SystemLook 30.07.11 by jpshortstuff Log created at 17:43 on 20/01/2014 by Zurawski Administrator - Elevation successful ========== dir ========== C:\Documents and Settings\Zurawski\Ustawienia lokalne\Dane aplikacji\OTLand - Parameters: "/s" ---Files--- None found. C:\Documents and Settings\Zurawski\Ustawienia lokalne\Dane aplikacji\OTLand\Documents_StrongName_ynlvzow0gnlt2oeacteblkfrbefpzxps d------ [16:08 20/01/2014] C:\Documents and Settings\Zurawski\Ustawienia lokalne\Dane aplikacji\OTLand\Documents_StrongName_ynlvzow0gnlt2oeacteblkfrbefpzxps\1.1.7.0 d------ [16:08 20/01/2014] user.config --a---- 1746 bytes [16:08 20/01/2014] [16:43 20/01/2014] ========== regfind ========== Searching for "OTLand" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Zurawski\Pulpit\ipchanger.exe"="OTLand IP Changer" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Zurawski\Ustawienia lokalne\Temp\tmpD10.tmp"="OTLand IP Changer" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Zurawski\Ustawienia lokalne\Temp\tmpA.tmp"="OTLand IP Changer" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents"="OTLand IP Changer" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Zurawski\Ustawienia lokalne\Temp\tmpB.tmp"="OTLand IP Changer" [HKEY_USERS\S-1-5-21-1123561945-1957994488-682003330-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Zurawski\Pulpit\ipchanger.exe"="OTLand IP Changer" [HKEY_USERS\S-1-5-21-1123561945-1957994488-682003330-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Zurawski\Ustawienia lokalne\Temp\tmpD10.tmp"="OTLand IP Changer" [HKEY_USERS\S-1-5-21-1123561945-1957994488-682003330-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Zurawski\Ustawienia lokalne\Temp\tmpA.tmp"="OTLand IP Changer" [HKEY_USERS\S-1-5-21-1123561945-1957994488-682003330-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents"="OTLand IP Changer" [HKEY_USERS\S-1-5-21-1123561945-1957994488-682003330-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Zurawski\Ustawienia lokalne\Temp\tmpB.tmp"="OTLand IP Changer" ========== reg ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Tibia_is1] (Unable to open key - key not found) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VIS] "DisplayName"="VIS" "UninstallString"="C:\Documents and Settings\Zurawski\Dane aplikacji\Windows Net Data\uninstaller.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent Packages] "DisplayIcon"="C:\Documents and Settings\Zurawski\Dane aplikacji\0F1F1C2Y1H1P1C0I0T\uTorrent Packages\uninstaller.exe" "UninstallString"="C:\Documents and Settings\Zurawski\Dane aplikacji\0F1F1C2Y1H1P1C0I0T\uTorrent Packages\uninstaller.exe /Uninstall /NM="uTorrent Packages" /AN="0F1F1C2Y1H1P1C0I0T" /MBN="uTorrent Packages"" "DisplayName"="uTorrent Packages" "UninstallerPath"="C:\Documents and Settings\Zurawski\Dane aplikacji\0F1F1C2Y1H1P1C0I0T\uTorrent Packages" "UninstallerPathParent"="C:\Documents and Settings\Zurawski\Dane aplikacji\0F1F1C2Y1H1P1C0I0T" -= EOF =-