:OTL
IE - HKLM\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=c088ee0b-aaf2-4698-aad7-591261042fe2&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=c088ee0b-aaf2-4698-aad7-591261042fe2&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=c088ee0b-aaf2-4698-aad7-591261042fe2&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredibar.com/mb139?a=6OyLuOBqIN&i=26
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=c088ee0b-aaf2-4698-aad7-591261042fe2&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=c088ee0b-aaf2-4698-aad7-591261042fe2&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=PL&userid=c088ee0b-aaf2-4698-aad7-591261042fe2&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE - HKCU\..\SearchScopes\{0D59016B-B0D5-4D4A-B46B-0407F6166A31}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=7B8DFEB5-141E-47E8-B6EC-CEA6093ADD9C&apn_sauid=F55F26CA-A6E4-4371-8D0B-1AA88D7601D0
IE - HKCU\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/mb139/?search={searchTerms}&loc=IB_DS&a=6OyLuOBqIN&i=26
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.startup.homepage: "http://mystart.incredibar.com/mb139?a=6OyLuOBqIN&i=26"
FF - prefs.js..keyword.URL: "http://mystart.incredibar.com/mb139/?loc=IB_DS&a=6OyLuOBqIN&&i=26&search="
[2012-08-19 12:54:22 | 000,000,000 | ---D | M] (incredibar.com) -- C:\Users\Luki\AppData\Roaming\mozilla\Firefox\Profiles\kzc4iay4.default\extensions\ffxtlbr@incredibar.com
[2012-08-04 15:53:09 | 000,002,299 | ---- | M] () -- C:\Users\Luki\AppData\Roaming\Mozilla\Firefox\Profiles\kzc4iay4.default\searchplugins\askcom.xml
[2012-08-19 12:54:01 | 000,002,203 | ---- | M] () -- C:\Users\Luki\AppData\Roaming\Mozilla\Firefox\Profiles\kzc4iay4.default\searchplugins\MyStart Search.xml
:Commands
[emptytemp]Zidentyfikowani użytkownicy: Alexa [Bot], Areh, Bing [Bot], boger, bruce3, Cristian, Dimatheus, Drach_11, edek112, Google [Bot], Google Adsense [Bot], goomish, Ja$, karnistery, lith, LonngerM, michal.a86, Orange Ekspert, piter722, Razi, strumyk17, to_juz_koniec, utrivv, XtraProblemator, Yahoo [Bot], zoso71