Temat jest zamknięty
Początkujący
Napisano 02 01 2013 - 20:22
Extras.Txt 84,74 KB
219 Ilość pobrań
OTL.Txt 197,64 KB
243 Ilość pobrań
Uzależniony od forum
Napisano 02 01 2013 - 21:13
Ask Toolbar AVG Security Toolbar BS_Player Toolbar Deinstalator Strony V9Uruchom OTL w okienku Własne opcje skanowania/skrypt wklej:
:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pl.v9.com/?utm_source=b&utm_medium=ins
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://pl.v9.com/?utm_source=b&utm_medium=ins
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: "URL" = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2776682
IE - HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pl.v9.com/?utm_source=b&utm_medium=ins
IE - HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.avg.com/?cid={F4483EB8-8675-4BBD-81AC-8E12E300339A}&mid=8f6d02107dcb47d0b8add16f641ec9ff-0b18176759d6774da4633671032a6c4adc78ddb6&lang=pl&ds=xn011&pr=sa&d=2012-12-21 22:49:56&v=13.3.0.17&sap=hp
IE - HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=100478&babsrc=SP_ss&mntrId=424e57e9000000000000000000000000
IE - HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\..\SearchScopes\{159F1A98-34AE-4EEC-A56B-536D4ADACE2C}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=39DBB736-72CE-4942-B06D-B252821A225C&apn_sauid=DBF4113E-774A-4BD4-95C8-63E17089AC9C
IE - HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://startsear.ch/?aff=1&q={searchTerms}
IE - HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={F4483EB8-8675-4BBD-81AC-8E12E300339A}&mid=8f6d02107dcb47d0b8add16f641ec9ff-0b18176759d6774da4633671032a6c4adc78ddb6&lang=pl&ds=xn011&pr=sa&d=2012-12-21 22:49:56&v=13.3.0.17&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\..\SearchScopes\{9A95F1C2-1A57-48E1-90AD-07AA494826D5}: "URL" = http://rover.ebay.com/rover/1/4908-44618-9400-8/4?satitle={searchTerms}
IE - HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: "URL" = http://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms}
IE - HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2776682
IE - HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\..\SearchScopes\{F24D7423-9703-4C85-8C63-75E2D9C2F37B}: "URL" = http://www.amazon.co.uk/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibauk-win7-ie-search-21&index=blended&linkCode=ur2
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..extensions.enabledAddons: ffxtlbr%40babylon.com:1.1.9
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1
FF - prefs.js..keyword.URL: "http://search.babylon.com/?AF=100478&babsrc=adbartrp&mntrId=424e57e9000000000000000000000000&q="
O2 - BHO: (MediaBar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~2\BEARSH~1\MediaBar\ToolBar\bsdtxmltbpi.dll File not found
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
:Files
C:\Users\Ania i Włodek\AppData\Local\*.html
C:\Windows\_MSRSTRT.EXE
C:\Users\Ania i Włodek\AppData\Roaming\Babylon
:Commands
[emptytemp]
Kliknij Wykonaj skrypt daj log z usuwania.
Początkujący
Napisano 02 01 2013 - 23:04
Zaawansowany użytkownik
Napisano 02 01 2013 - 23:35
Użytkownik bipiw edytował ten post 02 01 2013 - 23:35
Początkujący
Napisano 03 01 2013 - 01:07
Początkujący
Napisano 03 01 2013 - 21:46
Oto co wyszło po załączeniu programu:
All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-2403591245-1301083417-1190166234-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_USERS\S-1-5-21-2403591245-1301083417-1190166234-1000\Software\Microsoft\Internet Explorer\SearchScopes\{159F1A98-34AE-4EEC-A56B-536D4ADACE2C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{159F1A98-34AE-4EEC-A56B-536D4ADACE2C}\ not found.
Registry key HKEY_USERS\S-1-5-21-2403591245-1301083417-1190166234-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Registry key HKEY_USERS\S-1-5-21-2403591245-1301083417-1190166234-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.
Registry key HKEY_USERS\S-1-5-21-2403591245-1301083417-1190166234-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9A95F1C2-1A57-48E1-90AD-07AA494826D5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9A95F1C2-1A57-48E1-90AD-07AA494826D5}\ not found.
Registry key HKEY_USERS\S-1-5-21-2403591245-1301083417-1190166234-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}\ not found.
Registry key HKEY_USERS\S-1-5-21-2403591245-1301083417-1190166234-1000\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_USERS\S-1-5-21-2403591245-1301083417-1190166234-1000\Software\Microsoft\Internet Explorer\SearchScopes\{F24D7423-9703-4C85-8C63-75E2D9C2F37B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F24D7423-9703-4C85-8C63-75E2D9C2F37B}\ not found.
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: ffxtlbr%40babylon.com:1.1.9 removed from extensions.enabledAddons
Prefs.js: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1 removed from extensions.enabledAddons
Prefs.js: "http://search.babylo...00000000000&q=" removed from keyword.URL
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\!{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\vProt not found.
File C:\Program Files (x86)\AVG Secure Search\vprot.exe not found.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
========== FILES ==========
C:\Users\Ania i Włodek\AppData\Local\TempaA1192.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempaA2244.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAC2324.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAD3492.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempae3168.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAe3268.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempaG2856.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAI3256.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAk2564.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempak2680.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAk3172.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempam3300.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempaN3220.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempan3368.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempaP3168.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAS2468.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempat3216.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAt3280.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAw2692.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAWE752.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempax3396.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAY1708.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempaY1828.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAY3392.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempAz3152.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempbe2924.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempbf3488.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempbI3136.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempBi3144.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempBm3396.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempbN2792.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempBp2432.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempBq3136.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempBR3384.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempBW3300.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempBW3324.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempcd2944.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempCd3428.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempcE2728.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempCE3208.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempcJ3048.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempck3228.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempCk3252.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempcl1252.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempCN3360.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempcP3216.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempcR3392.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempCr3428.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempct2848.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempCu2832.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempcU3192.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempcV3296.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempCW2588.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempdc2812.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempDG2624.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempDG3196.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempDK3496.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempdm1284.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempdq3284.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempDr2728.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempDR2884.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempdR3180.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempdS3100.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempDu3152.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempdW3232.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempeH2912.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempeK1752.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempel3044.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempEN2512.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempeq3084.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempes2104.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempEt2772.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempEv3544.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempEw2976.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempEY3080.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempfF3864.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempfk3308.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempfM3084.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempFN3228.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempfN3256.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempFO3144.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempFp3832.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempfq3364.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempFY3184.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempfy3384.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempfZ3628.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempGa3312.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempgc4016.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempgD2736.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempgE3140.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempgE3196.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempgi3776.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempGJ2952.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempgj3956.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempGk2652.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempgl3100.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempGL3200.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempgm2896.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempgN2712.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempGo3148.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempgO3192.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempGP3464.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempgr3044.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempgW3360.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempHa1976.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemphB2588.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temphb3084.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempHc3480.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temphe2324.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemphG3356.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempHh2604.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temphh3100.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemphK2652.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemphK3208.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempHK3308.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemphM3512.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempHN3736.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemphP3396.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temphr2472.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempHr3076.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempHs2564.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempHV2412.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemphW2616.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemphX3048.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemphY2272.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemphZ2616.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempiA3436.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempIB2312.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempiC3192.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempii2832.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempII4048.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempIj2516.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempIJ3148.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempim1212.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempIm1828.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempIn3148.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempiS2724.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempiT3208.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempiV3316.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempiz2524.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempjB3100.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempjh3044.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempJJ2208.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempJl3512.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempJm3188.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempjN3212.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempJp3352.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempJS3368.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempJx3136.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempki2832.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempKj3152.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempko3400.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempKP3352.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempkx3628.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempky3036.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempKz3336.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemplA2304.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempLD1956.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempLE3780.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Templj3012.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempLL3256.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemplP3212.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemplU1276.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempLw3152.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempLx3152.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Templx3252.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemplY3100.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempMG3136.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempmI3048.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempMl2808.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempmm1188.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempMm3080.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempMM3188.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempMm3196.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempmn2824.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempmN3224.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempMO3324.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempmp3192.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempMR2284.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempMz3036.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempNA3112.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempNA3676.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempnB3108.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempNc3344.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempNd2920.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempNf3232.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempNK2804.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempnM3608.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempnO3100.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempno3252.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempnP3140.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempnp3428.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempnq2964.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempnqR352.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempNT2660.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempNv3148.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempnx2760.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempnX3508.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempNy3480.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempoA3220.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempoa3320.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempod2940.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempoG1220.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempOi2940.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempoM3216.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempos3116.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempot1608.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempoT2780.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempoU3192.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempOV3000.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempOv3144.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempoV3676.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempow3168.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempOX3252.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempoZ3172.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempPA3164.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temppe2976.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temppe3276.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemppF3172.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempPF3608.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemppK1172.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempPO2376.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temppq2524.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemppQ2940.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempPr3140.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempPS3252.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempPt3920.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temppw2624.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemppY2944.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempQB3292.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempqG2804.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempQj2444.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempQl2208.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempqm2340.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempQm2412.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempqO2604.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempQP3164.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempQp3440.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempQr3052.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempQR3172.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempqv2704.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempqv3160.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempqY3196.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempRB2860.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempRC2912.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempre3084.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempRK1300.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempRK2812.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temprl3148.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temprm3240.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TemprN3176.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempRR1956.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempRs1300.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempRZ3364.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempSb3104.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempSb3420.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempsC3128.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempSf1548.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempsF3004.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempSg3464.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempsl3604.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempsr2900.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempSs2604.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempsu3368.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempSZ3472.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempTG3148.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempTH3192.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempTM2788.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temptn2760.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Temptq2760.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempTq3120.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempub3056.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempUF3036.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempUh2700.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempuj3592.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempUl3232.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempuO3112.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempUO3204.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempUP3244.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempus2444.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempUS2868.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempUT2284.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempUw3172.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempuWo752.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempux2752.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempUx3168.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempVa2788.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempVa3056.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempvj3480.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempvk2704.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempVL2924.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempvN2816.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempvP1188.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempvp1708.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempvT3636.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempwa2760.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempWD2272.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempWD3536.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempWf2424.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempwH3120.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempWh3172.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempwj2304.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempwl2160.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempWm1112.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempWM3968.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempWN1196.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempwO3188.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempWo3792.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempwP3108.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempwq3160.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempWS3536.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempwtE788.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempwu3140.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempwW3144.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempwY2944.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempwz2896.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempXb2680.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempxC3144.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempXC3200.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempxE3472.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempXg3152.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempxH2324.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempxI3172.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempXi3824.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempxJ3164.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempXL3096.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempXN3448.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempXP2980.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempxS3360.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempXt3180.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempXU3112.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempXz2816.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempXz3296.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempYa3348.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempYC3048.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempYF3228.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempyg3496.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempYO3100.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempyp2648.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempYu3136.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempyu3232.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempyW2856.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempzA2892.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempZa3448.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempzD3252.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempZe3152.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempZG2280.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempzI2700.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempzQ3544.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempzr3140.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempZr3148.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempZS2760.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempzU3252.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempZv3120.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempzvy532.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempzX3420.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\TempzX3624.html moved successfully.
C:\Users\Ania i Włodek\AppData\Local\Tempzz3136.html moved successfully.
C:\Windows\_MSRSTRT.EXE moved successfully.
C:\Users\Ania i Włodek\AppData\Roaming\Babylon folder moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Ania i Włodek
->Temp folder emptied: 14621050 bytes
->Temporary Internet Files folder emptied: 8453954 bytes
->Java cache emptied: 3589070 bytes
->FireFox cache emptied: 123844456 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 5183 bytes
User: AppData
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 15626 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 68032 bytes
RecycleBin emptied: 79412448 bytes
Total Files Cleaned = 219,00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 01022013_222859
Files\Folders moved on Reboot...
C:\Users\Ania i Włodek\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Użyłem Adwcleaner z opcją usuń.
Po samoczynnym zamknięciu systemu i ponownym samoczynny załączeniu wyskoczył notatnik:
Cytuję:
# AdwCleaner v2.104 - Log utworzony 02/01/2013 o 23:31:04
# Aktualizacja 29/12/2012 przez Xplode
# System operacyjny : Windows 7 Home Premium Service Pack 1 (64 bits)
# Użytkownik : Ania i Włodek - ANIAIWŁODEK
# Tryb uruchomienia : Normalny
# Ścieżka : C:\Users\Ania i Włodek\Downloads\AdwCleaner.exe
# Opcja [Usuń]
***** [Usługi] *****
***** [Pliki / Foldery] *****
Folder Usunięto : C:\Program Files (x86)\ConduitEngine
Folder Usunięto : C:\ProgramData\Ask
Folder Usunięto : C:\ProgramData\Babylon
Folder Usunięto : C:\ProgramData\Partner
Folder Usunięto : C:\Users\Ania i Włodek\AppData\Local\Babylon
Folder Usunięto : C:\Users\Ania i Włodek\AppData\Local\Conduit
Folder Usunięto : C:\Users\Ania i Włodek\AppData\Local\Google\Chrome\User Data\Default\Extensions\naipdapbimiiikbbgjcpbgmfhnlbagpj
Folder Usunięto : C:\Users\Ania i Włodek\AppData\LocalLow\Conduit
Folder Usunięto : C:\Users\Ania i Włodek\AppData\LocalLow\ConduitEngine
Folder Usunięto : C:\Users\Ania i Włodek\AppData\Roaming\Funmoods
Folder Usunięto : C:\Users\Ania i Włodek\AppData\Roaming\Mozilla\Firefox\Profiles\fiundk6m.default\extensions\ffxtlbr@babylon.com
Folder Usunięto : C:\Users\Ania i Włodek\AppData\Roaming\OpenCandy
Plik Usunięto : C:\Program Files (x86)\Mozilla Firefox\Plugins\npvsharetvplg.dll
Plik Usunięto : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Plik Usunięto : C:\user.js
Plik Usunięto : C:\Users\Ania i Włodek\AppData\Roaming\Mozilla\Firefox\Profiles\fiundk6m.default\searchplugins\Askcom.xml
Plik Usunięto : C:\Users\Ania i Włodek\AppData\Roaming\Mozilla\Firefox\Profiles\fiundk6m.default\searchplugins\funmoods.xml
***** [Rejestr] *****
Dane Usunięto : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\x64\datamngr.dll
Dane Usunięto : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\x64\IEBHO.dll
Klucz Usunięto : HKCU\Software\AppDataLow\Software\conduitEngine
Klucz Usunięto : HKCU\Software\AppDataLow\Software\Toolbar
Klucz Usunięto : HKCU\Software\Conduit
Klucz Usunięto : HKCU\Software\DataMngr
Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klucz Usunięto : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Klucz Usunięto : HKCU\Software\StartSearch
Klucz Usunięto : HKLM\Software\Babylon
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{1FC41815-FA4C-4F8B-B143-2C045C8EA2FC}
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4}
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\DiscoveryHelper.DLL
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\GIFAnimator.DLL
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\IMTrProgress.DLL
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\IMWeb.DLL
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\WMHelper.DLL
Klucz Usunięto : HKLM\SOFTWARE\Classes\Conduit.Engine
Klucz Usunięto : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery
Klucz Usunięto : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery.1
Klucz Usunięto : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc
Klucz Usunięto : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc.1
Klucz Usunięto : HKLM\SOFTWARE\Classes\imweb.imwebcontrol
Klucz Usunięto : HKLM\SOFTWARE\Classes\Prod.cap
Klucz Usunięto : HKLM\SOFTWARE\Classes\Toolbar.CT1750559
Klucz Usunięto : HKLM\SOFTWARE\Classes\Toolbar.CT2776682
Klucz Usunięto : HKLM\SOFTWARE\Classes\TypeLib\{252C2315-CCE0-4446-8DA7-C00292A690BA}
Klucz Usunięto : HKLM\SOFTWARE\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Klucz Usunięto : HKLM\SOFTWARE\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}
Klucz Usunięto : HKLM\SOFTWARE\Classes\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Klucz Usunięto : HKLM\SOFTWARE\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}
Klucz Usunięto : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klucz Usunięto : HKLM\Software\Conduit
Klucz Usunięto : HKLM\Software\conduitEngine
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424C-BB9F-74C6899B9F92}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{014DA6C9-189F-421A-88CD-07CFE51CFF10}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2656B92B-0207-4afb-BEBF-F5FD231ECD39}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{59570C1F-B692-48c9-91B4-7809E6945287}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{63A0F7FA-2C95-4d7e-AF25-EFCC303D20A1}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6559E502-6EE1-46b8-A83C-F3A45BDA23EE}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C63CA8A4-AB4E-49e5-A6C0-33FC86D80205}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C6A7847E-8931-4a9a-B4EF-72A91E3CCF4D}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD0F1D24-E250-4e93-966C-65615720AEFB}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EC1277BB-1C71-4c0d-BA6D-BFEA16E773A6}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\naipdapbimiiikbbgjcpbgmfhnlbagpj
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0F05D724-A29F-4AC5-84A8-9515EB315F4C}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klucz Usunięto : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Conduit Engine
Klucz Usunięto : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klucz Usunięto : HKLM\SOFTWARE\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE}
Klucz Usunięto : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klucz Usunięto : HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}
Klucz Usunięto : HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}
Klucz Usunięto : HKLM\SOFTWARE\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}
Klucz Usunięto : HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater
Klucz Usunięto : HKLM\SOFTWARE\Software
Wartość Usunięto : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}]
Wartość Usunięto : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wartość Usunięto : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}]
Wartość Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]
***** [Przeglądarki Internetowe] *****
-\\ Internet Explorer v9.0.8112.16457
Podmieniono : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzuyBtDtC0AtDyE0A0B0AyC0EtAyDyB0EzytN0D0Tzu0CtAyCzztN1L2XzutBtFtBtFtCtFyEtDyB&cr=364337069 --> hxxp://www.google.com
Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://searchfunmoods.com/?f=2&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzuyBtDtC0AtDyE0A0B0AyC0EtAyDyB0EzytN0D0Tzu0CtAyCzztN1L2XzutBtFtBtFtCtFyEtDyB&cr=364337069 --> hxxp://www.google.com
Podmieniono : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzuyBtDtC0AtDyE0A0B0AyC0EtAyDyB0EzytN0D0Tzu0CtAyCzztN1L2XzutBtFtBtFtCtFyEtDyB&cr=364337069 --> hxxp://www.google.com
Podmieniono : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzuyBtDtC0AtDyE0A0B0AyC0EtAyDyB0EzytN0D0Tzu0CtAyCzztN1L2XzutBtFtBtFtCtFyEtDyB&cr=364337069 --> hxxp://www.google.com
-\\ Mozilla Firefox v17.0.1 (pl)
Plik : C:\Users\Ania i Włodek\AppData\Roaming\Mozilla\Firefox\Profiles\fiundk6m.default\prefs.js
C:\Users\Ania i Włodek\AppData\Roaming\Mozilla\Firefox\Profiles\fiundk6m.default\user.js ... Usunięto !
Usunięto : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Usunięto : user_pref("browser.search.selectedEngine", "Funmoods");
Usunięto : user_pref("browser.startup.homepage", "hxxp://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEtN2Y[...]
Usunięto : user_pref("extensions.BabylonToolbar.admin", false);
Usunięto : user_pref("extensions.BabylonToolbar.aflt", "orgnl");
Usunięto : user_pref("extensions.BabylonToolbar.bbDpng", 2);
Usunięto : user_pref("extensions.BabylonToolbar.dfltSrch", false);
Usunięto : user_pref("extensions.BabylonToolbar.hmpg", false);
Usunięto : user_pref("extensions.BabylonToolbar.lastDP", 2);
Usunięto : user_pref("extensions.BabylonToolbar.lastVrsnTs", "");
Usunięto : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "17.0");
Usunięto : user_pref("extensions.BabylonToolbar.newTab", true);
Usunięto : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_FFUP");
Usunięto : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Usunięto : user_pref("extensions.BabylonToolbar.propectorlck", 95725179);
Usunięto : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Usunięto : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Usunięto : user_pref("extensions.BabylonToolbar.smplGrp", "tzb");
Usunięto : user_pref("extensions.BabylonToolbar_i.newTab", true);
Usunięto : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=100478&babsrc=NT_s[...]
Usunięto : user_pref("extensions.enabledAddons", "ffxtlbr%40babylon.com:1.1.9,%7B972ce4c6-7e08-4474-a285-320819[...]
Usunięto : user_pref("extensions.funmoods.aflt", "iron2");
Usunięto : user_pref("extensions.funmoods.autoRvrt", false);
Usunięto : user_pref("extensions.funmoods.cntry", "PL");
Usunięto : user_pref("extensions.funmoods.cv", "cv5");
Usunięto : user_pref("extensions.funmoods.dfltLng", "");
Usunięto : user_pref("extensions.funmoods.dfltSrch", true);
Usunięto : user_pref("extensions.funmoods.dnsErr", true);
Usunięto : user_pref("extensions.funmoods.envrmnt", "production");
Usunięto : user_pref("extensions.funmoods.excTlbr", false);
Usunięto : user_pref("extensions.funmoods.hdrMd5", "30A055C15E3D7F4087359CC668E4F7A0");
Usunięto : user_pref("extensions.funmoods.hmpg", true);
Usunięto : user_pref("extensions.funmoods.hmpgUrl", "hxxp://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEt[...]
Usunięto : user_pref("extensions.funmoods.id", "701A04ABA6E357E9");
Usunięto : user_pref("extensions.funmoods.instlDay", "15707");
Usunięto : user_pref("extensions.funmoods.instlRef", "iron2");
Usunięto : user_pref("extensions.funmoods.isdcmntcmplt", true);
Usunięto : user_pref("extensions.funmoods.lastVrsnTs", "1.5.23.2223:5:57");
Usunięto : user_pref("extensions.funmoods.mntrvrsn", "1.3.0");
Usunięto : user_pref("extensions.funmoods.newTab", true);
Usunięto : user_pref("extensions.funmoods.newTabUrl", "hxxp://searchfunmoods.com/?f=2&a=iron2&ir=iron2&cd=2Xzuy[...]
Usunięto : user_pref("extensions.funmoods.prdct", "funmoods");
Usunięto : user_pref("extensions.funmoods.prtnrId", "funmoods");
Usunięto : user_pref("extensions.funmoods.sg", "none");
Usunięto : user_pref("extensions.funmoods.smplGrp", "none");
Usunięto : user_pref("extensions.funmoods.srchPrvdr", "Funmoods");
Usunięto : user_pref("extensions.funmoods.tlbrId", "base");
Usunięto : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://searchfunmoods.com/?f=3&a=iron2&ir=iron2&cd=2Xz[...]
Usunięto : user_pref("extensions.funmoods.vrsn", "1.5.23.22");
Usunięto : user_pref("extensions.funmoods.vrsnTs", "1.5.23.2223:5:57");
Usunięto : user_pref("extensions.funmoods.vrsni", "1.5.23.22");
Usunięto : user_pref("extensions.funmoods_i.newTab", true);
Usunięto : user_pref("extensions.funmoods_i.smplGrp", "none");
Usunięto : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2223:5:57");
-\\ Google Chrome v23.0.1271.97
Plik : C:\Users\Ania i Włodek\AppData\Local\Google\Chrome\User Data\Default\Preferences
Usunięto [l.3] : urls_to_restore_on_startup = [ "hxxp://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEtN2Y[...]
Usunięto [l.24] : search_url = "hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&ir=iron2&cd=2[...]
Usunięto [l.215] : homepage = "hxxp://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzuyBtDtC0AtDyE0A0B0[...]
*************************
AdwCleaner[S1].txt - [17282 octets] - [02/01/2013 23:31:04]
########## EOF - C:\AdwCleaner[S1].txt - [17343 octets] ##########
Za chwilę spróbuję wgrać jakiegoś antywirusa i dam znać co się dalej dzieje
Extras.Txt 81,8 KB
230 Ilość pobrań
OTL.Txt 103,64 KB
211 Ilość pobrań
Uzależniony od forum
Napisano 03 01 2013 - 22:08
:OTL
IE - HKU\S-1-5-21-2403591245-1301083417-1190166234-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzuyBtDtC0AtDyE0A0B0AyC0EtAyDyB0EzytN0D0Tzu0CtAyCzztN1L2XzutBtFtBtFtCtFyEtDyB&cr=364337069
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found.
Kliknij Wykonaj skrypt nie będzie restartu.
Początkujący
Napisano 04 01 2013 - 23:30
Uzależniony od forum
Napisano 04 01 2013 - 23:53
Najwidoczniej problem nie był w logach. Muszę więc szukać w innym dziale niż bezpieczeństwo.
0 użytkowników, 0 gości, 0 anonimowych
