Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 15-01-2014 01 Ran by Tommy at 2014-01-19 12:29:34 Run:1 Running from C:\Users\Tommy\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PSearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL = http://www.mirarsearch.com/?q={searchTerms}&a=SEARCHSearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =SearchScopes: HKCU - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL =SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()Toolbar: HKCU - No Name - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No FileToolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No FileToolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No FileFF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xmlFF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PFF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\FirefoxFF Extension: IB Updater - C:\Program Files\IB Updater\Firefox [2013-01-17]FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla ThunderbirdFF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] -CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\System32\jmdp\pnte.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-07]CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] ()Task: {00A6D866-B9DE-4068-98A0-A4F24CED70DD} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtectTask: {2D2EDF1C-D816-4600-A3F1-389104A56B65} - System32\Tasks\{8AB839A1-32D6-4289-B80A-7C11648CF4B9} => Iexplore.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsMainTask: {65866DEC-6A11-4DDE-9A9D-841770E8F303} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {68005A10-E28F-454E-A988-7ABF7E6D4780} - System32\Tasks\{670FF2CC-E165-4146-A8FB-22F28A7C90C9} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.111&LastError=404Task: {6D6A7D1D-840B-4183-96AF-A827F504175D} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exeTask: {741A7824-50A3-428F-9E56-B8698D1A626F} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {766C6591-A855-4108-B804-2C60AC089B27} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {7DF7BCC7-41BA-44D4-B6A1-CDA1D0854CA2} - System32\Tasks\{C1150014-68F2-4137-8F8B-B4E324DBE750} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMainTask: {8AE8D5C7-2118-45D6-B443-F32AE5622B7B} - System32\Tasks\{0EC7CCC5-5A29-4236-AE77-4212CD89879F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/en/abandoninstall?page=tsMainTask: {9F1C2554-4531-4009-9CEF-62CCB6DE3D28} - System32\Tasks\{BC96270F-8E13-4631-B01F-81B83EBAF560} => Iexplore.exe http://ui.skype.com/ui/0/6.7.0.102/en/abandoninstall?page=tsMainTask: {A7A27B1B-0D67-4FC3-9B97-1800710DF30B} - System32\Tasks\RunAsStdUser Task => C:\Users\Tommy\AppData\Local\Oxy\Application\oxy.exeTask: {B673AD96-0AD8-4ECC-9C1C-C2AAEDC075A5} - System32\Tasks\{3A67AEEB-9E99-4B05-8D36-DD649EBA839C} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMainTask: {BEB92D86-73A5-44C8-94EC-5F6E516B9439} - System32\Tasks\{E10BC24C-0C38-484A-A270-05F7444DCB94} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainTask: {C488DBC7-51ED-4A9A-943F-0498D45D4B02} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {C88E4A90-2D11-497D-8F6F-212829E94BF5} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {D1A66FA6-4B2C-410B-966B-603F6DB14051} - \Program aktualizacji online firmy Adobe. No Task FileTask: {F53A4CFA-0A78-4AA5-B267-B8AF7FE2AC1A} - System32\Tasks\{7CAA276F-F6DB-4495-8D85-8B4D90214875} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMainTask: {F597171C-3DA1-4427-AF73-3E6B1CA3D4AA} - System32\Tasks\{89DDB1D0-A47D-429E-B2E0-3E03046A351D} => Iexplore.exe http://ui.skype.com/ui/0/6.5.0.158/en/abandoninstall?page=tsMainTask: {FAD024DA-AF8D-417A-850D-EE99D1AE3C34} - System32\Tasks\{99659999-E82B-4620-82CE-89E32B8AF53E} => Iexplore.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsMainTask: {FB3F9EDE-136A-456C-960B-C57E561A7F29} - System32\Tasks\{3AF4F1BF-9C8D-42D4-9432-43084D400A95} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsBingTask: {FF36BCA4-C3E2-4584-91AA-3D87DDE71713} - System32\Tasks\{AE33FB1D-7B4C-4FBF-B0C8-E4125A489CFD} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainHKU\Guest\...\Winlogon: [Shell] explorer.exe [ 2009-04-02] (Microsoft Corporation)S4 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2012-11-26] ()S2 ServUpdater; C:\Users\Tommy\AppData\Local\ServUpdater\ServiceUpd.exe [156160 2011-12-16] (ServiceUpd)S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [x]S3 F-Secure Standalone Minifilter; \??\C:\Users\Tommy\AppData\Local\Temp\OnlineScanner\Anti-Virus\fsgk.sys [x]S3 lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys [x]S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]ProxyServer: 89.148.12.245:80DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cabDPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cabDPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cabDPF: {E6BB2089-163F-466B-812A-748096614DFD} http://cainternetsecurity.net/scanner/cascanner.cabC:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\bProtector Web DataC:\Users\Tommy\AppData\Local\ServUpdaterC:\Users\Guest\AppData\Roaming\settings.iniC:\Users\Tommy\AppData\Roaming\desktop.iniC:\Users\Tommy\AppData\Roaming\OxyC:\ProgramData\BrowserProtectC:\ProgramData\WPMC:\END ***************** HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PSearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL = http://www.mirarsearch.com/?q={searchTerms}&a=SEARCHSearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =SearchScopes: HKCU - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL =SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()Toolbar: HKCU - No Name - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No FileToolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No FileToolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No FileFF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xmlFF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PFF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\FirefoxFF Extension: IB Updater - C:\Program Files\IB Updater\Firefox [2013-01-17]FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla ThunderbirdFF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] -CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\System32\jmdp\pnte.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-07]CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] ()Task: {00A6D866-B9DE-4068-98A0-A4F24CED70DD} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtectTask: {2D2EDF1C-D816-4600-A3F1-389104A56B65} - System32\Tasks\{8AB839A1-32D6-4289-B80A-7C11648CF4B9} => Iexplore.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsMainTask: {65866DEC-6A11-4DDE-9A9D-841770E8F303} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {68005A10-E28F-454E-A988-7ABF7E6D4780} - System32\Tasks\{670FF2CC-E165-4146-A8FB-22F28A7C90C9} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.111&LastError=404Task: {6D6A7D1D-840B-4183-96AF-A827F504175D} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exeTask: {741A7824-50A3-428F-9E56-B8698D1A626F} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {766C6591-A855-4108-B804-2C60AC089B27} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {7DF7BCC7-41BA-44D4-B6A1-CDA1D0854CA2} - System32\Tasks\{C1150014-68F2-4137-8F8B-B4E324DBE750} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMainTask: {8AE8D5C7-2118-45D6-B443-F32AE5622B7B} - System32\Tasks\{0EC7CCC5-5A29-4236-AE77-4212CD89879F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/en/abandoninstall?page=tsMainTask: {9F1C2554-4531-4009-9CEF-62CCB6DE3D28} - System32\Tasks\{BC96270F-8E13-4631-B01F-81B83EBAF560} => Iexplore.exe http://ui.skype.com/ui/0/6.7.0.102/en/abandoninstall?page=tsMainTask: {A7A27B1B-0D67-4FC3-9B97-1800710DF30B} - System32\Tasks\RunAsStdUser Task => C:\Users\Tommy\AppData\Local\Oxy\Application\oxy.exeTask: {B673AD96-0AD8-4ECC-9C1C-C2AAEDC075A5} - System32\Tasks\{3A67AEEB-9E99-4B05-8D36-DD649EBA839C} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMainTask: {BEB92D86-73A5-44C8-94EC-5F6E516B9439} - System32\Tasks\{E10BC24C-0C38-484A-A270-05F7444DCB94} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainTask: {C488DBC7-51ED-4A9A-943F-0498D45D4B02} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {C88E4A90-2D11-497D-8F6F-212829E94BF5} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {D1A66FA6-4B2C-410B-966B-603F6DB14051} - \Program aktualizacji online firmy Adobe. No Task FileTask: {F53A4CFA-0A78-4AA5-B267-B8AF7FE2AC1A} - System32\Tasks\{7CAA276F-F6DB-4495-8D85-8B4D90214875} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMainTask: {F597171C-3DA1-4427-AF73-3E6B1CA3D4AA} - System32\Tasks\{89DDB1D0-A47D-429E-B2E0-3E03046A351D} => Iexplore.exe http://ui.skype.com/ui/0/6.5.0.158/en/abandoninstall?page=tsMainTask: {FAD024DA-AF8D-417A-850D-EE99D1AE3C34} - System32\Tasks\{99659999-E82B-4620-82CE-89E32B8AF53E} => Iexplore.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsMainTask: {FB3F9EDE-136A-456C-960B-C57E561A7F29} - System32\Tasks\{3AF4F1BF-9C8D-42D4-9432-43084D400A95} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsBingTask: {FF36BCA4-C3E2-4584-91AA-3D87DDE71713} - System32\Tasks\{AE33FB1D-7B4C-4FBF-B0C8-E4125A489CFD} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainHKU\Guest\...\Winlogon: [Shell] explorer.exe [ 2009-04-02] (Microsoft Corporation)S4 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2012-11-26] ()S2 ServUpdater; C:\Users\Tommy\AppData\Local\ServUpdater\ServiceUpd.exe [156160 2011-12-16] (ServiceUpd)S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [x]S3 F-Secure Standalone Minifilter; \??\C:\Users\Tommy\AppData\Local\Temp\OnlineScanner\Anti-Virus\fsgk.sys [x]S3 lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys [x]S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]ProxyServer: 89.148.12.245:80DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cabDPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cabDPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cabDPF: {E6BB2089-163F-466B-812A-748096614DFD} => Key not found. HKCR\CLSID\{searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PSearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL = http://www.mirarsearch.com/?q={searchTerms}&a=SEARCHSearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =SearchScopes: HKCU - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL =SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()Toolbar: HKCU - No Name - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No FileToolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No FileToolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No FileFF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xmlFF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PFF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\FirefoxFF Extension: IB Updater - C:\Program Files\IB Updater\Firefox [2013-01-17]FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla ThunderbirdFF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] -CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\System32\jmdp\pnte.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-07]CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] ()Task: {00A6D866-B9DE-4068-98A0-A4F24CED70DD} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtectTask: {2D2EDF1C-D816-4600-A3F1-389104A56B65} - System32\Tasks\{8AB839A1-32D6-4289-B80A-7C11648CF4B9} => Iexplore.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsMainTask: {65866DEC-6A11-4DDE-9A9D-841770E8F303} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {68005A10-E28F-454E-A988-7ABF7E6D4780} - System32\Tasks\{670FF2CC-E165-4146-A8FB-22F28A7C90C9} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.111&LastError=404Task: {6D6A7D1D-840B-4183-96AF-A827F504175D} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exeTask: {741A7824-50A3-428F-9E56-B8698D1A626F} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {766C6591-A855-4108-B804-2C60AC089B27} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {7DF7BCC7-41BA-44D4-B6A1-CDA1D0854CA2} - System32\Tasks\{C1150014-68F2-4137-8F8B-B4E324DBE750} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMainTask: {8AE8D5C7-2118-45D6-B443-F32AE5622B7B} - System32\Tasks\{0EC7CCC5-5A29-4236-AE77-4212CD89879F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/en/abandoninstall?page=tsMainTask: {9F1C2554-4531-4009-9CEF-62CCB6DE3D28} - System32\Tasks\{BC96270F-8E13-4631-B01F-81B83EBAF560} => Iexplore.exe http://ui.skype.com/ui/0/6.7.0.102/en/abandoninstall?page=tsMainTask: {A7A27B1B-0D67-4FC3-9B97-1800710DF30B} - System32\Tasks\RunAsStdUser Task => C:\Users\Tommy\AppData\Local\Oxy\Application\oxy.exeTask: {B673AD96-0AD8-4ECC-9C1C-C2AAEDC075A5} - System32\Tasks\{3A67AEEB-9E99-4B05-8D36-DD649EBA839C} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMainTask: {BEB92D86-73A5-44C8-94EC-5F6E516B9439} - System32\Tasks\{E10BC24C-0C38-484A-A270-05F7444DCB94} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainTask: {C488DBC7-51ED-4A9A-943F-0498D45D4B02} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {C88E4A90-2D11-497D-8F6F-212829E94BF5} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {D1A66FA6-4B2C-410B-966B-603F6DB14051} - \Program aktualizacji online firmy Adobe. No Task FileTask: {F53A4CFA-0A78-4AA5-B267-B8AF7FE2AC1A} - System32\Tasks\{7CAA276F-F6DB-4495-8D85-8B4D90214875} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMainTask: {F597171C-3DA1-4427-AF73-3E6B1CA3D4AA} - System32\Tasks\{89DDB1D0-A47D-429E-B2E0-3E03046A351D} => Iexplore.exe http://ui.skype.com/ui/0/6.5.0.158/en/abandoninstall?page=tsMainTask: {FAD024DA-AF8D-417A-850D-EE99D1AE3C34} - System32\Tasks\{99659999-E82B-4620-82CE-89E32B8AF53E} => Iexplore.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsMainTask: {FB3F9EDE-136A-456C-960B-C57E561A7F29} - System32\Tasks\{3AF4F1BF-9C8D-42D4-9432-43084D400A95} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsBingTask: {FF36BCA4-C3E2-4584-91AA-3D87DDE71713} - System32\Tasks\{AE33FB1D-7B4C-4FBF-B0C8-E4125A489CFD} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainHKU\Guest\...\Winlogon: [Shell] explorer.exe [ 2009-04-02] (Microsoft Corporation)S4 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2012-11-26] ()S2 ServUpdater; C:\Users\Tommy\AppData\Local\ServUpdater\ServiceUpd.exe [156160 2011-12-16] (ServiceUpd)S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [x]S3 F-Secure Standalone Minifilter; \??\C:\Users\Tommy\AppData\Local\Temp\OnlineScanner\Anti-Virus\fsgk.sys [x]S3 lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys [x]S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]ProxyServer: 89.148.12.245:80DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cabDPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cabDPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cabDPF: {E6BB2089-163F-466B-812A-748096614DFD} => Key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PSearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL = http://www.mirarsearch.com/?q={searchTerms}&a=SEARCHSearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =SearchScopes: HKCU - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL =SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()Toolbar: HKCU - No Name - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No FileToolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No FileToolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No FileFF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xmlFF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PFF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\FirefoxFF Extension: IB Updater - C:\Program Files\IB Updater\Firefox [2013-01-17]FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla ThunderbirdFF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] -CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\System32\jmdp\pnte.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-07]CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] (){00A6D866-B9DE-4068-98A0-A4F24CED70DD} => Key not found. C:\Windows\HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PSearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL = http://www.mirarsearch.com/?q={searchTerms}&a=SEARCHSearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =SearchScopes: HKCU - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL =SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()Toolbar: HKCU - No Name - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No FileToolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No FileToolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No FileFF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xmlFF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PFF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\FirefoxFF Extension: IB Updater - C:\Program Files\IB Updater\Firefox [2013-01-17]FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla ThunderbirdFF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] -CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\System32\jmdp\pnte.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-07]CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] ()System32\Tasks\BrowserProtect => Sc.exe start BrowserProtectTask: {2D2EDF1C-D816-4600-A3F1-389104A56B65} - System32\Tasks\{8AB839A1-32D6-4289-B80A-7C11648CF4B9} => Iexplore.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsMainTask: {65866DEC-6A11-4DDE-9A9D-841770E8F303} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {68005A10-E28F-454E-A988-7ABF7E6D4780} - System32\Tasks\{670FF2CC-E165-4146-A8FB-22F28A7C90C9} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.111&LastError=404Task: {6D6A7D1D-840B-4183-96AF-A827F504175D} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exeTask: {741A7824-50A3-428F-9E56-B8698D1A626F} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {766C6591-A855-4108-B804-2C60AC089B27} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {7DF7BCC7-41BA-44D4-B6A1-CDA1D0854CA2} - System32\Tasks\{C1150014-68F2-4137-8F8B-B4E324DBE750} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMainTask: {8AE8D5C7-2118-45D6-B443-F32AE5622B7B} - System32\Tasks\{0EC7CCC5-5A29-4236-AE77-4212CD89879F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/en/abandoninstall?page=tsMainTask: {9F1C2554-4531-4009-9CEF-62CCB6DE3D28} - System32\Tasks\{BC96270F-8E13-4631-B01F-81B83EBAF560} => Iexplore.exe http://ui.skype.com/ui/0/6.7.0.102/en/abandoninstall?page=tsMainTask: {A7A27B1B-0D67-4FC3-9B97-1800710DF30B} - System32\Tasks\RunAsStdUser Task => C:\Users\Tommy\AppData\Local\Oxy\Application\oxy.exeTask: {B673AD96-0AD8-4ECC-9C1C-C2AAEDC075A5} - System32\Tasks\{3A67AEEB-9E99-4B05-8D36-DD649EBA839C} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMainTask: {BEB92D86-73A5-44C8-94EC-5F6E516B9439} - System32\Tasks\{E10BC24C-0C38-484A-A270-05F7444DCB94} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainTask: {C488DBC7-51ED-4A9A-943F-0498D45D4B02} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {C88E4A90-2D11-497D-8F6F-212829E94BF5} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {D1A66FA6-4B2C-410B-966B-603F6DB14051} - \Program aktualizacji online firmy Adobe. No Task FileTask: {F53A4CFA-0A78-4AA5-B267-B8AF7FE2AC1A} - System32\Tasks\{7CAA276F-F6DB-4495-8D85-8B4D90214875} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMainTask: {F597171C-3DA1-4427-AF73-3E6B1CA3D4AA} - System32\Tasks\{89DDB1D0-A47D-429E-B2E0-3E03046A351D} => Iexplore.exe http://ui.skype.com/ui/0/6.5.0.158/en/abandoninstall?page=tsMainTask: {FAD024DA-AF8D-417A-850D-EE99D1AE3C34} - System32\Tasks\{99659999-E82B-4620-82CE-89E32B8AF53E} => Iexplore.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsMainTask: {FB3F9EDE-136A-456C-960B-C57E561A7F29} - System32\Tasks\{3AF4F1BF-9C8D-42D4-9432-43084D400A95} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsBingTask: {FF36BCA4-C3E2-4584-91AA-3D87DDE71713} - System32\Tasks\{AE33FB1D-7B4C-4FBF-B0C8-E4125A489CFD} not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\TreeHKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PSearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL = http://www.mirarsearch.com/?q={searchTerms}&a=SEARCHSearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =SearchScopes: HKCU - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL =SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()Toolbar: HKCU - No Name - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No FileToolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No FileToolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No FileFF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xmlFF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PFF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\FirefoxFF Extension: IB Updater - C:\Program Files\IB Updater\Firefox [2013-01-17]FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla ThunderbirdFF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] -CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\System32\jmdp\pnte.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-07]CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] ()\BrowserProtect => Sc.exe start BrowserProtectTask: {2D2EDF1C-D816-4600-A3F1-389104A56B65} - System32\Tasks\{8AB839A1-32D6-4289-B80A-7C11648CF4B9} => Iexplore.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsMainTask: {65866DEC-6A11-4DDE-9A9D-841770E8F303} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {68005A10-E28F-454E-A988-7ABF7E6D4780} - System32\Tasks\{670FF2CC-E165-4146-A8FB-22F28A7C90C9} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.111&LastError=404Task: {6D6A7D1D-840B-4183-96AF-A827F504175D} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exeTask: {741A7824-50A3-428F-9E56-B8698D1A626F} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {766C6591-A855-4108-B804-2C60AC089B27} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {7DF7BCC7-41BA-44D4-B6A1-CDA1D0854CA2} - System32\Tasks\{C1150014-68F2-4137-8F8B-B4E324DBE750} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMainTask: {8AE8D5C7-2118-45D6-B443-F32AE5622B7B} - System32\Tasks\{0EC7CCC5-5A29-4236-AE77-4212CD89879F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/en/abandoninstall?page=tsMainTask: {9F1C2554-4531-4009-9CEF-62CCB6DE3D28} - System32\Tasks\{BC96270F-8E13-4631-B01F-81B83EBAF560} => Iexplore.exe http://ui.skype.com/ui/0/6.7.0.102/en/abandoninstall?page=tsMainTask: {A7A27B1B-0D67-4FC3-9B97-1800710DF30B} - System32\Tasks\RunAsStdUser Task => C:\Users\Tommy\AppData\Local\Oxy\Application\oxy.exeTask: {B673AD96-0AD8-4ECC-9C1C-C2AAEDC075A5} - System32\Tasks\{3A67AEEB-9E99-4B05-8D36-DD649EBA839C} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMainTask: {BEB92D86-73A5-44C8-94EC-5F6E516B9439} - System32\Tasks\{E10BC24C-0C38-484A-A270-05F7444DCB94} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainTask: {C488DBC7-51ED-4A9A-943F-0498D45D4B02} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {C88E4A90-2D11-497D-8F6F-212829E94BF5} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {D1A66FA6-4B2C-410B-966B-603F6DB14051} - \Program aktualizacji online firmy Adobe. No Task FileTask: {F53A4CFA-0A78-4AA5-B267-B8AF7FE2AC1A} - System32\Tasks\{7CAA276F-F6DB-4495-8D85-8B4D90214875} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMainTask: {F597171C-3DA1-4427-AF73-3E6B1CA3D4AA} - System32\Tasks\{89DDB1D0-A47D-429E-B2E0-3E03046A351D} => Iexplore.exe http://ui.skype.com/ui/0/6.5.0.158/en/abandoninstall?page=tsMainTask: {FAD024DA-AF8D-417A-850D-EE99D1AE3C34} - System32\Tasks\{99659999-E82B-4620-82CE-89E32B8AF53E} => Iexplore.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsMainTask: {FB3F9EDE-136A-456C-960B-C57E561A7F29} - System32\Tasks\{3AF4F1BF-9C8D-42D4-9432-43084D400A95} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsBingTask: {FF36BCA4-C3E2-4584-91AA-3D87DDE71713} - System32\Tasks\{AE33FB1D-7B4C-4FBF-B0C8-E4125A489CFD} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Value not found. HKCR\CLSID\HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found. HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PSearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL = http://www.mirarsearch.com/?q={searchTerms}&a=SEARCHSearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =SearchScopes: HKCU - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL =SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()Toolbar: HKCU - No Name - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No FileToolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No FileToolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No FileFF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xmlFF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PFF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\FirefoxFF Extension: IB Updater - C:\Program Files\IB Updater\Firefox [2013-01-17]FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla ThunderbirdFF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] -CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\System32\jmdp\pnte.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-07]CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] ()Task: {00A6D866-B9DE-4068-98A0-A4F24CED70DD} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtectTask: {2D2EDF1C-D816-4600-A3F1-389104A56B65} - System32\Tasks\{8AB839A1-32D6-4289-B80A-7C11648CF4B9} => Iexplore.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsMainTask: {65866DEC-6A11-4DDE-9A9D-841770E8F303} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {68005A10-E28F-454E-A988-7ABF7E6D4780} - System32\Tasks\{670FF2CC-E165-4146-A8FB-22F28A7C90C9} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.111&LastError=404Task: {6D6A7D1D-840B-4183-96AF-A827F504175D} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exeTask: {741A7824-50A3-428F-9E56-B8698D1A626F} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {766C6591-A855-4108-B804-2C60AC089B27} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {7DF7BCC7-41BA-44D4-B6A1-CDA1D0854CA2} - System32\Tasks\{C1150014-68F2-4137-8F8B-B4E324DBE750} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMainTask: {8AE8D5C7-2118-45D6-B443-F32AE5622B7B} - System32\Tasks\{0EC7CCC5-5A29-4236-AE77-4212CD89879F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/en/abandoninstall?page=tsMainTask: {9F1C2554-4531-4009-9CEF-62CCB6DE3D28} - System32\Tasks\{BC96270F-8E13-4631-B01F-81B83EBAF560} => Iexplore.exe http://ui.skype.com/ui/0/6.7.0.102/en/abandoninstall?page=tsMainTask: {A7A27B1B-0D67-4FC3-9B97-1800710DF30B} - System32\Tasks\RunAsStdUser Task => C:\Users\Tommy\AppData\Local\Oxy\Application\oxy.exeTask: {B673AD96-0AD8-4ECC-9C1C-C2AAEDC075A5} - System32\Tasks\{3A67AEEB-9E99-4B05-8D36-DD649EBA839C} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMainTask: {BEB92D86-73A5-44C8-94EC-5F6E516B9439} - System32\Tasks\{E10BC24C-0C38-484A-A270-05F7444DCB94} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainTask: {C488DBC7-51ED-4A9A-943F-0498D45D4B02} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {C88E4A90-2D11-497D-8F6F-212829E94BF5} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {D1A66FA6-4B2C-410B-966B-603F6DB14051} - \Program aktualizacji online firmy Adobe. No Task FileTask: {F53A4CFA-0A78-4AA5-B267-B8AF7FE2AC1A} - System32\Tasks\{7CAA276F-F6DB-4495-8D85-8B4D90214875} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMainTask: {F597171C-3DA1-4427-AF73-3E6B1CA3D4AA} - System32\Tasks\{89DDB1D0-A47D-429E-B2E0-3E03046A351D} => Iexplore.exe http://ui.skype.com/ui/0/6.5.0.158/en/abandoninstall?page=tsMainTask: {FAD024DA-AF8D-417A-850D-EE99D1AE3C34} - System32\Tasks\{99659999-E82B-4620-82CE-89E32B8AF53E} => Iexplore.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsMainTask: {FB3F9EDE-136A-456C-960B-C57E561A7F29} - System32\Tasks\{3AF4F1BF-9C8D-42D4-9432-43084D400A95} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsBingTask: {FF36BCA4-C3E2-4584-91AA-3D87DDE71713} - System32\Tasks\{AE33FB1D-7B4C-4FBF-B0C8-E4125A489CFD} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainHKU\Guest\...\Winlogon: [Shell] explorer.exe [ 2009-04-02] (Microsoft Corporation)S4 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2012-11-26] ()S2 ServUpdater; C:\Users\Tommy\AppData\Local\ServUpdater\ServiceUpd.exe [156160 2011-12-16] (ServiceUpd)S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [x]S3 F-Secure Standalone Minifilter; \??\C:\Users\Tommy\AppData\Local\Temp\OnlineScanner\Anti-Virus\fsgk.sys [x]S3 lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys [x]S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]ProxyServer: 89.148.12.245:80DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cabDPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cabDPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cabDPF: {E6BB2089-163F-466B-812A-748096614DFD} => Key not found. HKCR\CLSID\{searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PSearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL = http://www.mirarsearch.com/?q={searchTerms}&a=SEARCHSearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =SearchScopes: HKCU - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL =SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()Toolbar: HKCU - No Name - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No FileToolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No FileToolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No FileFF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xmlFF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PFF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\FirefoxFF Extension: IB Updater - C:\Program Files\IB Updater\Firefox [2013-01-17]FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla ThunderbirdFF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] -CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\System32\jmdp\pnte.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-07]CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] ()Task: {00A6D866-B9DE-4068-98A0-A4F24CED70DD} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtectTask: {2D2EDF1C-D816-4600-A3F1-389104A56B65} - System32\Tasks\{8AB839A1-32D6-4289-B80A-7C11648CF4B9} => Iexplore.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsMainTask: {65866DEC-6A11-4DDE-9A9D-841770E8F303} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {68005A10-E28F-454E-A988-7ABF7E6D4780} - System32\Tasks\{670FF2CC-E165-4146-A8FB-22F28A7C90C9} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.111&LastError=404Task: {6D6A7D1D-840B-4183-96AF-A827F504175D} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exeTask: {741A7824-50A3-428F-9E56-B8698D1A626F} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {766C6591-A855-4108-B804-2C60AC089B27} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {7DF7BCC7-41BA-44D4-B6A1-CDA1D0854CA2} - System32\Tasks\{C1150014-68F2-4137-8F8B-B4E324DBE750} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMainTask: {8AE8D5C7-2118-45D6-B443-F32AE5622B7B} - System32\Tasks\{0EC7CCC5-5A29-4236-AE77-4212CD89879F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/en/abandoninstall?page=tsMainTask: {9F1C2554-4531-4009-9CEF-62CCB6DE3D28} - System32\Tasks\{BC96270F-8E13-4631-B01F-81B83EBAF560} => Iexplore.exe http://ui.skype.com/ui/0/6.7.0.102/en/abandoninstall?page=tsMainTask: {A7A27B1B-0D67-4FC3-9B97-1800710DF30B} - System32\Tasks\RunAsStdUser Task => C:\Users\Tommy\AppData\Local\Oxy\Application\oxy.exeTask: {B673AD96-0AD8-4ECC-9C1C-C2AAEDC075A5} - System32\Tasks\{3A67AEEB-9E99-4B05-8D36-DD649EBA839C} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMainTask: {BEB92D86-73A5-44C8-94EC-5F6E516B9439} - System32\Tasks\{E10BC24C-0C38-484A-A270-05F7444DCB94} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainTask: {C488DBC7-51ED-4A9A-943F-0498D45D4B02} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {C88E4A90-2D11-497D-8F6F-212829E94BF5} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {D1A66FA6-4B2C-410B-966B-603F6DB14051} - \Program aktualizacji online firmy Adobe. No Task FileTask: {F53A4CFA-0A78-4AA5-B267-B8AF7FE2AC1A} - System32\Tasks\{7CAA276F-F6DB-4495-8D85-8B4D90214875} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMainTask: {F597171C-3DA1-4427-AF73-3E6B1CA3D4AA} - System32\Tasks\{89DDB1D0-A47D-429E-B2E0-3E03046A351D} => Iexplore.exe http://ui.skype.com/ui/0/6.5.0.158/en/abandoninstall?page=tsMainTask: {FAD024DA-AF8D-417A-850D-EE99D1AE3C34} - System32\Tasks\{99659999-E82B-4620-82CE-89E32B8AF53E} => Iexplore.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsMainTask: {FB3F9EDE-136A-456C-960B-C57E561A7F29} - System32\Tasks\{3AF4F1BF-9C8D-42D4-9432-43084D400A95} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsBingTask: {FF36BCA4-C3E2-4584-91AA-3D87DDE71713} - System32\Tasks\{AE33FB1D-7B4C-4FBF-B0C8-E4125A489CFD} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainHKU\Guest\...\Winlogon: [Shell] explorer.exe [ 2009-04-02] (Microsoft Corporation)S4 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2012-11-26] ()S2 ServUpdater; C:\Users\Tommy\AppData\Local\ServUpdater\ServiceUpd.exe [156160 2011-12-16] (ServiceUpd)S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [x]S3 F-Secure Standalone Minifilter; \??\C:\Users\Tommy\AppData\Local\Temp\OnlineScanner\Anti-Virus\fsgk.sys [x]S3 lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys [x]S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]ProxyServer: 89.148.12.245:80DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cabDPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cabDPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cabDPF: {E6BB2089-163F-466B-812A-748096614DFD} => Key not found. HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. C:\Users\Tommy\AppData\Local\ServUpdater\ServiceUpd.exe [156160 2011-12-16] (ServiceUpd)S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [x]S3 F-Secure Standalone Minifilter; \??\C:\Users\Tommy\AppData\Local\Temp\OnlineScanner\Anti-Virus\fsgk.sys [x]S3 lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys [x]S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys => not found. "HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PSearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL = http://www.mirarsearch.com/?q={searchTerms}&a=SEARCHSearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =SearchScopes: HKCU - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL =SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()Toolbar: HKCU - No Name - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No FileToolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No FileToolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No FileC:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xmlFF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PFF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\FirefoxFF Extension: IB Updater - C:\Program Files\IB Updater\Firefox [2013-01-17]FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla ThunderbirdFF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] -CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\System32\jmdp\pnte.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-07]CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] ()Task: {00A6D866-B9DE-4068-98A0-A4F24CED70DD} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtectTask: {2D2EDF1C-D816-4600-A3F1-389104A56B65} - System32\Tasks\{8AB839A1-32D6-4289-B80A-7C11648CF4B9} => Iexplore.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsMainTask: {65866DEC-6A11-4DDE-9A9D-841770E8F303} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {68005A10-E28F-454E-A988-7ABF7E6D4780} - System32\Tasks\{670FF2CC-E165-4146-A8FB-22F28A7C90C9} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.111&LastError=404Task: {6D6A7D1D-840B-4183-96AF-A827F504175D} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exeTask: {741A7824-50A3-428F-9E56-B8698D1A626F} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {766C6591-A855-4108-B804-2C60AC089B27} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {7DF7BCC7-41BA-44D4-B6A1-CDA1D0854CA2} - System32\Tasks\{C1150014-68F2-4137-8F8B-B4E324DBE750} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMainTask: {8AE8D5C7-2118-45D6-B443-F32AE5622B7B} - System32\Tasks\{0EC7CCC5-5A29-4236-AE77-4212CD89879F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/en/abandoninstall?page=tsMainTask: {9F1C2554-4531-4009-9CEF-62CCB6DE3D28} - System32\Tasks\{BC96270F-8E13-4631-B01F-81B83EBAF560} => Iexplore.exe http://ui.skype.com/ui/0/6.7.0.102/en/abandoninstall?page=tsMainTask: {A7A27B1B-0D67-4FC3-9B97-1800710DF30B} - System32\Tasks\RunAsStdUser Task => C:\Users\Tommy\AppData\Local\Oxy\Application\oxy.exeTask: {B673AD96-0AD8-4ECC-9C1C-C2AAEDC075A5} - System32\Tasks\{3A67AEEB-9E99-4B05-8D36-DD649EBA839C} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMainTask: {BEB92D86-73A5-44C8-94EC-5F6E516B9439} - System32\Tasks\{E10BC24C-0C38-484A-A270-05F7444DCB94} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainTask: {C488DBC7-51ED-4A9A-943F-0498D45D4B02} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {C88E4A90-2D11-497D-8F6F-212829E94BF5} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {D1A66FA6-4B2C-410B-966B-603F6DB14051} - \Program aktualizacji online firmy Adobe. No Task FileTask: {F53A4CFA-0A78-4AA5-B267-B8AF7FE2AC1A} - System32\Tasks\{7CAA276F-F6DB-4495-8D85-8B4D90214875} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMainTask: {F597171C-3DA1-4427-AF73-3E6B1CA3D4AA} - System32\Tasks\{89DDB1D0-A47D-429E-B2E0-3E03046A351D} => Iexplore.exe http://ui.skype.com/ui/0/6.5.0.158/en/abandoninstall?page=tsMainTask: {FAD024DA-AF8D-417A-850D-EE99D1AE3C34} - System32\Tasks\{99659999-E82B-4620-82CE-89E32B8AF53E} => Iexplore.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsMainTask: {FB3F9EDE-136A-456C-960B-C57E561A7F29} - System32\Tasks\{3AF4F1BF-9C8D-42D4-9432-43084D400A95} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsBingTask: {FF36BCA4-C3E2-4584-91AA-3D87DDE71713} - System32\Tasks\{AE33FB1D-7B4C-4FBF-B0C8-E4125A489CFD} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainHKU\Guest\...\Winlogon: [Shell] explorer.exe [ 2009-04-02] (Microsoft Corporation)S4 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2012-11-26] ()S2 ServUpdater; C:\Users\Tommy\AppData\Local\ServUpdater\ServiceUpd.exe [156160 2011-12-16] (ServiceUpd)S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [x]S3 F-Secure Standalone Minifilter; \??\C:\Users\Tommy\AppData\Local\Temp\OnlineScanner\Anti-Virus\fsgk.sys [x]S3 lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys [x]S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]ProxyServer: 89.148.12.245:80DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cabDPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cabDPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cabDPF: {E6BB2089-163F-466B-812A-748096614DFD} http://cainternetsecurity.net/scanner/cascanner.cabC:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\bProtector Web DataC:\Users\Tommy\AppData\Local\ServUpdaterC:\Users\Guest\AppData\Roaming\settings.iniC:\Users\Tommy\AppData\Roaming\desktop.iniC:\Users\Tommy\AppData\Roaming\OxyC:\ProgramData\BrowserProtectC:\ProgramData\WPMC:\END" => not found. Could not move "C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll" => Scheduled to move on reboot. HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj => Key deleted successfully. "C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] ()Task: {00A6D866-B9DE-4068-98A0-A4F24CED70DD} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtectTask: {2D2EDF1C-D816-4600-A3F1-389104A56B65} - System32\Tasks\{8AB839A1-32D6-4289-B80A-7C11648CF4B9} => Iexplore.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsMainTask: {65866DEC-6A11-4DDE-9A9D-841770E8F303} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {68005A10-E28F-454E-A988-7ABF7E6D4780} - System32\Tasks\{670FF2CC-E165-4146-A8FB-22F28A7C90C9} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.111&LastError=404Task: {6D6A7D1D-840B-4183-96AF-A827F504175D} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exeTask: {741A7824-50A3-428F-9E56-B8698D1A626F} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {766C6591-A855-4108-B804-2C60AC089B27} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {7DF7BCC7-41BA-44D4-B6A1-CDA1D0854CA2} - System32\Tasks\{C1150014-68F2-4137-8F8B-B4E324DBE750} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMainTask: {8AE8D5C7-2118-45D6-B443-F32AE5622B7B} - System32\Tasks\{0EC7CCC5-5A29-4236-AE77-4212CD89879F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/en/abandoninstall?page=tsMainTask: {9F1C2554-4531-4009-9CEF-62CCB6DE3D28} - System32\Tasks\{BC96270F-8E13-4631-B01F-81B83EBAF560} => Iexplore.exe http://ui.skype.com/ui/0/6.7.0.102/en/abandoninstall?page=tsMainTask: {A7A27B1B-0D67-4FC3-9B97-1800710DF30B} - System32\Tasks\RunAsStdUser Task => C:\Users\Tommy\AppData\Local\Oxy\Application\oxy.exeTask: {B673AD96-0AD8-4ECC-9C1C-C2AAEDC075A5} - System32\Tasks\{3A67AEEB-9E99-4B05-8D36-DD649EBA839C} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMainTask: {BEB92D86-73A5-44C8-94EC-5F6E516B9439} - System32\Tasks\{E10BC24C-0C38-484A-A270-05F7444DCB94} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainTask: {C488DBC7-51ED-4A9A-943F-0498D45D4B02} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {C88E4A90-2D11-497D-8F6F-212829E94BF5} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {D1A66FA6-4B2C-410B-966B-603F6DB14051} - \Program aktualizacji online firmy Adobe. No Task FileTask: {F53A4CFA-0A78-4AA5-B267-B8AF7FE2AC1A} - System32\Tasks\{7CAA276F-F6DB-4495-8D85-8B4D90214875} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMainTask: {F597171C-3DA1-4427-AF73-3E6B1CA3D4AA} - System32\Tasks\{89DDB1D0-A47D-429E-B2E0-3E03046A351D} => Iexplore.exe http://ui.skype.com/ui/0/6.5.0.158/en/abandoninstall?page=tsMainTask: {FAD024DA-AF8D-417A-850D-EE99D1AE3C34} - System32\Tasks\{99659999-E82B-4620-82CE-89E32B8AF53E} => Iexplore.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsMainTask: {FB3F9EDE-136A-456C-960B-C57E561A7F29} - System32\Tasks\{3AF4F1BF-9C8D-42D4-9432-43084D400A95} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsBingTask: {FF36BCA4-C3E2-4584-91AA-3D87DDE71713} - System32\Tasks\{AE33FB1D-7B4C-4FBF-B0C8-E4125A489CFD} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainHKU\Guest\...\Winlogon: [Shell] explorer.exe [ 2009-04-02] (Microsoft Corporation)S4 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2012-11-26] ()S2 ServUpdater; C:\Users\Tommy\AppData\Local\ServUpdater\ServiceUpd.exe [156160 2011-12-16] (ServiceUpd)S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [x]S3 F-Secure Standalone Minifilter; \??\C:\Users\Tommy\AppData\Local\Temp\OnlineScanner\Anti-Virus\fsgk.sys [x]S3 lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys [x]S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sysProxyServer: 89.148.12.245:80DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cabDPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cabDPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cabDPF: {E6BB2089-163F-466B-812A-748096614DFD} http://cainternetsecurity.net/scanner/cascanner.cabC:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\bProtector Web DataC:\Users\Tommy\AppData\Local\ServUpdaterC:\Users\Guest\AppData\Roaming\settings.iniC:\Users\Tommy\AppData\Roaming\desktop.iniC:\Users\Tommy\AppData\Roaming\OxyC:\ProgramData\BrowserProtectC:\ProgramData\WPMC:\END" => File/Directory not found. HKU\HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PSearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL = http://www.mirarsearch.com/?q={searchTerms}&a=SEARCHSearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =SearchScopes: HKCU - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL =SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()Toolbar: HKCU - No Name - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No FileToolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No FileToolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No FileFF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xmlFF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PFF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\FirefoxFF Extension: IB Updater - C:\Program Files\IB Updater\Firefox [2013-01-17]FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla ThunderbirdFF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] -CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\System32\jmdp\pnte.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-07]CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] ()Task: {00A6D866-B9DE-4068-98A0-A4F24CED70DD} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtectTask: {2D2EDF1C-D816-4600-A3F1-389104A56B65} - System32\Tasks\{8AB839A1-32D6-4289-B80A-7C11648CF4B9} => Iexplore.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsMainTask: {65866DEC-6A11-4DDE-9A9D-841770E8F303} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {68005A10-E28F-454E-A988-7ABF7E6D4780} - System32\Tasks\{670FF2CC-E165-4146-A8FB-22F28A7C90C9} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.111&LastError=404Task: {6D6A7D1D-840B-4183-96AF-A827F504175D} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exeTask: {741A7824-50A3-428F-9E56-B8698D1A626F} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {766C6591-A855-4108-B804-2C60AC089B27} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {7DF7BCC7-41BA-44D4-B6A1-CDA1D0854CA2} - System32\Tasks\{C1150014-68F2-4137-8F8B-B4E324DBE750} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMainTask: {8AE8D5C7-2118-45D6-B443-F32AE5622B7B} - System32\Tasks\{0EC7CCC5-5A29-4236-AE77-4212CD89879F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/en/abandoninstall?page=tsMainTask: {9F1C2554-4531-4009-9CEF-62CCB6DE3D28} - System32\Tasks\{BC96270F-8E13-4631-B01F-81B83EBAF560} => Iexplore.exe http://ui.skype.com/ui/0/6.7.0.102/en/abandoninstall?page=tsMainTask: {A7A27B1B-0D67-4FC3-9B97-1800710DF30B} - System32\Tasks\RunAsStdUser Task => C:\Users\Tommy\AppData\Local\Oxy\Application\oxy.exeTask: {B673AD96-0AD8-4ECC-9C1C-C2AAEDC075A5} - System32\Tasks\{3A67AEEB-9E99-4B05-8D36-DD649EBA839C} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMainTask: {BEB92D86-73A5-44C8-94EC-5F6E516B9439} - System32\Tasks\{E10BC24C-0C38-484A-A270-05F7444DCB94} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainTask: {C488DBC7-51ED-4A9A-943F-0498D45D4B02} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {C88E4A90-2D11-497D-8F6F-212829E94BF5} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {D1A66FA6-4B2C-410B-966B-603F6DB14051} - \Program aktualizacji online firmy Adobe. No Task FileTask: {F53A4CFA-0A78-4AA5-B267-B8AF7FE2AC1A} - System32\Tasks\{7CAA276F-F6DB-4495-8D85-8B4D90214875} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMainTask: {F597171C-3DA1-4427-AF73-3E6B1CA3D4AA} - System32\Tasks\{89DDB1D0-A47D-429E-B2E0-3E03046A351D} => Iexplore.exe http://ui.skype.com/ui/0/6.5.0.158/en/abandoninstall?page=tsMainTask: {FAD024DA-AF8D-417A-850D-EE99D1AE3C34} - System32\Tasks\{99659999-E82B-4620-82CE-89E32B8AF53E} => Iexplore.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsMainTask: {FB3F9EDE-136A-456C-960B-C57E561A7F29} - System32\Tasks\{3AF4F1BF-9C8D-42D4-9432-43084D400A95} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsBingTask: {FF36BCA4-C3E2-4584-91AA-3D87DDE71713} - System32\Tasks\{AE33FB1D-7B4C-4FBF-B0C8-E4125A489CFD} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainGuest\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value not found. HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=BCA800224386C0FAHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PSearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.nationzoom.com/web/?type=ds&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30P&q={searchTerms}SearchScopes: HKLM - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL = http://www.mirarsearch.com/?q={searchTerms}&a=SEARCHSearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =SearchScopes: HKCU - {5FDD7069-1149-4941-9A1C-83C0AB5DDAA7} URL =SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()Toolbar: HKCU - No Name - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No FileToolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No FileToolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No FileFF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xmlFF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389109367&from=mp3&uid=ST9250320AS_5SW2C30PXXXX5SW2C30PFF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\FirefoxFF Extension: IB Updater - C:\Program Files\IB Updater\Firefox [2013-01-17]FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla ThunderbirdFF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] -CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [fgfdfcbeamjnjdejakdidpniblllnbpg] - C:\Windows\System32\jmdp\pnte.crx [2013-01-17]CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-01-07]CHR HKLM\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\System32\jmdp\SweetNT.crx [2011-10-10]AppInit_DLLs: C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll [2520016 2013-03-22] ()Task: {00A6D866-B9DE-4068-98A0-A4F24CED70DD} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtectTask: {2D2EDF1C-D816-4600-A3F1-389104A56B65} - System32\Tasks\{8AB839A1-32D6-4289-B80A-7C11648CF4B9} => Iexplore.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?page=tsMainTask: {65866DEC-6A11-4DDE-9A9D-841770E8F303} - System32\Tasks\Ad-Aware Update (Daily 1) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {68005A10-E28F-454E-A988-7ABF7E6D4780} - System32\Tasks\{670FF2CC-E165-4146-A8FB-22F28A7C90C9} => Iexplore.exe http://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.111&LastError=404Task: {6D6A7D1D-840B-4183-96AF-A827F504175D} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exeTask: {741A7824-50A3-428F-9E56-B8698D1A626F} - System32\Tasks\Ad-Aware Update (Daily 3) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {766C6591-A855-4108-B804-2C60AC089B27} - System32\Tasks\Ad-Aware Update (Daily 4) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {7DF7BCC7-41BA-44D4-B6A1-CDA1D0854CA2} - System32\Tasks\{C1150014-68F2-4137-8F8B-B4E324DBE750} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsMainTask: {8AE8D5C7-2118-45D6-B443-F32AE5622B7B} - System32\Tasks\{0EC7CCC5-5A29-4236-AE77-4212CD89879F} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/en/abandoninstall?page=tsMainTask: {9F1C2554-4531-4009-9CEF-62CCB6DE3D28} - System32\Tasks\{BC96270F-8E13-4631-B01F-81B83EBAF560} => Iexplore.exe http://ui.skype.com/ui/0/6.7.0.102/en/abandoninstall?page=tsMainTask: {A7A27B1B-0D67-4FC3-9B97-1800710DF30B} - System32\Tasks\RunAsStdUser Task => C:\Users\Tommy\AppData\Local\Oxy\Application\oxy.exeTask: {B673AD96-0AD8-4ECC-9C1C-C2AAEDC075A5} - System32\Tasks\{3A67AEEB-9E99-4B05-8D36-DD649EBA839C} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMainTask: {BEB92D86-73A5-44C8-94EC-5F6E516B9439} - System32\Tasks\{E10BC24C-0C38-484A-A270-05F7444DCB94} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainTask: {C488DBC7-51ED-4A9A-943F-0498D45D4B02} - System32\Tasks\Ad-Aware Update (Daily 2) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {C88E4A90-2D11-497D-8F6F-212829E94BF5} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exeTask: {D1A66FA6-4B2C-410B-966B-603F6DB14051} - \Program aktualizacji online firmy Adobe. No Task FileTask: {F53A4CFA-0A78-4AA5-B267-B8AF7FE2AC1A} - System32\Tasks\{7CAA276F-F6DB-4495-8D85-8B4D90214875} => Iexplore.exe http://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMainTask: {F597171C-3DA1-4427-AF73-3E6B1CA3D4AA} - System32\Tasks\{89DDB1D0-A47D-429E-B2E0-3E03046A351D} => Iexplore.exe http://ui.skype.com/ui/0/6.5.0.158/en/abandoninstall?page=tsMainTask: {FAD024DA-AF8D-417A-850D-EE99D1AE3C34} - System32\Tasks\{99659999-E82B-4620-82CE-89E32B8AF53E} => Iexplore.exe http://ui.skype.com/ui/0/6.0.0.126/en/abandoninstall?page=tsMainTask: {FB3F9EDE-136A-456C-960B-C57E561A7F29} - System32\Tasks\{3AF4F1BF-9C8D-42D4-9432-43084D400A95} => Iexplore.exe http://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsBingTask: {FF36BCA4-C3E2-4584-91AA-3D87DDE71713} - System32\Tasks\{AE33FB1D-7B4C-4FBF-B0C8-E4125A489CFD} => Iexplore.exe http://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMainHKU\Guest\...\Winlogon: [Shell] explorer.exe [ 2009-04-02] (Microsoft Corporation)IB Updater => Service not found. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully. => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-01-19 12:33:00)<= C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll => Moved successfully. ==== End of Fixlog ====