OTL logfile created on: 2011-09-13 20:02:07 - Run 6 OTL by OldTimer - Version 3.2.27.0 Folder = C:\Users\Xxx\Desktop\Nowy folder (2) Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,25 Gb Total Physical Memory | 1,87 Gb Available Physical Memory | 57,49% Memory free 6,50 Gb Paging File | 4,93 Gb Available in Paging File | 75,92% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 195,21 Gb Total Space | 47,30 Gb Free Space | 24,23% Space Free | Partition Type: NTFS Drive D: | 736,07 Gb Total Space | 196,11 Gb Free Space | 26,64% Space Free | Partition Type: NTFS Drive E: | 5,40 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: XXX-KOMPUTER | User Name: Xxx | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-09-09 13:03:54 | 000,411,432 | ---- | M] (Valve Corporation) -- C:\Program Files\Common Files\Steam\SteamService.exe PRC - [2011-09-06 20:27:13 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Xxx\Desktop\Nowy folder (2)\OTL.exe PRC - [2011-08-04 14:34:50 | 001,955,208 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe PRC - [2011-08-04 14:34:46 | 001,361,288 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe PRC - [2011-08-03 12:21:26 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe PRC - [2011-05-27 14:08:39 | 000,240,288 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10q_ActiveX.exe PRC - [2011-03-28 11:21:16 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE PRC - [2011-03-14 17:31:03 | 000,025,472 | ---- | M] (Uniblue Systems Limited) -- C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe PRC - [2011-02-26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010-11-30 18:25:24 | 018,635,264 | ---- | M] (Redefine Sp z o.o.) -- C:\Program Files\ipla\ipla.exe PRC - [2010-10-30 12:17:33 | 000,742,776 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\BitTorrent\BitTorrent.exe PRC - [2010-07-04 21:51:26 | 000,017,408 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe PRC - [2010-04-14 20:45:22 | 000,598,696 | ---- | M] ( ) -- C:\Windows\System32\lxeacoms.exe PRC - [2010-02-26 02:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Engine\17.8.0.5\ccsvchst.exe PRC - [2010-02-03 09:46:52 | 001,531,904 | ---- | M] (Nokia) -- C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe PRC - [2010-01-26 12:41:08 | 000,652,800 | ---- | M] (Nokia) -- C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe PRC - [2010-01-15 14:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe PRC - [2009-11-11 10:57:36 | 001,451,520 | ---- | M] (Nokia) -- C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe PRC - [2009-10-27 09:15:44 | 000,132,608 | ---- | M] (Nokia) -- C:\Program Files\Nokia\PC Connectivity Solution\Transports\NclUSBSrv.exe PRC - [2009-10-27 09:15:02 | 000,120,832 | ---- | M] (Nokia) -- C:\Program Files\Nokia\PC Connectivity Solution\Transports\NclRSSrv.exe PRC - [2009-07-14 13:28:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2009-07-14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2007-04-30 02:00:00 | 000,032,768 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\V0420Mon.exe PRC - [2007-03-06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe PRC - [2007-03-03 13:48:28 | 000,067,056 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe PRC - [2005-12-09 16:54:56 | 000,966,756 | ---- | M] () -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe PRC - [2003-01-30 07:48:24 | 000,143,360 | ---- | M] () -- C:\Windows\autoclk.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-09-09 13:03:53 | 014,407,976 | ---- | M] () -- C:\Program Files\Steam\bin\libcef.dll MOD - [2011-09-09 13:03:48 | 000,914,216 | ---- | M] () -- C:\Program Files\Steam\bin\avcodec-52.dll MOD - [2011-09-09 13:03:48 | 000,190,248 | ---- | M] () -- C:\Program Files\Steam\bin\chromehtml.dll MOD - [2011-09-09 13:03:48 | 000,155,432 | ---- | M] () -- C:\Program Files\Steam\bin\avformat-52.dll MOD - [2011-09-09 13:03:48 | 000,091,432 | ---- | M] () -- C:\Program Files\Steam\bin\avutil-50.dll MOD - [2010-11-30 18:18:38 | 000,267,264 | ---- | M] () -- C:\Program Files\ipla\MediaFileScanner.dll MOD - [2010-11-30 18:17:26 | 000,386,560 | ---- | M] () -- C:\Program Files\ipla\jabberoo.dll MOD - [2010-11-30 18:16:22 | 000,156,160 | ---- | M] () -- C:\Program Files\ipla\lua.dll MOD - [2010-11-30 18:15:38 | 000,060,928 | ---- | M] () -- C:\Program Files\ipla\ziplib.dll MOD - [2010-07-04 23:32:38 | 000,010,752 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll MOD - [2010-07-04 23:32:36 | 000,004,608 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerHook.dll MOD - [2010-07-04 21:51:26 | 000,017,408 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe MOD - [2009-08-16 18:06:02 | 000,141,312 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll MOD - [2008-08-12 10:16:16 | 002,023,424 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtCore4.dll MOD - [2008-07-29 13:47:56 | 000,016,384 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\imageformats\qsvg4.dll MOD - [2008-07-29 13:47:38 | 000,135,168 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\imageformats\qjpeg4.dll MOD - [2008-07-29 13:11:18 | 000,253,952 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtSvg4.dll MOD - [2008-07-29 13:01:12 | 007,331,840 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtGUI4.dll MOD - [2008-07-29 12:50:26 | 000,364,544 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtXml4.dll MOD - [2005-12-09 16:54:56 | 000,966,756 | ---- | M] () -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe MOD - [2003-06-06 10:59:18 | 000,081,920 | ---- | M] () -- C:\Program Files\SAGEM\SAGEM F@st 800-840\languages\english.dll MOD - [2003-01-30 07:48:24 | 000,143,360 | ---- | M] () -- C:\Windows\autoclk.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2011-09-09 13:03:54 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011-08-04 14:34:46 | 001,361,288 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2011-04-01 11:14:30 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc) SRV - [2011-03-28 11:21:16 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort) SRV - [2010-05-26 22:21:21 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2010-04-14 20:45:22 | 000,598,696 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxeacoms.exe -- (lxea_device) SRV - [2010-02-26 02:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe -- (NIS) SRV - [2010-01-26 12:41:08 | 000,652,800 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010-01-15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2009-07-14 13:28:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007-03-06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service) SRV - [2007-03-03 13:48:28 | 000,067,056 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-09-02 02:04:13 | 000,815,736 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20110901.001\BHDrvx86.sys -- (BHDrvx86) DRV - [2011-08-23 00:17:32 | 000,368,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20110912.030\IDSvix86.sys -- (IDSVix86) DRV - [2011-08-07 22:04:41 | 001,576,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20110913.002\NAVEX15.SYS -- (NAVEX15) DRV - [2011-08-07 22:04:41 | 000,374,392 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl) DRV - [2011-08-07 22:04:41 | 000,086,136 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20110913.002\NAVENG.SYS -- (NAVENG) DRV - [2011-08-03 12:31:22 | 000,105,592 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2010-12-02 10:36:42 | 000,008,576 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc) DRV - [2010-05-06 06:01:59 | 000,339,504 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\NIS\1108000.005\SYMTDIV.SYS -- (SYMTDIv) DRV - [2010-04-29 07:03:51 | 000,116,784 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\NIS\1108000.005\Ironx86.SYS -- (SymIRON) DRV - [2010-04-22 05:02:20 | 000,173,104 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\system32\drivers\NIS\1108000.005\SYMEFA.SYS -- (SymEFA) DRV - [2010-04-22 04:29:50 | 000,325,680 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\System32\Drivers\NIS\1108000.005\SRTSP.SYS -- (SRTSP) DRV - [2010-04-22 04:29:50 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\NIS\1108000.005\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL) DRV - [2010-03-06 12:43:25 | 000,124,976 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2010-02-26 02:22:57 | 000,501,888 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\NIS\1108000.005\ccHPx86.sys -- (ccHP) DRV - [2010-01-21 14:53:16 | 000,018,048 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2009-12-30 11:30:56 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2009-12-30 11:30:48 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2009-12-30 11:30:48 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2009-12-30 11:25:12 | 000,137,344 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsu.sys -- (nmwcdnsu) DRV - [2009-08-30 02:17:18 | 000,328,752 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\NIS\1108000.005\SYMDS.SYS -- (SymDS) DRV - [2009-07-14 20:54:00 | 009,557,216 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009-07-14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009-04-01 07:07:48 | 000,050,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C) NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20) DRV - [2009-03-18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi) DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2007-05-31 10:32:34 | 000,099,648 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\V0420Vid.sys -- (V0420VID) Live! Cam Vista IM (VF0420) DRV - [2004-03-02 10:26:58 | 000,050,007 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\adildr.sys -- (ADILOADER) General Purpose USB Driver (adildr.sys) DRV - [2004-03-02 10:24:16 | 000,127,065 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\adiusbaw.sys -- (adiusbaw) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKLM\..\URLSearchHook: {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - C:\Program Files\4shared.com\prxtb4sha.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {87d5d709-40f2-48a7-8f47-7bb821af70ab} - C:\Program Files\Softonic-Polska2\tbSoft.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-798717472-1342011834-1664965927-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/ IE - HKU\S-1-5-21-798717472-1342011834-1664965927-1000\..\URLSearchHook: {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - C:\Program Files\4shared.com\prxtb4sha.dll (Conduit Ltd.) IE - HKU\S-1-5-21-798717472-1342011834-1664965927-1000\..\URLSearchHook: {87d5d709-40f2-48a7-8f47-7bb821af70ab} - C:\Program Files\Softonic-Polska2\tbSoft.dll (Conduit Ltd.) IE - HKU\S-1-5-21-798717472-1342011834-1664965927-1000\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) IE - HKU\S-1-5-21-798717472-1342011834-1664965927-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.selectedEngine: "" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "" FF - prefs.js..extensions.enabledItems: quickstores@quickstores.de:1.1.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {5e5ab302-7f65-44cd-8211-c1d4caaccea3}:2.6.0.15 FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:3.0 FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0 FF - prefs.js..extensions.enabledItems: ffox@bandoo.com:5.1 FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:2010.9.0.6 FF - prefs.js..network.proxy.backup.ftp: "127.0.0.1" FF - prefs.js..network.proxy.backup.ftp_port: 9666 FF - prefs.js..network.proxy.backup.gopher: "127.0.0.1" FF - prefs.js..network.proxy.backup.gopher_port: 9666 FF - prefs.js..network.proxy.backup.socks: "127.0.0.1" FF - prefs.js..network.proxy.backup.socks_port: 9666 FF - prefs.js..network.proxy.backup.ssl: "127.0.0.1" FF - prefs.js..network.proxy.backup.ssl_port: 9666 FF - prefs.js..network.proxy.ftp: "127.0.0.1" FF - prefs.js..network.proxy.ftp_port: 9666 FF - prefs.js..network.proxy.gopher: "127.0.0.1" FF - prefs.js..network.proxy.gopher_port: 9666 FF - prefs.js..network.proxy.http: "127.0.0.1" FF - prefs.js..network.proxy.http_port: 9666 FF - prefs.js..network.proxy.share_proxy_settings: true FF - prefs.js..network.proxy.socks: "127.0.0.1" FF - prefs.js..network.proxy.socks_port: 9666 FF - prefs.js..network.proxy.ssl: "127.0.0.1" FF - prefs.js..network.proxy.ssl_port: 9666 FF - prefs.js..network.proxy.type: 0 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Oracle) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2321: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1483: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\IPSFFPlgn\ [2011-08-03 18:03:48 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\coFFPlgn_2010_9_0_6 [2011-09-13 10:37:15 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-06-23 20:31:23 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-06-23 20:31:23 | 000,000,000 | ---D | M] [2011-07-03 13:22:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Xxx\AppData\Roaming\mozilla\Extensions [2011-09-13 10:27:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Xxx\AppData\Roaming\mozilla\Firefox\Profiles\xshjr7dj.default\extensions [2010-02-09 20:53:30 | 000,000,000 | ---D | M] (XfireXO Toolbar) -- C:\Users\Xxx\AppData\Roaming\mozilla\Firefox\Profiles\xshjr7dj.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3} [2011-07-03 13:23:04 | 000,000,000 | ---D | M] (Bandoo for Firefox) -- C:\Users\Xxx\AppData\Roaming\mozilla\Firefox\Profiles\xshjr7dj.default\extensions\ffox@bandoo.com [2011-09-06 20:25:54 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010-07-16 18:59:34 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010-08-03 22:27:04 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de [2011-07-03 13:22:04 | 000,000,000 | ---D | M] (DataMngr) -- C:\PROGRAM FILES\WINDOWS ILIVID TOOLBAR\DATAMNGR\FIREFOXEXTENSION [2011-09-13 10:37:15 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\COFFPLGN_2010_9_0_6 [2011-08-03 18:03:48 | 000,000,000 | ---D | M] (Norton IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\IPSFFPLGN [2010-06-22 04:36:30 | 000,423,656 | ---- | M] (Oracle) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-04-06 21:11:57 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-04-06 21:11:57 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-04-06 21:11:57 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-04-06 21:11:57 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-04-06 21:11:57 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-04-06 21:11:57 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx () O2 - BHO: (4shared.com Toolbar) - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - C:\Program Files\4shared.com\prxtb4sha.dll (Conduit Ltd.) O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\17.8.0.5\coIEplg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\17.8.0.5\ipsbho.dll (Symantec Corporation) O2 - BHO: (Softonic-Polska2 Toolbar) - {87d5d709-40f2-48a7-8f47-7bb821af70ab} - C:\Program Files\Softonic-Polska2\tbSoft.dll (Conduit Ltd.) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.) O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (4shared.com Toolbar) - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - C:\Program Files\4shared.com\prxtb4sha.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No CLSID value found. O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.8.0.5\coIEplg.dll (Symantec Corporation) O3 - HKLM\..\Toolbar: (Softonic-Polska2 Toolbar) - {87d5d709-40f2-48a7-8f47-7bb821af70ab} - C:\Program Files\Softonic-Polska2\tbSoft.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000\..\Toolbar\WebBrowser: (4shared.com Toolbar) - {09EC805C-CB2E-4D53-B0D3-A75A428B81C7} - C:\Program Files\4shared.com\prxtb4sha.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.8.0.5\coIEplg.dll (Symantec Corporation) O3 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000\..\Toolbar\WebBrowser: (Softonic-Polska2 Toolbar) - {87D5D709-40F2-48A7-8F47-7BB821AF70AB} - C:\Program Files\Softonic-Polska2\tbSoft.dll (Conduit Ltd.) O4 - HKLM..\Run: [autoclk] C:\Windows\autoclk.exe () O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia) O4 - HKLM..\Run: [NokiaMusic FastStart] C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe (Nokia) O4 - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe () O4 - HKLM..\Run: [UVS11 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe (InterVideo Digital Technology Corporation) O4 - HKLM..\Run: [V0420Mon.exe] C:\Windows\V0420Mon.exe (Creative Technology Ltd.) O4 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000..\Run: [BitTorrent] C:\Program Files\BitTorrent\BitTorrent.exe (BitTorrent, Inc.) O4 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe (Electronic Arts) O4 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.) O4 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia) O4 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000..\Run: [RDReminder] C:\Program Files\RegClean Pro\RegCleanPro.exe (Systweak Inc) O4 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000..\Run: [RegistryBooster] C:\Program Files\Uniblue\RegistryBooster\launcher.exe (Uniblue Systems Limited) O4 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation) O4 - HKU\.DEFAULT..\RunOnce: [] File not found O4 - HKU\S-1-5-18..\RunOnce: [] File not found O4 - HKU\S-1-5-19..\RunOnce: [] File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [] File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O7 - HKU\S-1-5-21-798717472-1342011834-1664965927-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O13 - gopher Prefix: missing O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{86F70A8C-A4DF-4D0E-821E-6BCA1A77D878}: DhcpNameServer = 62.179.1.63 62.179.1.62 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-02-10 03:55:59 | 000,423,304 | R--- | M] (Electronic Arts) - E:\AutoRun.exe -- [ CDFS ] O32 - AutoRun File - [2010-02-10 08:21:09 | 000,000,000 | ---D | M] - E:\Autorun -- [ CDFS ] O32 - AutoRun File - [2010-01-31 10:21:13 | 000,367,686 | R--- | M] () - E:\Autorun.ico -- [ CDFS ] O32 - AutoRun File - [2010-02-10 04:55:03 | 009,965,568 | R--- | M] () - E:\autorun.dat -- [ CDFS ] O32 - AutoRun File - [2010-02-10 04:54:55 | 000,000,155 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{0e998bf4-09c4-11df-a327-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{0e998bf4-09c4-11df-a327-806e6f6e6963}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2010-02-10 03:55:59 | 000,423,304 | R--- | M] (Electronic Arts) O33 - MountPoints2\{3c0874c3-2b74-11df-a307-00241d59d6cd}\Shell - "" = AutoRun O33 - MountPoints2\{3c0874c3-2b74-11df-a307-00241d59d6cd}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Fentagesic.swf O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-09-12 19:53:12 | 000,000,000 | ---D | C] -- C:\Users\Xxx\AppData\Local\{72F40D6E-E6F5-42A4-9A9B-2A265EF69BC2} [2011-09-12 19:52:40 | 000,000,000 | ---D | C] -- C:\Users\Xxx\AppData\Local\{8C11716C-2B08-4B78-A29F-FAC2DD2E56DC} [2011-09-12 19:48:53 | 000,000,000 | ---D | C] -- C:\Users\Xxx\AppData\Local\{C1CF95C8-4948-46B0-A47C-AB1C8BD933BB} [2011-09-12 19:45:15 | 000,000,000 | ---D | C] -- C:\Users\Xxx\AppData\Local\{10F751E2-CCBE-4262-A8D3-3BF06166CA8B} [2011-09-12 17:38:03 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover [2011-09-12 17:22:13 | 000,000,000 | ---D | C] -- C:\_OTL [2011-09-12 15:42:36 | 000,000,000 | ---D | C] -- C:\Windows\pl [2011-09-12 15:39:40 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live [2011-09-12 15:38:28 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition [2011-09-12 15:35:25 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live [2011-09-12 15:35:09 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2011-09-12 15:34:28 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft [2011-09-12 15:34:03 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll [2011-09-12 15:34:03 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll [2011-09-12 15:33:16 | 000,000,000 | ---D | C] -- C:\Users\Xxx\AppData\Local\Windows Live [2011-09-12 15:33:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live [2011-09-12 15:18:24 | 001,291,624 | ---- | C] (Microsoft Corporation) -- C:\Users\Xxx\Desktop\wlsetup-web.exe [2011-09-12 15:03:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ulead Systems [2011-09-12 15:03:46 | 000,000,000 | ---D | C] -- C:\Program Files\Ulead Systems [2011-09-12 14:58:29 | 148,319,624 | ---- | C] (Corel ) -- C:\Users\Xxx\Desktop\UVS_11_Plus_TBYB_Polish.exe [2011-09-08 20:11:52 | 000,000,000 | ---D | C] -- C:\Users\Xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Diablo II [2011-09-08 20:05:41 | 000,106,496 | ---- | C] (Blizzard Entertainment) -- C:\Windows\DIIUnin.exe [2011-09-06 20:59:36 | 000,000,000 | ---D | C] -- C:\Users\Xxx\Desktop\Nowy folder (2) [2011-09-06 20:52:11 | 000,645,632 | ---- | C] (OldTimer Tools) -- C:\Users\Xxx\Desktop\OTS.exe [2011-09-06 20:44:04 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro [2011-09-06 20:44:03 | 000,000,000 | ---D | C] -- C:\rsit [2011-09-06 18:00:11 | 000,356,352 | ---- | C] (eSellerate Inc.) -- C:\Windows\eSellerateEngine.dll [2011-09-06 18:00:11 | 000,081,920 | ---- | C] (eSellerate Inc.) -- C:\Windows\eSellerateControl350.dll [2011-09-06 18:00:08 | 000,000,000 | ---D | C] -- C:\Program Files\Qooqlle .com Redirect Virus Removal Tool [1] [2011-08-25 13:32:33 | 000,000,000 | ---D | C] -- C:\Windows\rescache [2011-08-24 09:48:11 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2011-08-17 10:34:42 | 000,000,000 | ---D | C] -- C:\Program Files\PlayReady [2010-04-14 20:45:24 | 000,324,264 | ---- | C] ( ) -- C:\Windows\System32\lxeaih.exe [2010-04-14 20:45:22 | 000,598,696 | ---- | C] ( ) -- C:\Windows\System32\lxeacoms.exe [2010-04-14 20:45:22 | 000,373,416 | ---- | C] ( ) -- C:\Windows\System32\lxeacfg.exe [2010-04-13 19:41:34 | 000,442,368 | ---- | C] ( ) -- C:\Windows\System32\lxeacoin.dll [2009-12-09 19:47:50 | 000,643,072 | ---- | C] ( ) -- C:\Windows\System32\lxeapmui.dll [2009-12-09 19:43:14 | 001,048,576 | ---- | C] ( ) -- C:\Windows\System32\lxeaserv.dll [2009-12-09 19:41:22 | 000,688,128 | ---- | C] ( ) -- C:\Windows\System32\lxeahbn3.dll [2009-12-09 19:40:12 | 000,847,872 | ---- | C] ( ) -- C:\Windows\System32\lxeausb1.dll [2009-12-09 19:37:34 | 000,356,352 | ---- | C] ( ) -- C:\Windows\System32\lxeahcp.dll [2009-12-09 19:36:32 | 000,577,536 | ---- | C] ( ) -- C:\Windows\System32\lxealmpm.dll [2009-12-09 19:35:50 | 000,344,064 | ---- | C] ( ) -- C:\Windows\System32\lxeaiesc.dll [2009-12-09 19:35:44 | 000,802,816 | ---- | C] ( ) -- C:\Windows\System32\lxeacomc.dll [2009-12-09 19:35:32 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxeainpa.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-09-13 19:11:26 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-09-13 18:11:00 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-09-13 17:18:18 | 005,439,551 | ---- | M] () -- C:\Users\Xxx\Desktop\AdvUpdPre2.zip [2011-09-13 10:44:40 | 000,014,816 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-09-13 10:44:40 | 000,014,816 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-09-13 10:37:19 | 000,000,328 | ---- | M] () -- C:\Windows\tasks\RegistryBooster.job [2011-09-13 10:37:01 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-09-13 10:36:49 | 2616,057,856 | -HS- | M] () -- C:\hiberfil.sys [2011-09-12 21:01:25 | 000,001,847 | ---- | M] () -- C:\Users\Xxx\Desktop\AD-R.lnk [2011-09-12 20:38:09 | 000,004,197 | ---- | M] () -- C:\Users\Xxx\Desktop\Mój film.wlmp [2011-09-12 20:37:55 | 1235,225,054 | ---- | M] () -- C:\Users\Xxx\Desktop\Mój film.wmv [2011-09-12 20:17:01 | 000,020,276 | ---- | M] () -- C:\Users\Xxx\Desktop\1ebd68ff42.jpeg [2011-09-12 15:39:36 | 000,001,261 | ---- | M] () -- C:\Users\Xxx\Desktop\Windows Live Movie Maker.lnk [2011-09-12 15:38:28 | 000,000,020 | ---- | M] () -- C:\Windows\dó… [2011-09-12 15:18:24 | 001,291,624 | ---- | M] (Microsoft Corporation) -- C:\Users\Xxx\Desktop\wlsetup-web.exe [2011-09-12 15:00:09 | 148,319,624 | ---- | M] (Corel ) -- C:\Users\Xxx\Desktop\UVS_11_Plus_TBYB_Polish.exe [2011-09-11 17:58:09 | 000,000,398 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Xxx.job [2011-09-09 15:18:11 | 000,215,128 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr [2011-09-09 14:52:03 | 000,139,128 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2011-09-09 14:51:54 | 000,215,128 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0 [2011-09-08 20:11:52 | 000,026,010 | ---- | M] () -- C:\Windows\DIIUnin.dat [2011-09-08 20:11:52 | 000,000,610 | ---- | M] () -- C:\Users\Xxx\Desktop\Diablo II - Lord of Destruction.lnk [2011-09-08 20:05:43 | 000,000,610 | ---- | M] () -- C:\Users\Public\Desktop\Diablo II.lnk [2011-09-08 20:05:41 | 000,106,496 | ---- | M] (Blizzard Entertainment) -- C:\Windows\DIIUnin.exe [2011-09-08 20:05:41 | 000,002,829 | ---- | M] () -- C:\Windows\DIIUnin.pif [2011-09-06 20:52:11 | 000,645,632 | ---- | M] (OldTimer Tools) -- C:\Users\Xxx\Desktop\OTS.exe [2011-09-03 22:06:50 | 000,002,336 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2011-09-02 13:38:13 | 000,024,644 | ---- | M] () -- C:\Users\Xxx\Desktop\TooManyItems2011_07_01.zip [2011-08-23 14:26:28 | 003,841,494 | ---- | M] () -- C:\Users\Xxx\Documents\Hajo _ eS-Te ft. Glycerin - Krucjata [zapiska.pl].mp3 [2011-08-19 15:31:54 | 000,033,417 | ---- | M] () -- C:\Users\Xxx\Desktop\56b8719d222cd02f7e55536b7ef1fe5c.jpg [2011-08-18 23:29:46 | 000,001,012 | ---- | M] () -- C:\Users\Public\Desktop\OpenFM.lnk [2011-08-18 23:29:46 | 000,000,983 | ---- | M] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk [2011-08-18 23:28:22 | 026,809,048 | ---- | M] () -- C:\Users\Xxx\Desktop\gg10,5.exe [2011-08-18 21:07:26 | 000,745,568 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2011-08-18 21:07:26 | 000,659,776 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011-08-18 21:07:26 | 000,157,320 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2011-08-18 21:07:26 | 000,123,772 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011-08-16 14:43:26 | 000,000,808 | ---- | M] () -- C:\Users\Xxx\Desktop\i4e287f6cc6be0589073269588810881088131.png [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-09-13 17:18:01 | 005,439,551 | ---- | C] () -- C:\Users\Xxx\Desktop\AdvUpdPre2.zip [2011-09-12 21:01:25 | 000,001,847 | ---- | C] () -- C:\Users\Xxx\Desktop\AD-R.lnk [2011-09-12 20:38:09 | 000,004,197 | ---- | C] () -- C:\Users\Xxx\Desktop\Mój film.wlmp [2011-09-12 20:17:01 | 000,020,276 | ---- | C] () -- C:\Users\Xxx\Desktop\1ebd68ff42.jpeg [2011-09-12 20:03:40 | 1235,225,054 | ---- | C] () -- C:\Users\Xxx\Desktop\Mój film.wmv [2011-09-12 15:39:28 | 000,001,261 | ---- | C] () -- C:\Users\Xxx\Desktop\Windows Live Movie Maker.lnk [2011-09-12 15:38:44 | 000,001,330 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk [2011-09-12 15:38:28 | 000,000,020 | ---- | C] () -- C:\Windows\dó… [2011-09-12 15:37:36 | 000,001,414 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk [2011-09-12 15:37:13 | 000,002,442 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk [2011-09-08 20:11:52 | 000,000,610 | ---- | C] () -- C:\Users\Xxx\Desktop\Diablo II - Lord of Destruction.lnk [2011-09-08 20:05:43 | 000,026,010 | ---- | C] () -- C:\Windows\DIIUnin.dat [2011-09-08 20:05:42 | 000,000,610 | ---- | C] () -- C:\Users\Public\Desktop\Diablo II.lnk [2011-09-08 20:05:41 | 000,002,829 | ---- | C] () -- C:\Windows\DIIUnin.pif [2011-09-02 13:38:13 | 000,024,644 | ---- | C] () -- C:\Users\Xxx\Desktop\TooManyItems2011_07_01.zip [2011-08-23 14:25:52 | 003,841,494 | ---- | C] () -- C:\Users\Xxx\Documents\Hajo _ eS-Te ft. Glycerin - Krucjata [zapiska.pl].mp3 [2011-08-19 15:31:54 | 000,033,417 | ---- | C] () -- C:\Users\Xxx\Desktop\56b8719d222cd02f7e55536b7ef1fe5c.jpg [2011-08-18 23:29:46 | 000,001,012 | ---- | C] () -- C:\Users\Public\Desktop\OpenFM.lnk [2011-08-18 23:29:46 | 000,000,983 | ---- | C] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk [2011-08-18 23:27:57 | 026,809,048 | ---- | C] () -- C:\Users\Xxx\Desktop\gg10,5.exe [2011-08-16 14:43:26 | 000,000,808 | ---- | C] () -- C:\Users\Xxx\Desktop\i4e287f6cc6be0589073269588810881088131.png [2011-08-08 20:37:23 | 000,210,456 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll [2011-08-08 20:37:23 | 000,206,360 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll [2011-08-08 20:37:23 | 000,198,168 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll [2011-08-08 20:37:23 | 000,198,168 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll [2011-08-08 20:37:23 | 000,194,072 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll [2011-08-08 20:37:23 | 000,026,136 | ---- | C] () -- C:\Windows\System32\IVIresize.dll [2011-07-03 13:23:03 | 001,524,112 | ---- | C] () -- C:\Windows\System32\bandoolmx.dll [2011-04-09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat [2011-04-08 13:28:58 | 000,041,872 | ---- | C] () -- C:\Windows\System32\xfcodec.dll [2011-02-22 22:15:54 | 000,000,848 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys [2010-11-25 22:08:43 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll [2010-11-25 22:07:43 | 000,000,167 | ---- | C] () -- C:\Windows\disney.ini [2010-10-10 14:44:09 | 000,010,240 | ---- | C] () -- C:\Users\Xxx\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-09-19 15:11:42 | 000,139,128 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2010-09-19 15:11:21 | 000,215,128 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe [2010-09-19 15:11:17 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe [2010-07-11 14:00:23 | 000,138,056 | ---- | C] () -- C:\Users\Xxx\AppData\Roaming\PnkBstrK.sys [2010-07-11 13:59:43 | 002,434,856 | ---- | C] () -- C:\Windows\System32\pbsvc_bc2.exe [2010-06-30 21:35:45 | 000,021,840 | ---- | C] () -- C:\Windows\System32\SIntfNT.dll [2010-06-30 21:35:45 | 000,017,212 | ---- | C] () -- C:\Windows\System32\SIntf32.dll [2010-06-30 21:35:44 | 000,012,067 | ---- | C] () -- C:\Windows\System32\SIntf16.dll [2010-05-01 11:04:50 | 000,000,260 | ---- | C] () -- C:\Windows\_delis43.ini [2010-05-01 11:04:49 | 000,000,000 | ---- | C] () -- C:\Windows\setup32.INI [2010-02-28 22:47:26 | 000,000,017 | ---- | C] () -- C:\Users\Xxx\AppData\Local\resmon.resmoncfg [2010-02-27 15:23:13 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-02-20 09:16:15 | 000,000,237 | ---- | C] () -- C:\Windows\ka.ini [2010-02-07 12:45:08 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI [2010-02-07 12:34:10 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll [2010-02-07 12:29:45 | 000,000,154 | ---- | C] () -- C:\Windows\adidsl.ini [2010-02-07 12:29:45 | 000,000,021 | ---- | C] () -- C:\Windows\Fast800.ini [2010-02-07 12:29:40 | 001,531,904 | ---- | C] () -- C:\Windows\adiras.exe [2010-02-07 12:29:39 | 000,127,456 | ---- | C] () -- C:\Windows\System32\ipdetect.exe [2010-02-07 12:29:39 | 000,000,998 | ---- | C] () -- C:\Windows\adiras.ini [2010-02-07 12:29:38 | 000,126,976 | ---- | C] () -- C:\Windows\System32\coclassfast.dll [2010-02-07 12:29:38 | 000,046,892 | ---- | C] () -- C:\Windows\System32\adadix16.dll [2010-02-07 12:29:37 | 000,143,360 | ---- | C] () -- C:\Windows\autoclk.exe [2010-02-07 12:29:37 | 000,022,395 | ---- | C] () -- C:\Windows\System32\drivers\fpga.bin [2010-01-25 17:19:04 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini [2009-11-09 08:06:26 | 000,262,144 | ---- | C] () -- C:\Windows\System32\lxeainsb.dll [2009-11-09 08:06:22 | 000,090,112 | ---- | C] () -- C:\Windows\System32\lxeacub.dll [2009-11-09 08:06:06 | 000,253,952 | ---- | C] () -- C:\Windows\System32\lxeacu.dll [2009-11-09 08:05:54 | 000,323,584 | ---- | C] () -- C:\Windows\System32\lxeains.dll [2009-11-09 07:59:58 | 000,086,016 | ---- | C] () -- C:\Windows\System32\lxeagcfg.dll [2009-10-21 10:06:20 | 000,294,912 | ---- | C] () -- C:\Windows\System32\lxeacui.dll [2009-07-14 10:07:57 | 000,745,568 | ---- | C] () -- C:\Windows\System32\perfh015.dat [2009-07-14 10:07:57 | 000,337,158 | ---- | C] () -- C:\Windows\System32\perfi015.dat [2009-07-14 10:07:57 | 000,157,320 | ---- | C] () -- C:\Windows\System32\perfc015.dat [2009-07-14 10:07:57 | 000,038,710 | ---- | C] () -- C:\Windows\System32\perfd015.dat [2009-07-14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009-07-14 06:33:53 | 000,374,808 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2009-07-14 04:05:48 | 000,659,776 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2009-07-14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2009-07-14 04:05:48 | 000,123,772 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2009-07-14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2009-07-14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2009-07-14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2009-07-14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009-07-14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009-06-10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2009-06-08 00:44:10 | 000,110,592 | ---- | C] () -- C:\Windows\System32\lxeainsr.dll [2009-06-08 00:44:08 | 000,036,864 | ---- | C] () -- C:\Windows\System32\lxeacur.dll [2009-06-08 00:43:50 | 000,057,344 | ---- | C] () -- C:\Windows\System32\lxeajswr.dll [2009-06-08 00:37:08 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxeagrd.dll [2009-06-08 00:20:26 | 000,110,592 | ---- | C] () -- C:\Windows\System32\lxeacuir.dll [2009-04-28 07:56:42 | 000,024,576 | ---- | C] () -- C:\Windows\System32\lxeasmr.dll [2009-02-20 08:48:04 | 000,299,008 | ---- | C] () -- C:\Windows\System32\lxeasm.dll [2008-03-05 02:55:36 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxeavs.dll [2007-06-22 00:34:08 | 000,203,328 | R--- | C] () -- C:\Windows\GSetup.exe [2002-03-17 02:00:00 | 000,007,420 | ---- | C] () -- C:\Windows\UA000088.DLL [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< :Files >[/color] [color=#A23BEC]< C:\Program Files\4shared.com >[/color] [color=#A23BEC]< C:\Program Files\Softonic-Polska2 >[/color] [color=#A23BEC]< C:\Program Files\uTorrentBar >[/color] [color=#A23BEC]< C:\Users\Xxx\AppData\Local\Conduit >[/color] [color=#A23BEC]< >[/color] [color=#A23BEC]< :Reg >[/color] [color=#A23BEC]< [-HKEY_CURRENT_USER\Software\AppDataLow\Software\Conduit] >[/color] [color=#A23BEC]< [-HKEY_CURRENT_USER\Software\AppDataLow\Software\Toolbar] >[/color] [color=#A23BEC]< [-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{42168F92-DA71-42E6-BC7F-132EAC1F1899}] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar] >[/color] [color=#A23BEC]< [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] >[/color] [color=#A23BEC]< "{87d5d709-40f2-48a7-8f47-7bb821af70ab}"=- >[/color] [color=#A23BEC]< "{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}"=- >[/color] [color=#A23BEC]< "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"=- >[/color] [color=#A23BEC]< [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks] >[/color] [color=#A23BEC]< "{87d5d709-40f2-48a7-8f47-7bb821af70ab}"=- >[/color] [color=#A23BEC]< "{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}"=- >[/color] [color=#A23BEC]< "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"=- >[/color] [color=#A23BEC]< [-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}] >[/color] [color=#A23BEC]< [-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] >[/color] [color=#A23BEC]< [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser] >[/color] [color=#A23BEC]< "{87D5D709-40F2-48A7-8F47-7BB821AF70AB}"=- >[/color] [color=#A23BEC]< "{09EC805C-CB2E-4D53-B0D3-A75A428B81C7}"=- >[/color] [color=#A23BEC]< [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar] >[/color] [color=#A23BEC]< "{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}"=- >[/color] [color=#A23BEC]< "{87d5d709-40f2-48a7-8f47-7bb821af70ab}"=- >[/color] [color=#A23BEC]< "{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}"=- >[/color] [color=#A23BEC]< "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"=- >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\17c9af48-7122-4b36-9340-1d58d8b2ab41] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\4dd672f2-9f1a-4858-98a6-78136895271e] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\64150b37-e6cf-4a55-b7f2-3266c1201efc] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{02E6478D-F6A6-4D2D-830C-3B68D5C32A3B}] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3638813D-C263-419E-9BA3-82322FD5D1AC}] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{436263CF-3032-42DB-8625-4C953A7D2507}] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D373D58-35CE-4236-919B-04482ADCE852}] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9075399F-593D-46E6-B913-97D0CB55F3F2}] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{87d5d709-40f2-48a7-8f47-7bb821af70ab}] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\4shared.com Toolbar] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic-Polska2 Toolbar] >[/color] [color=#A23BEC]< [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar Toolbar] >[/color] [color=#A23BEC]< >[/color] [color=#A23BEC]< :OTL >[/color] [color=#A23BEC]< FF - prefs.js..extensions.enabledItems: quickstores@quickstores.de:1.1.0 >[/color] [color=#A23BEC]< >[/color] [color=#A23BEC]< :Commands >[/color] [color=#A23BEC]< [emptytemp] >[/color] [color=#A23BEC]< >[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 85 bytes -> C:\ProgramData:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVVX4VM @Alternate Data Stream - 489 bytes -> C:\ProgramData\TEMP:05EE1EEF @Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:CE2C623F < End of report >