Malwarebytes Anti-Malware www.malwarebytes.org Data skanowania: 2015-08-25 Czas skanowania: 01:20 Raport: log z malwarebytes.txt Administrator: Tak Wersja: 2.01.6.1022 Baza szkodliwego oprogramowania: v2015.08.24.06 Baza danych rootkitów: v2015.08.16.01 Licencja: Wersja próbna Ochrona przed złośliwym oprogramowaniem: Włączony Ochrona przed szkodliwymi stronami: Włączony Samoobrona: Wyłączony System operacyjny: Windows 7 Service Pack 1 Procesor: x64 System plików: NTFS Użytkownik: User Typ skanowania: Dokładne skanowanie Wynik: Zakończono Obiekty przeskanowane: 425547 Czas, który upłynął: 31 min, 37 s Pamięć: Włączony Autostart: Włączony System plików: Włączony Archiwa: Włączony Rootkity: Wyłączony Heurystyka: Włączony PUP: Włączony PUM: Włączony Procesy: 2 PUP.Optional.XTab.A, C:\Program Files (x86)\MiniLite\ProtectService.exe, 2452, Usunięcie-po-restarcie, [0a9c9874dab1fb3bd018e377926f51af] PUP.Optional.WindowsMangerProtect.A, C:\ProgramData\JWinManProJ\WinManPro.exe, 1800, Usunięcie-po-restarcie, [fbabc84406850c2af85d6ec923e0f10f] Moduły: 4 PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Sumkix.dll, Usunięcie-po-restarcie, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Sumkix.dll, Usunięcie-po-restarcie, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.MiniLite.A, C:\Program Files (x86)\MiniLite\msvcp110.dll, Usunięcie-po-restarcie, [555157b5246778be9c5328f357ac7987], PUP.Optional.MiniLite.A, C:\Program Files (x86)\MiniLite\msvcr110.dll, Usunięcie-po-restarcie, [555157b5246778be9c5328f357ac7987], Klucze rejestru: 21 PUP.Optional.XTab.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IHProtect Service, Przeniesiono do kwarantanny, [0a9c9874dab1fb3bd018e377926f51af], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{950ef4df-b9dd-4b97-9e34-5c7d25a5eb88}, Przeniesiono do kwarantanny, [2b7bdc306328a6904debe7b3e121e31d], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{b03eb020-8a0b-431d-ae85-3600a2c9df68}, Przeniesiono do kwarantanny, [2b7bdc306328a6904debe7b3e121e31d], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{567E42F2-33AD-4CF6-BB6D-03C450A52D7D}, Przeniesiono do kwarantanny, [2b7bdc306328a6904debe7b3e121e31d], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{567E42F2-33AD-4CF6-BB6D-03C450A52D7D}, Przeniesiono do kwarantanny, [2b7bdc306328a6904debe7b3e121e31d], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{567E42F2-33AD-4CF6-BB6D-03C450A52D7D}, Przeniesiono do kwarantanny, [2b7bdc306328a6904debe7b3e121e31d], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{b03eb020-8a0b-431d-ae85-3600a2c9df68}, Przeniesiono do kwarantanny, [2b7bdc306328a6904debe7b3e121e31d], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{b03eb020-8a0b-431d-ae85-3600a2c9df68}, Przeniesiono do kwarantanny, [2b7bdc306328a6904debe7b3e121e31d], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}, Przeniesiono do kwarantanny, [2b7bdc306328a6904debe7b3e121e31d], PUP.Optional.FFPluginHp.A, HKLM\SOFTWARE\WOW6432NODE\FFPluginHp, Przeniesiono do kwarantanny, [495d1bf11774dc5a9234b86b14ef48b8], PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, Przeniesiono do kwarantanny, [198d6d9f3d4e2313d3526ec6fe0553ad], PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\istartsurfSoftware, Przeniesiono do kwarantanny, [5e48b458c6c58da991b19cace91a669a], PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, Przeniesiono do kwarantanny, [e8beff0d513abb7b4e14365fd4304cb4], PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH, Przeniesiono do kwarantanny, [8b1b7b91d2b943f3a9ba357e81839e62], PUP.Optional.Linkury.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{24FF7243-B810-405A-ACC1-78E114041756}, Przeniesiono do kwarantanny, [9115bd4f1a7189ad91220da69f65619f], PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsMangerProtect, Przeniesiono do kwarantanny, [fbabc84406850c2af85d6ec923e0f10f], PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, Przeniesiono do kwarantanny, [2284828af893c37331887cc17a8932ce], PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{IELNKSRCH}, Przeniesiono do kwarantanny, [3a6c0408deadfc3a5221ff2126ddd729], PUP.Optional.DeskCut.A, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\MOZILLA\EXTENDS, Przeniesiono do kwarantanny, [9d097d8fe2a96acc6a18d1e5fa0abf41], PUP.Optional.ProductSetup.A, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\PRODUCTSETUP, Przeniesiono do kwarantanny, [3d69c745513a3df9dc48901db94be41c], PUP.Optional.Linkury.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Tristip, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], Wartości rejestru: 14 PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\ielnksrch|DisplayName, Search the web, Przeniesiono do kwarantanny, [8b1b7b91d2b943f3a9ba357e81839e62] PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\ielnksrch|URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}, Przeniesiono do kwarantanny, [3f6753b999f2072fe87c3f743fc5946c] PUP.Optional.Linkury.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}, Przeniesiono do kwarantanny, [5a4c709c018a2214bbaa437045bfc937] PUP.Optional.Linkury.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{24FF7243-B810-405A-ACC1-78E114041756}|Publisher, Linkury, Przeniesiono do kwarantanny, [9115bd4f1a7189ad91220da69f65619f] PUP.Optional.DefaultSearchProtected.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|defsearchp@gmail.com, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\defsearchp@gmail.com, Przeniesiono do kwarantanny, [8b1bc448692296a048e9981b11f3df21] PUP.Optional.DeskCut.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|deskCutv2@gmail.com, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com, Przeniesiono do kwarantanny, [4b5b69a30f7c37ff3e8980a063a0ed13] PUP.Optional.Linkury.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TRISTIP|ImagePath, C:\ProgramData\Tristip\Tristip.exe, Przeniesiono do kwarantanny, [b9ed20ecb0dbe84eded92af144bf8878] PUP.Optional.Linkury.A, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\ENVIRONMENT|SNP, http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D?publisher=APSFIsc&co=PL&userid=c978bad3-7930-b370-841a-163ded2c6ae9&searchtype=sc&installDate=24-08-2015&barcodeid=50028003&channelid=3, Przeniesiono do kwarantanny, [7135da326625cd69ded3862d897bf709] PUP.Optional.Linkury.A, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\ENVIRONMENT|SNF, C:\ProgramData\Tristips\snp.sc, Przeniesiono do kwarantanny, [c6e0ca42484383b3733dd5defa0a55ab] PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ielnksrch}|DisplayName, Search the web, Przeniesiono do kwarantanny, [3a6c0408deadfc3a5221ff2126ddd729] PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ielnksrch}|URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}, Przeniesiono do kwarantanny, [65417e8e7b10b482f66b892a19ebbf41] PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}, Przeniesiono do kwarantanny, [b2f4709c7b10999d9fc3d2e114f06b95] PUP.Optional.DeskCut.A, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\MOZILLA\EXTENDS|appid, deskCutv2@gmail.com, Przeniesiono do kwarantanny, [9d097d8fe2a96acc6a18d1e5fa0abf41] PUP.Optional.ProductSetup.A, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\PRODUCTSETUP|tb, 0Q1O1R1R0D1G1J1S, Przeniesiono do kwarantanny, [3d69c745513a3df9dc48901db94be41c] Dane rejestru: 9 PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.istartsurf.com/?type=sc&ts=1440441017&z=fd08ddff55a9051bbd1430eg0z6zbe4z5z0e6t0g6g&from=cor&uid=ST1000LM024XHN-M101MBB_S2RQJ9CC540016, Dobry: (firefox.exe), Zły: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.istartsurf.com/?type=sc&ts=1440441017&z=fd08ddff55a9051bbd1430eg0z6zbe4z5z0e6t0g6g&from=cor&uid=ST1000LM024XHN-M101MBB_S2RQJ9CC540016),Zastąpiono,[2c7a25e791fae74f78ed381756af956b] PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1440441017&z=fd08ddff55a9051bbd1430eg0z6zbe4z5z0e6t0g6g&from=cor&uid=ST1000LM024XHN-M101MBB_S2RQJ9CC540016, Dobry: (iexplore.exe), Zły: (C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1440441017&z=fd08ddff55a9051bbd1430eg0z6zbe4z5z0e6t0g6g&from=cor&uid=ST1000LM024XHN-M101MBB_S2RQJ9CC540016),Zastąpiono,[c1e58884ef9ca3936bfbf45b48bd50b0] PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.istartsurf.com/?type=sc&ts=1440441017&z=fd08ddff55a9051bbd1430eg0z6zbe4z5z0e6t0g6g&from=cor&uid=ST1000LM024XHN-M101MBB_S2RQJ9CC540016, Dobry: (firefox.exe), Zły: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.istartsurf.com/?type=sc&ts=1440441017&z=fd08ddff55a9051bbd1430eg0z6zbe4z5z0e6t0g6g&from=cor&uid=ST1000LM024XHN-M101MBB_S2RQJ9CC540016),Zastąpiono,[1492df2df7940a2c91d4e6693ec7f907] PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1440441017&z=fd08ddff55a9051bbd1430eg0z6zbe4z5z0e6t0g6g&from=cor&uid=ST1000LM024XHN-M101MBB_S2RQJ9CC540016, Dobry: (iexplore.exe), Zły: (C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1440441017&z=fd08ddff55a9051bbd1430eg0z6zbe4z5z0e6t0g6g&from=cor&uid=ST1000LM024XHN-M101MBB_S2RQJ9CC540016),Zastąpiono,[4f578686d6b562d43234b29df1141ee2] PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}, Dobry: (www.google.com), Zły: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}),Zastąpiono,[3a6c4ac212794de97f998ecd57aee11f] PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_f6oPv0n193dDhC0q6fdQbze7GIf4dkmNfiiNX_8oY1f1Wp5TJucZC0w7csQj9KjEyjCR5fKXlzj5g,,, Dobry: (www.google.com), Zły: (http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_f6oPv0n193dDhC0q6fdQbze7GIf4dkmNfiiNX_8oY1f1Wp5TJucZC0w7csQj9KjEyjCR5fKXlzj5g,,),Zastąpiono,[abfb26e66f1c26107d9c510a58ad55ab] PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}, Dobry: (www.google.com), Zły: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}),Zastąpiono,[7e28aa6213789a9c7e9a7cdf9471b848] PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SearchAssistant, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}, Dobry: (www.google.com), Zły: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}),Zastąpiono,[7b2b070512796acc5eba13489471ca36] PUP.Optional.Linkury.ShrtCln, HKU\S-1-5-21-1130217176-4031021830-1519301973-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}, Dobry: (www.google.com), Zły: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpDcfUcAG3j_RN2jCNaJGIfPQafl8pUAIxyr0r6N4MahHcuXomjHLzzmmT2fftk6_fLL3uEoTJBN0NB99ZBvSeK7iB8QhnTjdk7t6HXB3J3X4WN_F94CtQe7mhzxAJ7FBUqwaMuhLHmvgg,,&q={searchTerms}),Zastąpiono,[a600a963dab146f02dedce8d48bd3bc5] Foldery: 43 PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\include, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\include\tools, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\lib, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\module, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\pack, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\en, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\en-US, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\es, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\es-419, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\fr, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\fr-BE, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\fr-CA, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\fr-CH, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\fr-LU, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\it, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\it-CH, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\pl, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\pt-BR, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\ru, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\ru-MO, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\tr, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\vi, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\zh-CN, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\zh-TW, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\skin, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\defaults, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\defaults\preferences, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\modules, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DefaultSearchProtected.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\defsearchp@gmail.com, Przeniesiono do kwarantanny, [06a0ec20b7d4f6408241978205fec937], PUP.Optional.DefaultSearchProtected.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\defsearchp@gmail.com\chrome, Przeniesiono do kwarantanny, [06a0ec20b7d4f6408241978205fec937], PUP.Optional.DefaultSearchProtected.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\defsearchp@gmail.com\chrome\content, Przeniesiono do kwarantanny, [06a0ec20b7d4f6408241978205fec937], PUP.Optional.DefaultSearchProtected.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\defsearchp@gmail.com\chrome\skin, Przeniesiono do kwarantanny, [06a0ec20b7d4f6408241978205fec937], PUP.Optional.ProtectWindowsManager.F, C:\ProgramData\JWinManProJ, Usunięcie-po-restarcie, [6b3b1def18736dc9486a43d709fa8d73], PUP.Optional.ProtectWindowsManager.F, C:\ProgramData\JWinManProJ\update, Przeniesiono do kwarantanny, [6b3b1def18736dc9486a43d709fa8d73], PUP.Optional.Linkury.A, C:\ProgramData\Tristip, Usunięcie-po-restarcie, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\ondemand, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristips, Przeniesiono do kwarantanny, [3f67c34990fbd066396150cba55e07f9], PUP.Optional.MiniLite.A, C:\Program Files (x86)\MiniLite, Usunięcie-po-restarcie, [555157b5246778be9c5328f357ac7987], Pliki: 119 PUP.Optional.XTab.A, C:\Program Files (x86)\MiniLite\ProtectService.exe, Usunięcie-po-restarcie, [0a9c9874dab1fb3bd018e377926f51af], PUP.Optional.InstallCore.A, C:\$Recycle.Bin\S-1-5-21-1130217176-4031021830-1519301973-1000\$RRYAWJR.cpl, Przeniesiono do kwarantanny, [3274bf4d6f1c72c4ab1aee9fec19ff01], PUP.Optional.InstallCore.A, C:\$Recycle.Bin\S-1-5-21-1130217176-4031021830-1519301973-1000\$RL0J1K1.exe, Przeniesiono do kwarantanny, [c3e311fb3952b482ad185835d134d62a], PUP.Optional.InstallCore, C:\$Recycle.Bin\S-1-5-21-1130217176-4031021830-1519301973-1000\$RU91THK.cpl, Przeniesiono do kwarantanny, [2482e5276823b6805140246a8481a858], PUP.Optional.ELEX, C:\$Recycle.Bin\S-1-5-21-1130217176-4031021830-1519301973-1000\$R1KSU0R\key.dll, Przeniesiono do kwarantanny, [634334d8a8e386b008c2dfef58a94cb4], PUP.Optional.RelevantKnowledge, C:\Windows\System32\rlls64.dll, Przeniesiono do kwarantanny, [b4f27e8ebccfca6cf6976ffe0203fc04], PUP.Optional.InstallCore, C:\Users\User\AppData\Local\Temp\PDF-XChange Viewer 2.exe, Przeniesiono do kwarantanny, [594de12b6f1cbd791a77c9c5a65f5ea2], PUP.Optional.XTab.A, C:\Users\User\AppData\Local\Temp\Zero-tmp\tmp\MiniLite_v6.6.2.2770.exe, Przeniesiono do kwarantanny, [a204f913cbc0f93d0bdd66f44cb5cd33], PUP.Optional.Bundle, C:\Users\User\Downloads\Media-Player-Classic-BE(42122)-dp.exe, Przeniesiono do kwarantanny, [792dc04c731879bd37a464d546bb32ce], PUP.Optional.Babylon.A, C:\Users\User\Downloads\Unlocker1.9.2.exe, Przeniesiono do kwarantanny, [2581f11b25662f0703299353bb45c63a], PUP.Optional.Amonetize, C:\Users\User\Downloads\Install flashplayer_10924_i6494014_il345.exe, Przeniesiono do kwarantanny, [6d39f71590fbdb5b427c334aa16013ed], PUP.Optional.Bundle, C:\Users\User\Downloads\DVDRanger-Player(34250)-dp.exe, Przeniesiono do kwarantanny, [c5e195778704cb6b15c6d0699a67b947], PUP.Optional.InstallCore.A, C:\Users\User\Downloads\Spybot-Search-Destroy(12546).exe, Przeniesiono do kwarantanny, [297d0705b9d2cc6a0c09738543bd6997], PUP.Optional.Linkury.Gen.A, C:\Windows\SysWOW64\findit.xml, Przeniesiono do kwarantanny, [cbdb7d8f6b20f442b7b729f4db282ed2], PUP.Optional.Linkury.ShrtCln, C:\Users\Test\AppData\Roaming\Mozilla\Firefox\Profiles\6v88x2fy.default\searchplugins\findit.xml, Przeniesiono do kwarantanny, [dec8eb2133587fb752dcb9ff15ef8a76], PUP.Optional.Linkury.ShrtCln, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\searchplugins\findit.xml, Przeniesiono do kwarantanny, [4a5c03092f5cc76fcc62e0d819eb758b], PUP.Optional.WindowsMangerProtect.A, C:\ProgramData\JWinManProJ\WinManPro.exe, Usunięcie-po-restarcie, [fbabc84406850c2af85d6ec923e0f10f], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome.manifest, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\install.rdf, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\index.html, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\quick_start.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\quick_start.xul, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\include\speed_dial.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\include\tools\about_blank_hook.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\include\tools\misc.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\include\tools\popup_image_helper.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\include\tools\urlrequestor.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\lib\doT.min.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\module\hotSearch.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\module\mostgrid.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\module\search.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\module\stat.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\pack\common.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\pack\ga.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\content\js\pack\xagainit.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\en\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\en-US\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\es\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\es-419\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\fr\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\fr-BE\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\fr-CA\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\fr-CH\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\fr-LU\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\it\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\it-CH\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\pl\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\pt-BR\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\ru\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\ru-MO\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\tr\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\vi\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\zh-CN\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\locale\zh-TW\locale.properties, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\skin\default_logo.png, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\skin\googlelogo.png, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\skin\google_trends.png, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\skin\icon.png, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\skin\loading.gif, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\skin\logo.png, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\skin\luck.png, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\skin\newtab.ico, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\skin\simple.css, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\chrome\skin\style.css, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\defaults\preferences\fvd.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\defaults\preferences\preferences.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\modules\addonmanager.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\modules\aes.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\modules\config.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\modules\dialogs.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\modules\last_tab.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\modules\misc.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\modules\properties.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\modules\remoterequest.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\modules\restoreprefs.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\deskCutv2@gmail.com\modules\settings.js, Przeniesiono do kwarantanny, [06a0e5273c4f78bef5a0c158b350649c], PUP.Optional.DefaultSearchProtected.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\defsearchp@gmail.com\chrome.manifest, Przeniesiono do kwarantanny, [06a0ec20b7d4f6408241978205fec937], PUP.Optional.DefaultSearchProtected.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\defsearchp@gmail.com\install.rdf, Przeniesiono do kwarantanny, [06a0ec20b7d4f6408241978205fec937], PUP.Optional.DefaultSearchProtected.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\defsearchp@gmail.com\chrome\content\jquery-2.1.0.min.js, Przeniesiono do kwarantanny, [06a0ec20b7d4f6408241978205fec937], PUP.Optional.DefaultSearchProtected.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\defsearchp@gmail.com\chrome\content\toolbar.xul, Przeniesiono do kwarantanny, [06a0ec20b7d4f6408241978205fec937], PUP.Optional.DefaultSearchProtected.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\extensions\defsearchp@gmail.com\chrome\skin\icon.png, Przeniesiono do kwarantanny, [06a0ec20b7d4f6408241978205fec937], PUP.Optional.ProtectWindowsManager.F, C:\ProgramData\JWinManProJ\updateconf, Przeniesiono do kwarantanny, [6b3b1def18736dc9486a43d709fa8d73], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\TrisPlus.dll, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\conf.config, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Config.xml, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\ff.HP, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\ff.NT, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\FinPlus.dll, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Holdlux.exe, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Holdlux.exe.config, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Lala.dll, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\MathZap.exe, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\MathZap.exe.config, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Medex.dll, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\NewPhase.exe, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\NewPhase.exe.config, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\PrxCfg.xml, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Siltone.dll, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Sumkix.dll, Usunięcie-po-restarcie, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Tristip.dll, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Tristip.exe, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Tristip.exe.config, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\uninstall.exe, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Voyajoyair.dll, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Zimlux.exe, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristip\Zimlux.exe.config, Przeniesiono do kwarantanny, [ccda32dac1cadc5a52471a0155aef907], PUP.Optional.Linkury.A, C:\ProgramData\Tristips\ff.HP, Przeniesiono do kwarantanny, [3f67c34990fbd066396150cba55e07f9], PUP.Optional.Linkury.A, C:\ProgramData\Tristips\ff.NT, Przeniesiono do kwarantanny, [3f67c34990fbd066396150cba55e07f9], PUP.Optional.Linkury.A, C:\ProgramData\Tristips\snp.sc, Przeniesiono do kwarantanny, [3f67c34990fbd066396150cba55e07f9], PUP.Optional.MiniLite.A, C:\Program Files (x86)\MiniLite\msvcp110.dll, Usunięcie-po-restarcie, [555157b5246778be9c5328f357ac7987], PUP.Optional.MiniLite.A, C:\Program Files (x86)\MiniLite\msvcr110.dll, Usunięcie-po-restarcie, [555157b5246778be9c5328f357ac7987], PUP.Optional.Linkury.ShrtCln, C:\Users\Test\AppData\Roaming\Mozilla\Firefox\Profiles\6v88x2fy.default\prefs.js, Dobry: (), Zły: (user_pref("browser.newtab.url", "C:\ProgramData\Tristip\ff.NT");), Zastąpiono,[1b8b3ad2a8e32c0a1cf0ccc9bb4a42be] PUP.Optional.Linkury.ShrtCln, C:\Users\Test\AppData\Roaming\Mozilla\Firefox\Profiles\6v88x2fy.default\prefs.js, Dobry: (browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Zły: (browser.startup.homepage", "C:\ProgramData\Tristip\ff.HP), Zastąpiono,[5254828ae1aabb7b6aec6f2831d435cb] PUP.Optional.Linkury.ShrtCln, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\prefs.js, Dobry: (), Zły: (user_pref("browser.newtab.url", "C:\ProgramData\Tristip\ff.NT");), Zastąpiono,[aef80408107bc2746d9f0590d431936d] PUP.Optional.Linkury.ShrtCln, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\prefs.js, Dobry: (browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Zły: (browser.startup.homepage", "C:\ProgramData\Tristip\ff.HP), Zastąpiono,[386e808cb3d850e6f561118643c29b65] PUP.Optional.DefaultProtectedSearch.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\prefs.js, Dobry: (), Zły: (defsearchp@gmail.com), Zastąpiono,[5650ab61117ace681849c2d54fb69d63] PUP.Optional.DeskCut.A, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vpxad4g1.default-1422203475958\prefs.js, Dobry: (), Zły: (deskCutv2@gmail.com), Zastąpiono,[693d22ea2c5f5cda045e2d6aa85d47b9] Sektory fizyczne: 0 (Nie wykryto zagrożeń) (end)