UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0
:OTL
IE - HKU\S-1-5-21-3723663294-3655808551-748276165-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com/?affID=119370&babsrc=HP_ss&mntrId=9c365737000000000000002522a78a1c
IE - HKU\S-1-5-21-3723663294-3655808551-748276165-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&affID=119370&babsrc=SP_ss&mntrId=9c365737000000000000002522a78a1c
IE - HKU\S-1-5-21-3723663294-3655808551-748276165-1000\..\SearchScopes\{2ABEAC39-FA51-4E12-B570-9CEA1216F33C}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=IMB&o=15785&src=kw&q={searchTerms}&locale=&apn_ptnrs=HQ&apn_dtid=YYYYYYYYPL&apn_uid=e6ee1a5a-7736-4b90-acf6-bbec94a40ea0&apn_sauid=82AF35A0-F2AE-4A67-9E0A-7855FF93EDBB
IE - HKU\S-1-5-21-3723663294-3655808551-748276165-1000\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/mb201/?search={searchTerms}&loc=IB_DS&a=6OyZtT8Uw3&i=26
FF - prefs.js..browser.search.selectedEngine: "Delta Search"
[2013-01-06 19:48:49 | 000,000,000 | ---D | M] (incredibar.com) -- C:\Users\Lupa Jan\AppData\Roaming\mozilla\Firefox\Profiles\jlkkekm6.default\extensions\[email protected]
[2012-11-02 16:16:39 | 000,002,323 | ---- | M] () -- C:\Users\Lupa Jan\AppData\Roaming\mozilla\firefox\profiles\jlkkekm6.default\searchplugins\askcom.xml
[2013-02-28 12:17:52 | 000,001,294 | ---- | M] () -- C:\Users\Lupa Jan\AppData\Roaming\mozilla\firefox\profiles\jlkkekm6.default\searchplugins\delta.xml
[2013-01-06 19:48:39 | 000,002,203 | ---- | M] () -- C:\Users\Lupa Jan\AppData\Roaming\mozilla\firefox\profiles\jlkkekm6.default\searchplugins\MyStart Search.xml
[2013-02-28 12:17:45 | 000,006,484 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
:Files
C:\Users\Lupa Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Continue otshot Installation.lnk
:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=-
"Adobe ARM"=-
"SunJavaUpdateSched"=-
:Commands
[emptytemp]
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0
Zarejestrowani użytkownicy: Bing [Bot], Google [Bot]