11 Maj 2014, 12:12
11 Maj 2014, 12:52
11 Maj 2014, 17:47
11 Maj 2014, 19:09
00TCrdMain
PCSpeedUp
SmoothView
Teco
Toshiba Registration
TosNC
TosSENotify
Adobe ARM
Adobe Reader Speed Launcher
GrooveMonitor
NBAgent
NBKeyScan
PowerDVD12Agent
PowerDVD12DMREngine
TkBellExe
ToshibaServiceStation
WinampAgent
OpenOffice.org 3.0.lnk
Windows Login.lnk
Microsoft Windows
Internet Explorer
Microsoft Windows
Akamai NetSession Interface
IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
Zyfsfr
\Apple\AppleSoftwareUpdate
\ConfigFree Startup Programs
\fbagent
\MICHAŁ NBAgent
\Microsoft\Windows Defender\MP Scheduled Scan
\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
\Microsoft\Windows\NetTrace\GatherNetworkInfo
\Microsoft\Windows\Windows Media Sharing\UpdateLibrary
\RealUpgradeLogonTaskS-1-5-21-1836726967-685322442-2602980839-1000
\RealUpgradeScheduledTaskS-1-5-21-1836726967-685322442-2602980839-1000
\systems
\{03E2D29A-885E-49E6-B609-73DF8BB29F51}
\{0B22A498-2026-4156-B0C6-67D96B953C32}
\{5B2627E2-2014-4328-BFB6-A88F42D8086A}
\{5DC82B7D-1A7D-4AE8-9916-34C6CB1B4BF4}
\{7946FE63-1ADF-43E2-AFA0-3F25F5177001}
\{84FCF122-CEAA-42C8-9A47-B85E810D598A}
\{8F9F1B51-DA47-440C-A4F1-F2386964E7E8}
\{92EF646B-12A1-4C9A-9143-0F6F243FED9E}
\{9D955886-636B-4896-8C94-072CDE9EF9E1}
\{ABBC6730-5A22-4538-AEE7-9E36F9C2FAF6}
\{C900EC6D-F918-4974-B796-09A37F982502}
\{E37E6A59-A0B5-456F-9081-C2A9A7D04780}
\{EF55569C-255F-44D6-BACD-BB8190857AB7}
\{FCE096F8-97EB-4405-92EE-7C982B13FFFC}
Microsoft Office Groove Audit Service
Nero BackItUp Scheduler 3
Nero BackItUp Scheduler 4.0
NMIndexingService
odserv
ose
WinDefend
WMPNetworkSvc
:OTL
IE - HKLM\..\SearchScopes\{C04AF5CC-8B7C-42DB-90D5-28F5D9A44B01}: "URL" = http://startsear.ch/?aff=1&q={searchTerms}
IE - HKLM\..\SearchScopes\{F3316AD1-BACA-44D8-9879-4A458A250044}: "URL" = http://startsear.ch/?aff=1&q={searchTerms}
IE - HKU\S-1-5-21-1836726967-685322442-2602980839-1000\..\SearchScopes\{3AF99A49-A624-4199-8D14-6C00BA6B3081}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=100482&babsrc=SP_ss&mntrId=e28716b200000000000070f1a1b731a3
IE - HKU\S-1-5-21-1836726967-685322442-2602980839-1000\..\SearchScopes\{BDFBE908-6CEB-478B-AB99-ABD526760628}: "URL" = http://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp
IE - HKU\S-1-5-21-1836726967-685322442-2602980839-1000\..\SearchScopes\{C04AF5CC-8B7C-42DB-90D5-28F5D9A44B01}: "URL" = http://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp
IE - HKU\S-1-5-21-1836726967-685322442-2602980839-1000\..\SearchScopes\{C125094E-555E-4D48-99B8-9FEAA65B240B}: "URL" = http://rover.ebay.com/rover/1/4908-44618-9400-8/4?satitle={searchTerms}
IE - HKU\S-1-5-21-1836726967-685322442-2602980839-1000\..\SearchScopes\{FF840661-9EFC-4d98-BB05-2AA35FE6B7D6}: "URL" = http://home.speedbit.com/search.aspx?aff=106&q={searchTerms}
IE - HKU\S-1-5-21-1836726967-685322442-2602980839-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local>
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No CLSID value found.
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O20:64bit: - Winlogon\Notify\avldr: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
[2011-07-25 18:01:54 | 000,073,584 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\C16D.exe
[2011-07-25 08:09:24 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\2956.exe
[2011-07-25 08:09:24 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\28F8.exe
[2011-07-25 08:09:22 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\21B6.exe
[2011-07-25 08:09:22 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\213A.exe
[2011-07-25 08:05:52 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\EF8F.exe
[2011-07-25 08:05:50 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\E7E0.exe
[2011-07-25 08:05:07 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\3FEF.exe
[2011-07-25 08:05:05 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\3766.exe
[2011-07-25 08:04:08 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\57B2.exe
[2011-07-25 08:04:08 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\57B1.exe
[2011-07-25 08:04:05 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\4D74.exe
[2011-07-25 08:04:05 | 000,000,385 | ---- | C] () -- C:\Users\MICHAŁ\AppData\Roaming\4D73.exe
:Commands
[clearallrestorepoints]
[emptytemp]
11 Maj 2014, 20:58
11 Maj 2014, 21:21
11 Maj 2014, 22:36
11 Maj 2014, 22:44
11 Maj 2014, 22:51