UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6
UA: Mozilla/5.0 (Windows; U; Windows NT 6.0; pl; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6 ( .NET CLR 3.5.30729)
:OTL
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\PsaSrv.exe -- (PsaSrv)
DRV - File not found [File_System | Boot | Stopped] -- C:\WINDOWS\System32\drivers\ANCSQ.sys -- (ANCSQ)
O3 - HKU\S-1-5-21-2498837018-385037497-3806172364-1006\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\sdra73.exe) - C:\WINDOWS\system32\sdra73.exe ()
:Files
C:\WINDOWS\system32\sdra73.exe
C:\Recycled
:Reg
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"UserInit"="C:\WINDOWS\system32\userinit.exe,"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"High Definition Audio Property Page Shortcut"=-
"ISUSPM Startup"=-
"ISUSScheduler"=-
:Commands
[clearallrestorepoints]
[emptytemp]
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6
UA: Mozilla/5.0 (Windows; U; Windows NT 6.0; pl; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6 ( .NET CLR 3.5.30729)
Nie bardzo wiem o ktory plik dokladnie chodzi bo otwiera mi sie strona glowna dlldump.com z tego linka.....???
:OTL
:Files
C:\WINDOWS\tasks\WebReg HP Photosmart C4500 series.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
:Commands
[reboot]
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6
UA: Mozilla/5.0 (Windows; U; Windows NT 6.0; pl; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6 ( .NET CLR 3.5.30729)
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6
Zarejestrowani użytkownicy: Bing [Bot]