPro\JSDriver\1498.0.0.0\jsdrv.exe <==== UWAGA
C:\Program Files\ShopperPro
Task: {4A94C67F-832D-4127-9855-9A9BC38FDA9F} - System32\Tasks\ShopperPro => C:\Program Files\ShopperPro\ShopperPro.exe <==== UWAGA
Task: {6496B115-C2CD-42E5-A6D0-6BD9FFA6CC6C} - System32\Tasks\21994d18-6b6d-4e0d-b9b9-2223bdfb1cd1-4 => C:\Program Files\iWebar\21994d18-6b6d-4e0d-b9b9-2223bdfb1cd1-4.exe <==== UWAGA
C:\Program Files\iWebar
Task: {95412440-04B5-4126-A653-479C4BBB30AF} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exe <==== UWAGA
C:\Program Files\Desk 365
Task: {A03921F9-F9D2-48F9-B8C0-4BBA7A9F4F88} - System32\Tasks\21994d18-6b6d-4e0d-b9b9-2223bdfb1cd1-1-6 => C:\Program Files\iWebar\21994d18-6b6d-4e0d-b9b9-2223bdfb1cd1-1-6.exe <==== UWAGA
Task: {C38742CA-544B-421E-8AAC-68A7A0590688} - \winter_web_notification_service -> Brak pliku <==== UWAGA
Task: {F1B031ED-7EA0-487C-8963-E5800BC2ED8A} - System32\Tasks\DealPly => C:\Users\Ilonka\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== UWAGA
C:\Users\Ilonka\AppData\Roaming\DealPly
Task: {F400FC69-5FA7-4EEC-B717-2137603E82AB} - System32\Tasks\ShopperProJSUpd => C:\Program Files\ShopperPro\updater.exe <==== UWAGA
Task: {F94023E0-ABFF-4BE8-9850-E0B7639C8306} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== UWAGA
Task: {FDD7A594-7C9B-441A-9015-29216237B337} - System32\Tasks\IlonkaPinewoodsShanteyV2 => Rundll32.exe AhemsMisogynist.dll,main 7 1 <==== UWAGA
C:\Program Files\globalUpdate
Task: C:\Windows\Tasks\21994d18-6b6d-4e0d-b9b9-2223bdfb1cd1-1-6.job => C:\Program Files\iWebar\21994d18-6b6d-4e0d-b9b9-2223bdfb1cd1-1-6.exe <==== UWAGA
Task: C:\Windows\Tasks\21994d18-6b6d-4e0d-b9b9-2223bdfb1cd1-4.job => C:\Program Files\iWebar\21994d18-6b6d-4e0d-b9b9-2223bdfb1cd1-4.exe <==== UWAGA
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== UWAGA
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== UWAGA
Task: C:\Windows\Tasks\winter_web_notification_service.job => C:\Program Files\winter web\winter_web_notification_service.exeǦ/url='hxxp:/cdn.selectbestopt.com/notf_sys/index.html' /crregname='winter web' /appid='73143' /srcid='2913' /bic='b55a17e6e1963dd7772464322e1cd743' /verifier='d4ab505921ebe68a7853516a819198c3' /installerversion='1.50.3.10' /statsdomain='hxxp:/stats.buildomserv.com/data.gif?' /errorsdomain='hxxp:/stats.buildomserv.com/data.gif?' /monetizationdomain='hxxp:/logs.buildomserv.com/monetization.gif <==== UWAGA
C:\Program Files\winter web
HKU\S-1-5-21-2301326025-596198138-968852398-1000\...\Run: [] => [X]
HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKU\S-1-5-21-2301326025-596198138-968852398-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation)
HKU\S-1-5-21-2301326025-596198138-968852398-1000\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [451872 2007-07-18] (Hewlett-Packard Company)
HKU\S-1-5-21-2301326025-596198138-968852398-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-06-01] (Nero AG)
HKU\S-1-5-21-2301326025-596198138-968852398-1000\...\Run: [Dropbox Update] => C:\Users\Ilonka\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-17] (Dropbox, Inc.)
HKU\S-1-5-21-2301326025-596198138-968852398-1000\...\Run: [ALLUpdate] => C:\Program Files\ALLPlayer\ALLUpdate.exe [3670472 2015-07-28] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-2301326025-596198138-968852398-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)
HKU\S-1-5-21-2301326025-596198138-968852398-1000\...\RunOnce: [ALLPlayer Remote Update] => C:\Users\Ilonka\AppData\Local\Temp\ALLRemote.exe [2152872 2016-05-01] (ALLPlayer ) <===== UWAGA
C:\Users\Ilonka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
HKU\S-1-5-21-2301326025-596198138-968852398-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=PL&userid=17bacfad-4657-4362-a091-1f40f7ed94ec&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
HKU\S-1-5-21-2301326025-596198138-968852398-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=PL&userid=17bacfad-4657-4362-a091-1f40f7ed94ec&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKLM -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=PL&userid=17bacfad-4657-4362-a091-1f40f7ed94ec&affid=113129&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2301326025-596198138-968852398-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=PL&userid=17bacfad-4657-4362-a091-1f40f7ed94ec&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2301326025-596198138-968852398-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=122254&tt=gc_&babsrc=SP_ss&mntrId=54D6001D7DA2D1D4
Toolbar: HKU\S-1-5-21-2301326025-596198138-968852398-1000 -> Brak nazwy - {D4027C7F-154A-4066-A1AD-4243D8127440} - Brak pliku
FF NewTab: about:newtab
FF SearchPlugin: C:\Users\Ilonka\AppData\Roaming\Mozilla\Firefox\Profiles\lsn16tp2.default-1361125663562\searchplugins\askcom.xml [2013-02-08]
FF SearchPlugin: C:\Users\Ilonka\AppData\Roaming\Mozilla\Firefox\Profiles\lsn16tp2.default-1361125663562\searchplugins\askcomsearch.xml
FF SearchPlugin: C:\Users\Ilonka\AppData\Roaming\Mozilla\Firefox\Profiles\lsn16tp2.default-1361125663562\searchplugins\babylon.xml [2013-05-30]
FF SearchPlugin: C:\Users\Ilonka\AppData\Roaming\Mozilla\Firefox\Profiles\lsn16tp2.default-1361125663562\searchplugins\BrowserProtect.xml [2013-05-30]
FF SearchPlugin: C:\Users\Ilonka\AppData\Roaming\Mozilla\Firefox\Profiles\lsn16tp2.default-1361125663562\searchplugins\delta.xml [2013-05-30]
FF SearchPlugin: C:\Users\Ilonka\AppData\Roaming\Mozilla\Firefox\Profiles\lsn16tp2.default-1361125663562\searchplugins\istartsurf.xml [2015-12-16]
FF SearchPlugin: C:\Users\Ilonka\AppData\Roaming\Mozilla\Firefox\Profiles\lsn16tp2.default-1361125663562\searchplugins\mystartsearch.xml [2015-10-24]
FF Extension: 360 Internet Protection - C:\Program Files\360\Total Security\safemon\webprotection_firefox [2016-03-10]
FF Extension: Default SearchProtected - C:\Users\Ilonka\AppData\Roaming\Mozilla\Firefox\Profiles\lsn16tp2.default-1361125663562\Extensions\[email protected] [2015-10-24] [Brak podpisu cyfrowego]
FF Extension: httpnowherecwilpergithubcom - C:\Users\Ilonka\AppData\Roaming\Mozilla\Firefox\Profiles\lsn16tp2.default-1361125663562\Extensions\[email protected] [2015-02-15] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Mozilla Firefox\extensions\[email protected] => nie znaleziono
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Users\Ilonka\AppData\Roaming\Mozilla\Firefox\Profiles\lsn16tp2.default-1361125663562\extensions\[email protected] => nie znaleziono
FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => nie znaleziono
CHR HomePage: Default -> gazeta.allplayer.org/
CHR StartupUrls: Default -> "hxxp://facebook.pl/","hxxp://google.pl/","hxxp://www.mystartsearch.com/?type=hp&ts=1435780152&z=9fc4a1254954802df9daa7ag5z3c7w1m0b2efg9w7e&from=cornl&uid=WDCXWD3200AAJS-00B4A0_WD-WMAT1018028880288","hxxp://www.istartsurf.com/?type=hp&ts=1447051654&z=0fcf402ea367999ad7316adg4zbz8mae0weg5c3wft&from=cornl&uid=WDCXWD3200AAJS-00B4A0_WD-WMAT1018028880288"
CHR Plugin: (registryAccess) - C:\Users\Ilonka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo\7.15.15.37265_0\background/registryAccess.dll => Brak pliku
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll => Brak pliku
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\system32\npDeployJava1.dll => Brak pliku
CHR Plugin: (iTunes Application Detector) - D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll => Brak pliku
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll => Brak pliku
S2 UxTuneUp; %SystemRoot%\System32\uxtuneup.dll [X]
S3 WsDrvInst; C:\Program Files\Wondershare\Dr.Fone for Android\DriverInstall.exe [X]
S3 netr73; system32\DRIVERS\netr73.sys [X]
S1 qknfd; system32\drivers\qknfd.sys [X]
S3 XDva405; \??\C:\Windows\system32\XDva405.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
S2 SPDRIVER_1498.0.0.0; \??\C:\Program Files\ShopperPro\JSDriver\1498.0.0.0\jsdrv.sys [X]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S2 UxTuneUp; %SystemRoot%\System32\uxtuneup.dll [X]
S3 WsDrvInst; C:\Program Files\Wondershare\Dr.Fone for Android\DriverInstall.exe [X]
EmptyTemp: