UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.22) Gecko/20110902 Firefox/3.6.22
UA: Mozilla/5.0 (Windows NT 5.1; rv:6.0.2) Gecko/20100101 Firefox/6.0.2
:OTL
SRV - File not found [Auto | Stopped] -- -- (NMSAccessU)
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.defaultthis.engineName: "free-downloads.net Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "DAEMON Search"
FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=SP_ss&mntrId=e8cf7cbd00000000000000242be5c401&tlver=1.4.31.2&instlRef=sst&affID=100395&q="
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
[2011-09-13 10:29:14 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\s1cnuaau.default\extensions\[email protected]
[2010-01-20 12:16:28 | 000,000,939 | ---- | M] () -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\s1cnuaau.default\searchplugins\conduit.xml
[2011-09-13 10:19:27 | 000,002,055 | ---- | M] () -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\s1cnuaau.default\searchplugins\daemon-search.xml
[2011-08-07 16:50:09 | 000,002,288 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
[2011-09-14 23:31:42 | 000,000,228 | ---- | M] () -- C:\WINDOWS\tasks\Update23.job
[2011-09-12 07:48:46 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cc710fa3069a0e.job
@Alternate Data Stream - 193 bytesC:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2
@Alternate Data Stream - 142 bytesC:\Documents and Settings\All Users\Dane aplikacji\TEMP:E41EAF13
@Alternate Data Stream - 127 bytesC:\Documents and Settings\All Users\Dane aplikacji\TEMP:430C6D84
:Files
C:\Documents and Settings\All Users\Dane aplikacji\mC13602PdEhJ13602
C:\WINDOWS\PEV.exe
C:\WINDOWS\sed.exe
C:\WINDOWS\grep.exe
C:\WINDOWS\zip.exe
:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"DeviceDiscovery"=-
"HP Software Update"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\SopCast\adv\SopAdver.exe"=-
:Commands
[clearallrestorepoints]
[emptytemp]
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.22) Gecko/20110902 Firefox/3.6.22
UA: Mozilla/5.0 (Windows NT 5.1; rv:7.0) Gecko/20100101 Firefox/7.0
:OTL
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
SRV - File not found [Auto | Stopped] -- -- (lfzuic)
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.22) Gecko/20110902 Firefox/3.6.22
UA: Mozilla/5.0 (Windows NT 5.1; rv:7.0) Gecko/20100101 Firefox/7.0
:OTL
FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=SP_ss&mntrId=e8cf7cbd00000000000000242be5c401&tlver=1.4.31.2&instlRef=sst&affID=100395&q="
[2011-09-14 23:31:36 | 000,000,000 | ---D | C] -- C:\Program Files\e8cf7cf4
:Reg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\e8cf7cf4\jusched.exe"=-
Java(TM) 6 Update 18
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.22) Gecko/20110902 Firefox/3.6.22
UA: Mozilla/5.0 (Windows NT 5.1; rv:7.0) Gecko/20100101 Firefox/7.0
UA: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Zarejestrowani użytkownicy: Bing [Bot]