UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.134 Safari/537.36
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0
C:\Windows\Tasks\Norton Security Scan for oem.job
HKLM-x32\...\Run: [] => [X]
CHR Extension: (Marc Ecko) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\opjonmehjfmkejjifhhknofdnacklmjk [2015-07-13]
OPR Extension: (Sale Clipper) - C:\Users\oem\AppData\Roaming\Opera Software\Opera Stable\Extensions\miincmhponinjhaaagepklkeadfamabi [2015-07-07]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
EmptyTemp:
UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.134 Safari/537.36
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0
UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.134 Safari/537.36
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0
2015-07-12 15:39 - 2015-07-12 15:43 - 00000000 ____D C:\AdwCleaner
DeleteQuarantine:
UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.134 Safari/537.36
Zarejestrowani użytkownicy: Bing [Bot], Majestic-12 [Bot]