06 Wrz 2011, 19:44
10 Wrz 2011, 20:35
10 Wrz 2011, 20:48
:Processes
killallprocesses
:OTL
IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-836742906-157368657-1576765218-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www1.euro.dell.com/content/defau ... l=pl&s=pad
IE - HKU\S-1-5-21-836742906-157368657-1576765218-1001\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [2370209.exe] File not found
O4 - HKLM..\Run: [5567082.exe] File not found
O4 - HKLM..\Run: [572055.exe] File not found
O4 - HKLM..\Run: [8668555.exe] File not found
O4 - HKLM..\Run: [9814449.exe] File not found
O4 - HKLM..\Run: [avgnt] File not found
O4 - HKLM..\Run: [Dell Registration] File not found
O4 - HKLM..\Run: [l1rezerv.exe] File not found
O4 - HKLM..\Run: [sysdriver32.exe] File not found
O4 - HKLM..\Run: [sysdriver32_.exe] File not found
O4 - HKLM..\Run: [tray_ico] File not found
O4 - HKLM..\Run: [tray_ico0] File not found
O4 - HKLM..\Run: [tray_ico1] File not found
O4 - HKLM..\Run: [tray_ico2] File not found
O4 - HKLM..\Run: [tray_ico3] File not found
O4 - HKLM..\Run: [tray_ico4] File not found
O4 - HKLM..\Run: [wxpdrv] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
O31 - SafeBoot: AlternateShell - services32.exe
[2011-09-10 20:25:00 | 000,001,038 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2011-09-10 20:14:07 | 000,001,042 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2011-09-10 10:35:49 | 000,000,006 | -H-- | M] () -- C:\windows\tasks\SA.DAT
:Files
C:\windows\ufa
C:\windows\rpcminer
C:\windows\phoenix
C:\windows\update.5.0
C:\windows\update.2
C:\windows\av_ico
C:\windows\update.1
C:\windows\update.tray-9-0-lnk
C:\windows\update.tray-9-0
C:\windows\update.tray-8-0-lnk
C:\windows\update.tray-8-0
C:\windows\ufa.rar
C:\windows\phoenix.rar
C:\windows\rpcminer.rar
C:\windows\unrar.exe
C:\windows\geoiplist
C:\windows\geoiplist.rar
C:\windows\info1
C:\windows\loader2.exe_ok
:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"WinampAgent"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot]
"AlternateShell"="cmd.exe"
:Commands
[resethosts]
[clearallrestorepoints]
[emptytemp]
10 Wrz 2011, 21:07
10 Wrz 2011, 21:43
:OTL
O2 - BHO: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found.
O3 - HKU\S-1-5-21-836742906-157368657-1576765218-1001\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.
[2011-09-10 21:01:56 | 000,000,006 | -H-- | M] () -- C:\windows\tasks\SA.DAT
:Files
C:\ProgramData\ArcaBit
:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RoxWatchTray"=-
[HKEY_USERS\S-1-5-21-836742906-157368657-1576765218-1001\Software\Microsoft\Windows\CurrentVersion\Run]
"IPLA!"=-
:Commands
[clearallrestorepoints]
[emptytemp]
11 Wrz 2011, 11:49
11 Wrz 2011, 12:07
11 Wrz 2011, 12:35