UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
:OTL
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.v9.com/?utm_source=b&utm_medium=bnd&from=bnd&uid=WDCXWD5000AAKX-603CA0_WD-WMAYUV19429294292&ts=1377122108
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://en.v9.com/?utm_source=b&utm_medium=bnd&from=bnd&uid=WDCXWD5000AAKX-603CA0_WD-WMAYUV19429294292&ts=1377122108
O9 - Extra Button: Visit AppsHat.com - {AAA38851-3CFF-475F-B5E0-720D3645E4A5} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=CMDTDF
IE:64bit: - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.v9.com/web/?utm_source=b&utm_medium=bnd&from=bnd&uid=WDCXWD5000AAKX-603CA0_WD-WMAYUV19429294292&ts=1377122108
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.v9.com/?utm_source=b&utm_medium=bnd&from=bnd&uid=WDCXWD5000AAKX-603CA0_WD-WMAYUV19429294292&ts=1377122108
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.searchere.info/?pid=512&r=2013/10/09&hid=994568015908319420&lg=EN&cc=PL&unqvl=37
IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=CMDTDF
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.v9.com/web/?utm_source=b&utm_medium=bnd&from=bnd&uid=WDCXWD5000AAKX-603CA0_WD-WMAYUV19429294292&ts=1377122108
IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.searchere.info/?l=1&q={searchTerms}&pid=512&r=2013/10/09&hid=994568015908319420&lg=EN&cc=PL&unqvl=37
IE - HKU\S-1-5-21-1625950827-689938314-3330909850-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.v9.com/?utm_source=b&utm_medium=bnd&from=bnd&uid=WDCXWD5000AAKX-603CA0_WD-WMAYUV19429294292&ts=1377122108
IE - HKU\S-1-5-21-1625950827-689938314-3330909850-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com/?babsrc=HP_ss&mntrId=E48900A0C6000000&affID=125266&tsp=5031
IE - HKU\S-1-5-21-1625950827-689938314-3330909850-1000\..\URLSearchHook: {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
IE - HKU\S-1-5-21-1625950827-689938314-3330909850-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=E48900A0C6000000&affID=125266&tsp=5031
IE - HKU\S-1-5-21-1625950827-689938314-3330909850-1000\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=CMDTDF
IE - HKU\S-1-5-21-1625950827-689938314-3330909850-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.v9.com/web/?utm_source=b&utm_medium=bnd&from=bnd&uid=WDCXWD5000AAKX-603CA0_WD-WMAYUV19429294292&ts=1377122108
IE - HKU\S-1-5-21-1625950827-689938314-3330909850-1000\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.searchere.info/?l=1&q={searchTerms}&pid=512&r=2013/10/09&hid=994568015908319420&lg=EN&cc=PL&unqvl=37
FF - prefs.js..browser.search.defaulturl: "http://websearch.searchere.info/?pid=512&r=2013/10/09&hid=994568015908319420&lg=EN&cc=PL&unqvl=37&l=1&q="
FF - HKLM\Software\MozillaPlugins\@tools.bdupdater.com/BonanzaDealsLive Update;version=3: C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.bdupdater.com/BonanzaDealsLive Update;version=9: C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll File not found
[2013-08-21 23:55:08 | 000,000,733 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\v9.xml
O2 - BHO: (MinibarBHO) - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
O4 - HKLM..\Run: [Windows Live Messenger] C:\Users\Użytkownik\Desktop\Legend Online Facebook Cheats.exe (Zarius Judea)
O4 - HKU\S-1-5-21-1625950827-689938314-3330909850-1000..\Run: [Windows Live Messenger] C:\Users\Użytkownik\Desktop\Legend Online Facebook Cheats.exe (Zarius Judea)
[2013-10-10 18:57:39 | 000,000,000 | ---D | C] -- C:\Users\Użytkownik\AppData\Local\WebPlayer
[2013-10-10 18:57:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Minibar
[2013-10-10 18:57:34 | 000,000,000 | ---D | C] -- C:\Users\Użytkownik\AppData\Local\Minibar
[2013-10-10 18:57:19 | 000,000,000 | ---D | C] -- C:\Users\Użytkownik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
[2013-10-10 18:57:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SmartTweak
[2013-10-10 17:54:40 | 000,000,000 | ---D | C] -- C:\ProgramData\DSearchLink
[2013-10-10 17:54:32 | 000,000,000 | ---D | C] -- C:\Users\Użytkownik\AppData\Local\Lollipop
[2013-10-11 04:39:01 | 000,000,306 | ---- | M] () -- C:\Windows\tasks\Dealply.job
[2013-10-10 09:38:07 | 000,000,352 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForUżytkownik.job
[2013-08-18 00:39:30 | 000,000,000 | ---D | M] -- C:\Users\Użytkownik\AppData\Roaming\Babylon
[2013-08-18 00:39:37 | 000,000,000 | ---D | M] -- C:\Users\Użytkownik\AppData\Roaming\Dealply
:Commands
[clearallrestorepoints]
[emptytemp]
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
[2013-10-11 08:44:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3
[2013-10-11 08:44:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cheat Engine 6.3
[2013-10-11 08:43:15 | 008,065,840 | ---- | C] (Cheat Engine ) -- C:\Users\Użytkownik\Desktop\CheatEngine63.exe
[2013-10-11 08:26:14 | 002,027,520 | ---- | C] (Hewlett-Packard) -- C:\Users\Użytkownik\Desktop\Legent Online Hack Generator (H.v.e Hacker Team).exe
:OTL
SRV - [2013-10-03 22:45:40 | 000,065,312 | ---- | M] (lucky leap) [Auto | Running] -- C:\Program Files (x86)\lucky leap\updateluckyleap.exe -- (Update lucky leap)
O2 - BHO: (lucky leap) - {d77aa852-def3-43cb-a3f5-bd679de72f32} - C:\Program Files (x86)\lucky leap\luckyleapBHO.dll (luckyleap)
O4 - HKLM..\Run: [Windows Live Messenger] C:\Users\Użytkownik\Desktop\Legend Online Facebook Cheats.exe (Zarius Judea)
O4 - HKU\S-1-5-21-1625950827-689938314-3330909850-1000..\Run: [Windows Live Messenger] C:\Users\Użytkownik\Desktop\Legend Online Facebook Cheats.exe (Zarius Judea)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
SRV - [2013-09-20 00:45:18 | 000,038,440 | ---- | M] (Just Develop It) [Auto | Running] -- C:\Program Files (x86)\MyPC Backup\BackupStack.exe -- (BackupStack)
[2013-10-11 10:11:46 | 000,000,000 | ---D | C] -- C:\Users\Użytkownik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
[2013-10-11 10:11:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPC Backup
[2013-10-11 10:11:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\lucky leap
[2013-10-11 08:44:32 | 000,000,000 | ---D | C] -- C:\Users\Użytkownik\Documents\My Cheat Tables
[2013-10-11 08:44:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3
[2013-10-11 08:44:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cheat Engine 6.3
[2013-10-11 08:43:15 | 008,065,840 | ---- | C] (Cheat Engine ) -- C:\Users\Użytkownik\Desktop\CheatEngine63.exe
[2013-10-11 08:26:14 | 002,027,520 | ---- | C] (Hewlett-Packard) -- C:\Users\Użytkownik\Desktop\Legent Online Hack Generator (H.v.e Hacker Team).exe
[2013-10-10 15:12:52 | 001,363,395 | ---- | C] (Zarius Judea) -- C:\Users\Użytkownik\Desktop\Legend Online Facebook Cheats.exe
[2013-10-09 13:02:26 | 000,000,000 | ---D | C] -- C:\ProgramData\SearchNewTab
[2013-10-09 13:01:58 | 000,000,000 | ---D | C] -- C:\ProgramData\SummerSoft
[2013-10-09 13:00:59 | 000,000,000 | ---D | C] -- C:\ProgramData\DOwnload kEeapEr
[2013-10-09 13:00:31 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallMate
[2013-09-11 22:35:56 | 000,000,000 | ---D | C] -- C:\Users\Użytkownik\AppData\Local\BonanzaDealsLive
[2013-09-11 22:35:56 | 000,000,000 | ---D | C] -- C:\ProgramData\BonanzaDealsLive
:Files
C:\Users\Użytkownik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
C:\Program Files (x86)\MyPC Backup
:Commands
[reboot]
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3
[2013-10-11 08:26:14 | 002,027,520 | ---- | C] (Hewlett-Packard) -- C:\Users\Użytkownik\Desktop\Legent Online Hack Generator (H.v.e Hacker Team).exe
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
Files to delete:
C:\Users\Użytkownik\Desktop\Legend Online Facebook Cheats.exe
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
DeleteFile:
C:\Users\Użytkownik\Desktop\Legend Online Facebook Cheats.exe
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
Zarejestrowani użytkownicy: Bing [Bot]