25 Wrz 2014, 17:32
25 Wrz 2014, 18:32
Kolega mi proponował bym użył programu ComboFix
:OTL
O2 - BHO: (no name) - {11111111-1111-1111-1111-110611191113} - No CLSID value found.
O2 - BHO: (no name) - {11111111-1111-1111-1111-110611191115} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
[2014-09-21 17:48:03 | 000,000,000 | ---D | C] -- C:\ProgramData\2308189059
[2014-09-21 17:44:56 | 000,000,000 | ---D | C] -- C:\Users\eubeut\Documents\Optimizer Pro
[2014-09-21 17:39:39 | 000,000,000 | ---D | C] -- C:\Users\eubeut\AppData\Local\Programs
[2014-09-21 17:31:47 | 000,000,000 | ---D | C] -- C:\Users\eubeut\AppData\Local\globalUpdate
[2014-09-21 17:31:47 | 000,000,000 | ---D | C] -- C:\Program Files\globalUpdate
[2014-09-25 16:55:21 | 000,003,788 | ---- | M] () -- C:\Windows\tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-6.job
[2014-09-25 16:55:21 | 000,003,788 | ---- | M] () -- C:\Windows\tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-6.job
[2014-09-25 16:43:48 | 000,003,108 | ---- | M] () -- C:\Windows\tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-3.job
[2014-09-25 16:43:44 | 000,002,764 | ---- | M] () -- C:\Windows\tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-5_user.job
[2014-09-25 16:43:44 | 000,002,764 | ---- | M] () -- C:\Windows\tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-5.job
[2014-09-25 16:43:43 | 000,002,764 | ---- | M] () -- C:\Windows\tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-5_user.job
[2014-09-25 16:43:43 | 000,002,764 | ---- | M] () -- C:\Windows\tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-5.job
[2014-09-25 16:43:41 | 000,004,814 | ---- | M] () -- C:\Windows\tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-11.job
[2014-09-25 16:43:41 | 000,003,788 | ---- | M] () -- C:\Windows\tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-4.job
[2014-09-25 16:43:39 | 000,004,470 | ---- | M] () -- C:\Windows\tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-11.job
[2014-09-25 16:43:39 | 000,004,132 | ---- | M] () -- C:\Windows\tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-4.job
[2014-09-25 16:43:38 | 000,003,074 | ---- | M] () -- C:\Windows\tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-1.job
[2014-09-25 16:43:38 | 000,002,420 | ---- | M] () -- C:\Windows\tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-2.job
[2014-09-25 16:43:37 | 000,003,788 | ---- | M] () -- C:\Windows\tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-7.job
[2014-09-25 16:43:37 | 000,003,788 | ---- | M] () -- C:\Windows\tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-7.job
[2014-09-25 16:43:37 | 000,002,420 | ---- | M] () -- C:\Windows\tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-2.job
[2014-09-25 16:43:35 | 000,003,074 | ---- | M] () -- C:\Windows\tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-1.job
:Files
C:\Program Files\iWebar
C:\Program Files\Senses
:Commands
[emptytemp]
25 Wrz 2014, 19:02
25 Wrz 2014, 19:11
C:\ProgramData\SetStretch.exe
C:\ProgramData\SetStretch.VBS
Task: {1B49EB28-0EAE-4FF7-8D59-314EF7C542B6} - System32\Tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-6 => C:\Program Files\Senses\aee97a0a-353f-42d2-824a-122e8b891cd7-6.exe <==== ATTENTION
Task: {34AB3721-4118-47BE-A036-1547B9FDA7F2} - System32\Tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-1 => C:\Program Files\Senses\Senses-codedownloader.exe <==== ATTENTION
Task: {45019F7B-F3CD-45BB-AB2C-B68A4AD9161B} - System32\Tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-4 => C:\Program Files\iWebar\33bafe8c-34dc-4f97-ba3a-3aece9895873-4.exe <==== ATTENTION
Task: {481538EE-E9E6-4DBD-BF22-66F25B161756} - System32\Tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-7 => C:\Program Files\Senses\aee97a0a-353f-42d2-824a-122e8b891cd7-7.exe <==== ATTENTION
Task: {487DA438-E47A-4EC4-97A2-43C21BFE2873} - System32\Tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-11 => C:\Program Files\iWebar\33bafe8c-34dc-4f97-ba3a-3aece9895873-11.exe <==== ATTENTION
Task: {4FB55820-E670-457D-8929-C301E83F234E} - System32\Tasks\Installer_shopperpro => C:\Users\eubeut\AppData\Local\Installer\Installshopperpro_5096\delay.exe [2014-09-21] () <==== ATTENTION
Task: {676A416C-9046-4C89-B47F-88F6FFC1A2D4} - System32\Tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-7 => C:\Program Files\iWebar\33bafe8c-34dc-4f97-ba3a-3aece9895873-7.exe <==== ATTENTION
Task: {692224EA-91B3-418A-A58D-99D11C5DB19C} - System32\Tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-2 => C:\Program Files\iWebar\33bafe8c-34dc-4f97-ba3a-3aece9895873-2.exe <==== ATTENTION
Task: {6C32E6D7-659B-4FBB-9834-1DC30AB2C687} - System32\Tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-6 => C:\Program Files\iWebar\33bafe8c-34dc-4f97-ba3a-3aece9895873-6.exe <==== ATTENTION
Task: {AB63BB0E-3AA9-4B74-B461-0B9EE5DC3F21} - System32\Tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-2 => C:\Program Files\Senses\aee97a0a-353f-42d2-824a-122e8b891cd7-2.exe <==== ATTENTION
Task: {A3608F72-8DF8-43DD-B1AB-7F1F4D5F202A} - System32\Tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-5 => C:\Program Files\Senses\aee97a0a-353f-42d2-824a-122e8b891cd7-5.exe <==== ATTENTION
Task: {B859C9AC-16A4-497A-8502-1760CB5F2E71} - System32\Tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-5_user => C:\Program Files\Senses\aee97a0a-353f-42d2-824a-122e8b891cd7-5.exe <==== ATTENTION
Task: {BA648A2F-337D-48E8-80F3-A595932435F4} - System32\Tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-11 => C:\Program Files\Senses\aee97a0a-353f-42d2-824a-122e8b891cd7-11.exe <==== ATTENTION
Task: {C33D6377-B09C-486D-A4C4-0913C7DF278C} - System32\Tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-5_user => C:\Program Files\iWebar\33bafe8c-34dc-4f97-ba3a-3aece9895873-5.exe <==== ATTENTION
Task: {C704A101-2D23-4D3A-8986-CF35345C5771} - System32\Tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-5 => C:\Program Files\iWebar\33bafe8c-34dc-4f97-ba3a-3aece9895873-5.exe <==== ATTENTION
Task: {CE348C50-66AA-46C8-9431-7E7070C8236C} - System32\Tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-4 => C:\Program Files\Senses\aee97a0a-353f-42d2-824a-122e8b891cd7-4.exe <==== ATTENTION
Task: {EC31BACB-BC44-4C49-BCDF-DE5CDC23FDDF} - System32\Tasks\aee97a0a-353f-42d2-824a-122e8b891cd7-3 => C:\Program Files\Senses\aee97a0a-353f-42d2-824a-122e8b891cd7-3.exe <==== ATTENTION
Task: {F90F209D-69E5-41BB-A123-3D9C1A71B711} - System32\Tasks\33bafe8c-34dc-4f97-ba3a-3aece9895873-1 => C:\Program Files\iWebar\iWebar-codedownloader.exe <==== ATTENTION
C:\_OTL
25 Wrz 2014, 19:26
25 Wrz 2014, 20:43
25 Wrz 2014, 20:49