UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.15) Gecko/20110303 BTRS28059 Firefox/3.6.15 (.NET CLR 3.5.30729)
UA: Mozilla/5.0 (Windows NT 5.1; rv:2.0) Gecko/20100101 Firefox/4.0
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.15) Gecko/20110303 BTRS28059 Firefox/3.6.15 (.NET CLR 3.5.30729)
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15
:OTL
IE - HKU\S-1-5-21-839522115-1645522239-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://vshare.toolbarhome.com/?hp=df
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=SPC2&o=15000&locale=en_US&apn_uid=D19AAEB5-969F-46EF-B75D-44C5EBCF656F&apn_ptnrs=PV&apn_sauid=A105E4E9-AB79-4843-AF12-591C042C3839&apn_dtid=&q="
[2011-02-28 18:17:37 | 000,000,000 | ---D | M] (Sopcast Ask Toolbar) -- C:\Documents and Settings\Maj\Dane aplikacji\Mozilla\Firefox\Profiles\3psl7zvo.default\extensions\[email protected]
[2011-02-06 17:38:29 | 000,000,000 | ---D | M] (vShare) -- C:\Documents and Settings\Maj\Dane aplikacji\Mozilla\Firefox\Profiles\3psl7zvo.default\extensions\vshare@toolbar
[2011-03-13 14:15:30 | 000,002,558 | ---- | M] () -- C:\Documents and Settings\Maj\Dane aplikacji\Mozilla\Firefox\Profiles\3psl7zvo.default\searchplugins\askcom.xml
[2011-02-16 21:21:40 | 000,001,583 | ---- | M] () -- C:\Documents and Settings\Maj\Dane aplikacji\Mozilla\Firefox\Profiles\3psl7zvo.default\searchplugins\web-search.xml
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - File not found
O4 - HKLM..\Run: [GEST] File not found
[2011-03-18 23:01:00 | 000,000,230 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Alcmtr"=-
"GrooveMonitor"=-
"NeroFilterCheck"=-
"NokiaMServer"=-
:Commands
[emptytemp]
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.15) Gecko/20110303 BTRS28059 Firefox/3.6.15 (.NET CLR 3.5.30729)
UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15
Zarejestrowani użytkownicy: Bing [Bot], Google [Bot]