Tryb drzewa | Tryb normalny

adam1226 · Ilość postów: 77 Dołączył: 14-06-2009

hmm.. akurat nie bylo mnie przy kompie.. jak przyszedlem to sie pokazal znikajacy dymek w tym programie, chyba z jakims zapytaniem i pewnie domyslnie sie zgodzil i mam teraz taki oto wpis:

Kod:

%HKEY_CURRENT_USER%\Software\Cronosoft\LeechGet\Console

I co ja mam teraz zrobic?

martini · 02.07.2009, 18:37:33

nie instalowałeś czasem menadżera plików leechget?
cronosoft to skiny do xp, tapety, logons..

adam1226 · 02.07.2009, 19:12:34

no wlasnie nie...

**yngve** · Ilość postów: 227 Dołączył: 29-01-2009

Poproszę log z GW.

EDIT:
Ogolnie rzecz ujmujac - nie musisz sie przejmowac tymi komunikatami. Za pewne GW skorzystal z redirect, czyli utworzyl tymczasowo ten wpis w rejestrze, aby jakas aplikacja mogla dzialac prawidlowo. Natomiast po restarcie komputera ta regula zostanie automatycznie skasowana. Jest to normalne dzialanie, jezeli izolowana aplikacja probuje uzyskac dostep do rejestru (zmodyfikowac go). Jezeli przeszkadzaja Ci te alerty, to mozesz je spokojnie calkowicie wylaczyc. Nie wplynie to na Twoje bezpieczenstwo. Mozesz tez dodac ta regule na stale do aplikacji, ktora jej potrzebuje, jezeli oczywiscie uzywasz jej codziennie i jest ona zaufana i wtedy alerty rowniez nie beda sie pojawiac.

adam1226 · Ilość postów: 77 Dołączył: 14-06-2009

wolalem skasowac bo bylo na allow ! i register

Ogolnie to jednak jak sie skonczhy tutorial pro to bedzie dzialac jako free.. wtedy sobie wszystko dokonfiguruje...

a log to to? :

Kod:

07.02 00:00:44 firefox.exe REDIRECT access to C: (File)

07.02 00:00:58 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol (File)

07.02 00:06:59 opera.exe ISOLATE on start from explorer.exe

07.02 00:07:00 opera.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 00:07:29 opera.exe READONLY access to \Device\NamedPipe\wkssvc (File)

07.02 00:07:29 opera.exe READONLY access to \Device\NamedPipe\srvsvc (File)

07.02 00:13:03 opera.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 00:15:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Internet Explorer\International\CpMRU\Cache (Registry)

07.02 10:01:16 ECBarre_V_01_b. ISOLATE on start from explorer.exe

07.02 10:01:19 ECBarre_V_01_b. REDIRECT access to C:\Documents and Settings\adam\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT (File)

07.02 10:01:21 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:01:25 ECBarre_V_01_b. REDIRECT access to C:\WINDOWS\Debug\UserMode\userenv.log (File)

07.02 10:01:43 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:01:43 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 10:01:43 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 10:01:43 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 10:01:43 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 10:02:02 opera.exe ISOLATE on start from explorer.exe

07.02 10:02:03 opera.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:02:22 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:02:26 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 10:02:26 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 10:02:26 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 10:02:26 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 10:02:28 ECBarre_V_01_b. READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012009070220090703 (Registry)

07.02 10:02:35 ECBarre_V_01_b. REDIRECT access to C:\Documents and Settings\adam\Ustawienia lokalne\Dane aplikacji\Microsoft\Internet Explorer\MSIMGSIZ.DAT (File)

07.02 10:02:35 ECBarre_V_01_b. READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012009070220090703 (Registry)

07.02 10:02:39 opera.exe READONLY access to \Device\NamedPipe\wkssvc (File)

07.02 10:02:39 opera.exe READONLY access to \Device\NamedPipe\srvsvc (File)

07.02 10:02:45 opera.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:03:24 ECBarre_V_01_b. REDIRECT access to C:\Documents and Settings\adam\Ustawienia lokalne\Historia\History.IE5\MSHist012009070220090703\index.dat (File)

07.02 10:07:45 ECBarre_V_01_b. REDIRECT access to HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B0DE36F12DDE73046BBA31856C42FA84\Usage\Scan (Registry)

07.02 10:07:45 ECBarre_V_01_b. REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 10:07:45 ECBarre_V_01_b. REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 10:09:23 firefox.exe ISOLATE on start from explorer.exe

07.02 10:09:36 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:09:42 firefox.exe ISOLATE on start from firefox.exe

07.02 10:09:42 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:10:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B0DE36F12DDE73046BBA31856C42FA84\Usage\Scan (Registry)

07.02 10:14:21 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:15:56 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:27:05 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:37:32 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{DDBF3F88-C00C-4C45-AF44-1213C6AA6E53} (Registry)

07.02 10:37:33 firefox.exe REDIRECT access to C:\WINDOWS\Debug\UserMode\userenv.log (File)

07.02 10:37:33 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:37:33 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 10:37:33 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 10:37:33 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 10:37:33 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 10:37:34 firefox.exe REDIRECT access to C: (File)

07.02 10:37:44 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:37:44 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 10:37:44 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 10:37:44 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 10:45:05 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{70288CB5-2954-4703-9433-62B5E3379D6F} (Registry)

07.02 10:45:05 firefox.exe REDIRECT access to C:\Documents and Settings\adam\Ustawienia lokalne\Dane aplikacji\Microsoft\Media Player\CurrentDatabase_59R.wmdb (File)

07.02 10:45:06 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:45:06 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 10:45:06 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 10:45:06 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 10:45:06 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 10:45:13 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:45:13 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 10:45:14 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 10:45:14 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 10:45:24 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Scrunch\Post Process Mode (Registry)

07.02 10:45:44 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 10:45:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 10:45:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 10:45:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 10:45:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 10:56:44 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\load.tubemogul.com\InPlayCounts.sol (File)

07.02 11:15:20 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{DB1362E1-0A17-4ADA-A795-7234A9E9BF0A} (Registry)

07.02 11:15:22 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:15:22 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 11:15:22 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 11:15:22 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 11:15:22 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 11:15:45 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:15:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 11:15:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 11:15:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 11:15:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 11:27:16 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{9B9522A9-BEF1-4EBF-9370-39673B2DAC76} (Registry)

07.02 11:27:17 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:27:17 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 11:27:17 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 11:27:17 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 11:27:17 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 11:27:21 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 11:27:22 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 11:27:22 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 11:27:22 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:27:45 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:27:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 11:27:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 11:27:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 11:27:45 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 11:47:11 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{3DCB0797-8F61-4AB9-885E-431394D6D5B1} (Registry)

07.02 11:47:13 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:47:13 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 11:47:13 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 11:47:13 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 11:47:13 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 11:47:16 firefox.exe REDIRECT access to C:\Documents and Settings\adam\Ustawienia lokalne\Historia\History.IE5\MSHist012009070220090703\index.dat (File)

07.02 11:47:24 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:47:24 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 11:47:47 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:47:47 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 11:47:47 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 11:47:47 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 11:47:47 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 11:47:59 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{64B6A75E-B9B9-4B31-BC3D-897F24A8DDF8} (Registry)

07.02 11:48:00 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:48:00 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 11:48:00 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 11:48:00 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 11:48:00 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 11:48:34 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:48:34 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 11:48:34 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 11:48:34 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 11:48:34 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 11:48:54 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{5BB7D111-BD6A-4898-B81F-C72C6A1B7E6B} (Registry)

07.02 11:48:55 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:48:55 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 11:48:55 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 11:48:55 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 11:48:55 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 11:48:58 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 11:48:59 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\.key\ (Registry)

07.02 11:49:02 firefox.exe REDIRECT access to C:\WINDOWS\NeroDigital.ini (File)

07.02 11:49:24 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 11:49:24 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 11:49:24 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 11:49:24 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 11:49:24 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 11:55:51 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\www.affilikredit.de\pap20.sol (File)

07.02 12:02:18 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{0D572255-AB5A-440D-9489-CE89D74AAA56} (Registry)

07.02 12:02:19 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 12:02:20 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 12:02:20 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 12:02:20 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 12:02:20 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 12:02:22 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 12:04:33 firefox.exe REDIRECT access to C: (File)

07.02 12:05:50 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 12:05:50 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 12:05:50 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 12:05:50 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 12:05:50 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 12:06:12 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\naguck.com\naguckso.swf\naguck.sol (File)

07.02 12:07:31 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{2A8FFC80-2C29-4D1F-966E-B7B40798DBCD} (Registry)

07.02 12:07:33 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 12:07:33 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 12:07:33 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 12:07:33 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 12:07:33 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 12:28:57 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{335077CF-12BC-4C89-B550-A4C707BC80B1} (Registry)

07.02 12:28:59 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 12:28:59 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 12:28:59 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 12:28:59 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 12:28:59 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 12:29:02 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 12:29:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 12:29:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 12:29:49 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{8F669929-D1E8-4544-AAB2-AEAA235B054F} (Registry)

07.02 12:30:01 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 12:30:01 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 12:30:01 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 12:30:01 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 12:30:01 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 12:32:11 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 12:44:17 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{D2D2ED13-036E-4B99-A272-15531BB2AE35} (Registry)

07.02 12:44:21 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 12:44:21 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 12:44:22 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 12:44:22 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 12:44:23 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Scrunch\Post Process Mode (Registry)

07.02 12:54:24 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{DFDBA271-5ED9-4286-A720-A8065E8D9CDF} (Registry)

07.02 12:54:27 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 12:54:27 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 12:54:27 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 12:54:27 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 12:54:27 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 12:54:31 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 12:54:32 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\.key\ (Registry)

07.02 12:55:16 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 12:55:16 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 12:55:16 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 12:55:16 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 12:55:16 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 13:09:00 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{D6D9CA4C-67F5-41C4-9406-1709A42AEDDE} (Registry)

07.02 13:09:01 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 13:09:01 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 13:09:01 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 13:09:01 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 13:09:01 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 13:09:16 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 13:09:16 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 13:09:16 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 13:09:16 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 13:09:16 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 13:14:02 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\www.xatech.com\chat.sol (File)

07.02 13:18:38 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\motionsell.com\motionsell_798ad8bbdf400a0c90bf415232524147_.sol (File)

07.02 13:31:24 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{D4156F08-D6E5-4073-AE0C-C5203741E98C} (Registry)

07.02 13:31:25 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 13:31:25 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 13:31:37 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\www.xatech.com\chat.sol (File)

07.02 13:43:40 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{2CCDAEDC-B097-4751-BE90-F4592CEDD24A} (Registry)

07.02 13:43:41 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 13:43:41 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 13:43:41 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 13:43:41 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 13:43:41 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 13:44:17 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 13:44:17 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 13:44:17 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 13:44:17 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 13:44:17 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 13:46:07 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{AA15D310-320C-4408-922C-70836FE734F4} (Registry)

07.02 13:46:07 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 13:46:07 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 13:46:08 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 13:46:08 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 13:46:08 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Scrunch\Post Process Mode (Registry)

07.02 13:47:38 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{506D0190-78AE-4BDE-9ED7-7B056501EC8C} (Registry)

07.02 13:47:39 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 13:47:39 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 13:47:39 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 13:47:39 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 13:47:39 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 13:48:17 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 13:48:17 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 13:48:17 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 13:48:17 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 13:48:17 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 14:06:05 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol (File)

07.02 14:46:23 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{8277619A-CCD0-48BE-B2DF-00D3F70AB3C9} (Registry)

07.02 14:46:25 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 14:46:25 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 14:46:25 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 14:46:25 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 14:46:25 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 14:46:30 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 14:46:31 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 14:46:31 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 14:46:31 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 14:46:38 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Scrunch\Post Process Mode (Registry)

07.02 14:47:03 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 14:47:03 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 14:47:03 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 14:47:03 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 14:47:03 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 14:50:45 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol (File)

07.02 14:52:26 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{247424FF-C886-4573-8CEB-CF421DA642F1} (Registry)

07.02 14:52:26 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 14:52:26 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 14:52:27 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 14:52:27 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 14:52:35 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Scrunch\Post Process Mode (Registry)

07.02 14:58:06 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol (File)

07.02 15:05:45 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\load.tubemogul.com\InPlayCounts.sol (File)

07.02 15:16:48 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{44893503-8F44-4612-91CD-E78FD71DC8C9} (Registry)

07.02 15:16:50 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 15:16:50 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 15:16:50 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 15:16:50 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 15:16:50 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 15:16:55 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 15:16:55 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\.key\ (Registry)

07.02 15:17:04 ECBarre_V_01_b. READONLY access to \Device\NamedPipe\lsass (File)

07.02 15:17:05 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 15:17:05 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

07.02 15:17:05 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL (Registry)

07.02 15:17:05 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings (Registry)

07.02 15:35:41 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{D1BEECF7-BCAB-48CF-A711-751BDAB9AACD} (Registry)

07.02 15:35:42 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 15:35:42 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 15:35:43 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 15:35:43 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 15:35:44 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Scrunch\WMAudio (Registry)

07.02 15:35:46 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\.key\ (Registry)

07.02 15:36:48 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 15:38:14 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 15:40:04 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\hits4pay.com\player.swf\bandwidthInfo.sol (File)

07.02 15:45:33 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{AD58D4FE-EA56-4A95-A957-15EB7CF41D0F} (Registry)

07.02 15:45:34 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 15:45:34 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 15:45:35 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 15:45:35 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 15:45:37 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Scrunch\Post Process Mode (Registry)

07.02 15:46:11 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\s.ytimg.com\videostats.sol (File)

07.02 15:53:18 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{62B0F1F9-1F71-4CF6-9280-C961C04E1A1B} (Registry)

07.02 15:53:18 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 15:53:19 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 15:53:19 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 15:53:19 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 15:53:28 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Scrunch\Post Process Mode (Registry)

07.02 16:09:10 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol (File)

07.02 16:10:34 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol (File)

07.02 16:16:31 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\load.tubemogul.com\InPlayCounts.sol (File)

07.02 16:16:39 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\load.tubemogul.com\InPlayCounts.sol (File)

07.02 16:24:21 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\www.xatech.com\chat.sol (File)

07.02 16:25:32 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{5E520FC6-A1DC-4E63-B5A4-7E2DF885B28E} (Registry)

07.02 16:25:33 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 16:25:33 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 16:25:34 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 16:25:34 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 16:25:43 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Scrunch\Post Process Mode (Registry)

07.02 16:34:54 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\load.tubemogul.com\InPlayCounts.sol (File)

07.02 16:37:52 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{00E097FA-0387-45B2-AD34-E84DDC84909B} (Registry)

07.02 16:37:52 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 16:37:52 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 16:37:53 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 16:37:53 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 16:37:53 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Scrunch\Post Process Mode (Registry)

07.02 16:49:42 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\MediaPlayer\Health\{A584E19B-C553-49C4-9BFE-0515C43FD721} (Registry)

07.02 16:49:43 firefox.exe READONLY access to \Device\NamedPipe\lsass (File)

07.02 16:49:43 firefox.exe READONLY access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Multimedia\ActiveMovie (Registry)

07.02 16:49:44 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name (Registry)

07.02 16:49:44 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\ID (Registry)

07.02 16:49:47 firefox.exe REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Scrunch\Post Process Mode (Registry)

07.02 17:04:02 firefox.exe READONLY access to C:\Documents and Settings\adam\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\GXRAGUJ7\www.action-web-international.com\pap20.sol (File)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup\IExploreLastModifiedLow (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup\IExploreLastModifiedHigh (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup\IEPendingReboot (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{B8DA6310-E19B-11D0-933C-00A0C90DCAA9}\ProxyStubClsid32\ (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{71EE5B20-FB04-11D1-B3A8-00A0C911E8B2}\ProxyStubClsid32\ (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{21F57128-08C9-4638-BA12-22D15D88DC5C}\ProxyStubClsid32\ (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{1CFF0050-6FDD-11D0-9328-00A0C90DCAA9}\ProxyStubClsid32\ (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{1DC9CA50-06EF-11D2-8415-006008C3FBFC}\ProxyStubClsid32\ (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{C7EF7658-E1EE-480E-97EA-D52CB4D76D17}\ProxyStubClsid32\ (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{D10F6761-83E9-11CF-8F20-00805F2CD064}\ProxyStubClsid32\ (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{EAE1BA61-A4ED-11CF-8F20-00805F2CD064}\ProxyStubClsid32\ (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{BEE9B76E-CFE3-11D1-B747-00C04FC2B085}\ProxyStubClsid32\ (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{FE7C4271-210C-448D-9F54-76DAB7047B28}\ProxyStubClsid32\ (Registry)

07.02 17:11:03 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{AA5B6A80-B834-11D0-932F-00A0C90DCAA9}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{539698A0-CDCA-11CF-A5EB-00AA0047A063}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{6AA2C4A0-2B53-11D4-A2A0-00104BD35090}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{B21FB2A1-5B8F-4963-8C21-21450F84ED7F}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{63CDBCB0-C1B1-11D0-9336-00A0C90DCAA9}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{C64713B6-E029-4CC5-9200-438B72890B6A}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{764651D0-38DE-11D4-A2A3-00104BD35090}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{4954E0D0-FBC7-11D1-8410-006008C3FBFC}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{BB1A2AE1-A4F9-11CF-8F20-00805F2CD064}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{BB1A2AE2-A4F9-11CF-8F20-00805F2CD064}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{BB1A2AE3-A4F9-11CF-8F20-00805F2CD064}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{DB01A1E3-A42B-11CF-8F20-00805F2CD064}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{3050F3EE-98B5-11CF-BB82-00AA00BDCE0B}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe READONLY access to HKLM\SOFTWARE\Classes\Interface\{BD72331A-BB61-43A8-96F1-A5B7CD9A4613} (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{93F2F68C-1D1B-11D3-A30E-00C04F79ABD1}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Interface\{000214E6-0000-0000-C000-000000000046}\ProxyStubClsid32\ (Registry)

07.02 17:11:04 firefox.exe READONLY access to HKLM\SOFTWARE\Classes\Interface\{F72C8D97-6DBD-11D1-A1E8-00C04FC2FBE1} (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\shell\open\ddeexec\NoActivateHandler (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\URL Protocol (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\WebNavigableCLSID (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\DefaultIcon\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\DefaultIcon (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\shell\open\ddeexec\Application\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\shell\open\ddeexec\Application (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\shell\open\ddeexec\Topic\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\shell\open\ddeexec\Topic (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\shell\open\command\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\shell\open\command (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\shell\open\ddeexec\NoActivateHandler (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\URL Protocol (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\DefaultIcon\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\DefaultIcon (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\shell\open\ddeexec\Application\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\shell\open\ddeexec\Application (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\shell\open\ddeexec\Topic\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\shell\open\ddeexec\Topic (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\shell\open\command\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\shell\open\command (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\shell\open\ddeexec\NoActivateHandler (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\URL Protocol (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\DefaultIcon\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\DefaultIcon (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\shell\open\ddeexec\Application\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\shell\open\ddeexec\Application (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\shell\open\ddeexec\Topic\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\shell\open\ddeexec\Topic (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\shell\open\command\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\shell\open\command (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\opennew\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\opennew\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\opennew\ddeexec\Application\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\opennew\ddeexec\Application (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\opennew\ddeexec\Topic\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\opennew\ddeexec\Topic (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\opennew\ddeexec\NoActivateHandler (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\opennew\command\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\opennew\command (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\opennew\ddeexec\Application\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\opennew\ddeexec\Application (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\opennew\ddeexec\Topic\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\opennew\ddeexec\Topic (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\opennew\ddeexec\NoActivateHandler (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\opennew\command\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\opennew\command (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\DefaultIcon\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\DefaultIcon (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\open\ddeexec\Application\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\open\ddeexec\Application (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\open\ddeexec\Topic\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\open\ddeexec\Topic (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\open\command\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\open\command (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\DefaultIcon\ (Registry)

07.02 17:11:04 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\DefaultIcon (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\FriendlyTypeName (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\FriendlyTypeName (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\FriendlyTypeName (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\HTTP\shell\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\https\shell\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\ftp\shell\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\open\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\open\MUIVerb (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\print\command\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\printto\command\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\htmlfile\shell\opennew\MUIVerb (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\open\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\open\MUIVerb (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mhtmlfile\shell\opennew\MUIVerb (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\InternetShortcut\shell\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\Applications\iexplore.exe\shell\open\command\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\CLSID\{0002DF01-0000-0000-C000-000000000046}\LocalServer32\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\telnet\FriendlyTypeName (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\telnet\shell\open\command\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\rlogin\FriendlyTypeName (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\rlogin\shell\open\command\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\tn3270\FriendlyTypeName (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\tn3270\shell\open\command\ (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Classes\mailto\FriendlyTypeName (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\NoIE4StubProcessing (Registry)

07.02 17:11:05 firefox.exe REDIRECT access to HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup\InstallStarted (Registry)

07.02 17:12:10 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (Registry)

07.02 17:12:10 ECBarre_V_01_b. REDIRECT access to HKU\S-1-5-21-606747145-1644491937-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride (Registry)

2