25 Wrz 2013, 12:42
25 Wrz 2013, 13:02
25 Wrz 2013, 15:51
26 Wrz 2013, 11:09
rdpclip
IgfxTray
RtHDVBg
SynTPEnh
Adobe ARM
ASUSPRP
BCSSync
SunJavaUpdateSched
FancyStart daemon.lnk
Microsoft Windows
Internet Explorer
Microsoft Windows
wszystko
ose
osppsvc
WinDefend
WMPNetworkSvc
:OTL
IE - HKU\S-1-5-21-1964102767-2507556823-1910869434-1000\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.searchgol.com/?babsrc=HP_ss&mntrId=1EC2E2188581F933&affID=119357&tsp=5015
IE - HKU\S-1-5-21-1964102767-2507556823-1910869434-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchgol.com/?babsrc=HP_ss&mntrId=1EC2E2188581F933&affID=119357&tsp=5015
IE - HKU\S-1-5-21-1964102767-2507556823-1910869434-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - No CLSID value found
IE - HKU\S-1-5-21-1964102767-2507556823-1910869434-1000\..\URLSearchHook: {D8278076-BC68-4484-9233-6E7F1628B56C} - No CLSID value found
IE - HKU\S-1-5-21-1964102767-2507556823-1910869434-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=1EC2E2188581F933&affID=119357&tsp=5015
IE - HKU\S-1-5-21-1964102767-2507556823-1910869434-1000\..\SearchScopes\{E5DA8538-CDC4-436C-923E-16BC3CD43B6B}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=B8026074-53E5-4012-91C5-AE61B1C06919&apn_sauid=5B99DF1F-92B5-45E4-8C5A-9BA72E4D73D9
E - HKU\S-1-5-21-1964102767-2507556823-1910869434-1002\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www2.delta-search.com/?babsrc=HP_ss&mntrId=1EC2E2188581F933&affID=119357&tsp=5011
IE - HKU\S-1-5-21-1964102767-2507556823-1910869434-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?babsrc=HP_ss&mntrId=1EC2E2188581F933&affID=119357&tsp=5011
IE - HKU\S-1-5-21-1964102767-2507556823-1910869434-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F2 E7 19 56 31 B1 CE 01 [binary data]
IE - HKU\S-1-5-21-1964102767-2507556823-1910869434-1002\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=1EC2E2188581F933&affID=119357&tsp=5011
O4 - HKU\S-1-5-21-1964102767-2507556823-1910869434-1000..\Run: [EPSON13E4C1 (Epson Stylus SX420W)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Windows\TEMP\E_SBA7A.tmp" /EF "HKCU" File not found
O8:64bit: - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found
[2013-09-20 23:14:21 | 000,000,000 | ---D | C] -- C:\ProgramData\DSearchLink
[2013-09-20 23:14:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2013-09-20 23:14:04 | 000,000,000 | ---D | C] -- C:\Users\qwe\AppData\Roaming\Babylon
:Commands
[emptytemp]
26 Wrz 2013, 12:40
26 Wrz 2013, 15:05
26 Wrz 2013, 16:11
26 Wrz 2013, 21:43
27 Wrz 2013, 19:29
28 Wrz 2013, 10:25
Zapisane zakładki i hasła nie zostaną jednak usunięte ani zmienione.
28 Wrz 2013, 11:45
01 Paź 2013, 21:28
02 Paź 2013, 20:09
02 Paź 2013, 20:44
02 Paź 2013, 21:49