UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15 (.NET CLR 3.5.30729)
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15 ( )
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15
:OTL
PRC - [2011-03-11 17:04:53 | 000,114,688 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Documents and Settings\sratatata\Ustawienia lokalne\temp\Ajk.exe
FF - prefs.js..browser.search.defaultenginename: "Web Search..."
FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0
[2010-11-29 21:14:25 | 000,000,000 | ---D | M] (vShare) -- C:\Documents and Settings\sratatata\Dane aplikacji\Mozilla\Firefox\Profiles\4wk65u6n.default\extensions\vshare@toolbar
[2010-11-29 21:14:33 | 000,001,583 | ---- | M] () -- C:\Documents and Settings\sratatata\Dane aplikacji\Mozilla\Firefox\Profiles\4wk65u6n.default\searchplugins\web-search.xml
O4 - HKU\.DEFAULT..\Run: [AROReminder] File not found
O4 - HKU\S-1-5-18..\Run: [AROReminder] File not found
:Files
C:\WINDOWS\tasks\*.job
C:\Documents and Settings\sratatata\Ustawienia lokalne\temp\Ajk.exe
:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Odkurzacz-MCD"=-
"RGSC"=-
:Commands
[clearallrestorepoints]
[emptytemp]
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15
:OTL
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No CLSID value found.
O3 - HKU\S-1-5-21-1993962763-583907252-682003330-1004\..\Toolbar\WebBrowser: (no name) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No CLSID value found.
[2011-03-12 19:18:28 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
:Reg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"Microsoft Windows Hosting Service Login"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{13F00518-807A-4B3A-83B0-A7CD90F3A398}"=-
Java(TM) 6 Update 20
Java 2 Runtime Environment, SE v1.4.0_03
Adobe Reader 9.4.1
Zarejestrowani użytkownicy: Brak zarejestrowanych użytkowników