:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10002&barid={C5AB4DC0-FCE0-11E1-ABCA-0024D2C8A041}
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10002&barid={C5AB4DC0-FCE0-11E1-ABCA-0024D2C8A041}
IE - HKU\S-1-5-21-1627445641-3504489178-1357992615-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10002&barid={C5AB4DC0-FCE0-11E1-ABCA-0024D2C8A041}
IE - HKU\S-1-5-21-1627445641-3504489178-1357992615-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=100481&babsrc=SP_ss&mntrId=0ade8f4c0000000000000024d2c8a041
IE - HKU\S-1-5-21-1627445641-3504489178-1357992615-1000\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10002&barid={C5AB4DC0-FCE0-11E1-ABCA-0024D2C8A041}
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?babsrc=HP_Prot"
FF - prefs.js..extensions.enabledAddons: ffxtlbr@babylon.com:1.2.0
FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.2.0
FF - prefs.js..keyword.URL: "http://search.sweetim.com/search.asp?src=2&crg=3.1010000.10002&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?babsrc=HP_Prot"
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://search.sweetim.com/search.asp?src=2&q="
[2012-09-12 15:50:23 | 000,000,000 | ---D | M] (SweetPacks Toolbar for Firefox) -- C:\Users\Ola\AppData\Roaming\mozilla\Firefox\Profiles\qqbo4xrk.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2011-12-29 23:21:12 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Ola\AppData\Roaming\mozilla\Firefox\Profiles\qqbo4xrk.default\extensions\ffxtlbr@babylon.com
[2012-09-12 15:50:33 | 000,003,998 | ---- | M] () -- C:\Users\Ola\AppData\Roaming\mozilla\firefox\profiles\qqbo4xrk.default\searchplugins\sweetim.xml
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\S-1-5-21-1627445641-3504489178-1357992615-1000\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKU\S-1-5-21-1627445641-3504489178-1357992615-1000\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKU\S-1-5-21-1627445641-3504489178-1357992615-1000..\Run: [Facebook Update] C:\Users\Ola\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-1627445641-3504489178-1357992615-1000..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found
[2011-10-23 12:35:36 | 000,000,000 | ---D | M] -- C:\Users\Ola\AppData\Roaming\OpenCandy
[2012-09-14 17:11:02 | 000,001,048 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1627445641-3504489178-1357992615-1000Core.job
[2012-09-14 20:11:02 | 000,001,070 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1627445641-3504489178-1357992615-1000UA.job
:Commands
[emptytemp]
Zidentyfikowani użytkownicy: adamok, Azi, Bing [Bot], cherbi, deepone, fink13, foreste, Frankfurterium, GioWDS, Google [Bot], Google Adsense [Bot], IPSEN, Kapuscinski_K, kizak20, Mattata, niwe17, sensation22, tenhi, zuby