http://wklej.org/id/13321/ combofix
http://wklej.org/id/13323/ hijack
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17

UA: Opera/9.61 (Windows NT 5.1; U; pl) Presto/2.1.1
Driver::
appdrvrem01
Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a4c6383a-34df-11da-8105-0016e6360c6a}]
zapisz jako
CFScript.txt.

UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17

UA: Opera/9.61 (Windows NT 5.1; U; pl) Presto/2.1.1
Driver::
appdrvrem01
zapisz jako
CFScript.txt.

UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17

UA: Opera/9.61 (Windows NT 5.1; U; pl) Presto/2.1.1
Drivers to delete:
appdrvrem01

UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17

UA: Opera/9.61 (Windows NT 5.1; U; pl) Presto/2.1.1

Zarejestrowani użytkownicy: Bing [Bot]