:OTL PRC - [2011-08-21 14:30:30 | 000,634,880 | ---- | M] () – C:\WINDOWS\update.2\svchost.exe PRC - [2011-08-21 14:30:30 | 000,634,880 | ---- | M] () – C:\WINDOWS\update.2\svchost.exe PRC - [2011-08-19 11:08:25 | 000,232,960 | ---- | M] () – C:\WINDOWS\l1rezerv.exe PRC - [2011-08-19 11:08:17 | 000,348,672 | ---- | M] () – C:\WINDOWS\update.5.0\svchost.exe PRC - [2011-08-19 11:08:17 | 000,348,672 | ---- | M] () – C:\WINDOWS\update.5.0\svchost.exe PRC - [2011-08-19 10:18:59 | 000,258,048 | ---- | M] () – C:\WINDOWS\sysdriver32.exe PRC - [2011-08-19 10:16:28 | 001,215,488 | -H-- | M] () – C:\WINDOWS\update.1\svchost.exe PRC - [2011-08-19 10:16:28 | 001,215,488 | -H-- | M] () – C:\WINDOWS\update.1\svchost.exe PRC - [2011-05-16 21:56:22 | 000,566,784 | RHS- | M] ( ) – C:\Documents and Settings\All Users\jushed.exe MOD - [2011-08-21 14:30:30 | 000,634,880 | ---- | M] () – C:\WINDOWS\update.2\svchost.exe MOD - [2011-08-19 11:08:25 | 000,232,960 | ---- | M] () – C:\WINDOWS\l1rezerv.exe MOD - [2011-08-19 11:08:17 | 000,348,672 | ---- | M] () – C:\WINDOWS\update.5.0\svchost.exe MOD - [2011-08-19 10:18:59 | 000,258,048 | ---- | M] () – C:\WINDOWS\sysdriver32.exe MOD - [2011-08-19 10:16:28 | 001,215,488 | -H-- | M] () – C:\WINDOWS\update.1\svchost.exe SRV - [2011-08-21 14:30:30 | 000,634,880 | ---- | M] () [Auto | Running] – C:\WINDOWS\update.2\svchost.exe – (srviecheck) SRV - [2011-08-19 11:08:17 | 000,348,672 | ---- | M] () [Auto | Running] – C:\WINDOWS\update.5.0\svchost.exe – (srvbtcclient) SRV - [2011-08-19 10:18:59 | 000,258,048 | ---- | M] () [Auto | Running] – C:\WINDOWS\sysdriver32.exe – (srvsysdriver32) SRV - [2011-08-19 10:16:28 | 001,215,488 | -H-- | M] () [Auto | Running] – C:\WINDOWS\update.1\svchost.exe – (wxpdrivers) [2011-02-11 21:59:40 | 000,000,000 | —D | M] (“DAEMON Tools Toolbar”) – C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ayyel6kp.default\extensions\DTToolbar@toolbarnet.com [2011-03-08 22:47:16 | 000,000,000 | —D | M] (vShare) – C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ayyel6kp.default\extensions\vshare@toolbar O2 - BHO: (vShare Toolbar) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll () O3 - HKLM…\Toolbar: (vShare Toolbar) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll () O3 - HKLM…\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKCU…\Toolbar\ShellBrowser: (no name) - {57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (vShare Toolbar) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll () O3 - HKCU…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O4 - HKLM…\Run: [1972083.exe] C:\Documents and Settings\admin\Ustawienia lokalne\temp\1972083.exe () O4 - HKLM…\Run: [231632.exe] C:\WINDOWS\TEMP\231632.exe () O4 - HKLM…\Run: [8340804.exe] C:\Documents and Settings\admin\Ustawienia lokalne\temp\8340804.exe () O4 - HKLM…\Run: [847959.exe] C:\WINDOWS\TEMP\847959.exe () O4 - HKLM…\Run: [8799594.exe] C:\WINDOWS\TEMP\8799594.exe () O4 - HKLM…\Run: [8920551.exe] C:\WINDOWS\TEMP\8920551.exe () O4 - HKLM…\Run: [l1rezerv.exe] C:\WINDOWS\l1rezerv.exe () O4 - HKLM…\Run: [sysdriver32.exe] C:\WINDOWS\sysdriver32.exe () O4 - HKLM…\Run: [sysdriver32_.exe] C:\WINDOWS\sysdriver32_.exe () O4 - HKLM…\Run: [WindowsUpdate] File not found O4 - HKLM…\Run: [wxpdrv] C:\WINDOWS\update.1\svchost.exe () O4 - HKCU…\Run: [EA Core] File not found O4 - HKCU…\Run: [jushed] C:\Documents and Settings\All Users\jushed.exe ( ) O4 - HKCU…\Run: [PCSpeedUp] File not found O4 - HKCU…\Run: [WindowsUpdate] File not found O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files\vShare\vshare_toolbar.dll () MsConfig - StartUpReg: HotKeysCmds - hkey= - key= - File not found MsConfig - StartUpReg: IgfxTray - hkey= - key= - File not found MsConfig - StartUpReg: Persistence - hkey= - key= - File not found SafeBootMin: wxpdrivers - C:\WINDOWS\update.1\svchost.exe () SafeBootNet: wxpdrivers - C:\WINDOWS\update.1\svchost.exe () [2011-08-21 10:10:33 | 000,000,000 | —D | C] – C:\WINDOWS\ufa [2011-08-19 17:49:57 | 000,000,000 | —D | C] – C:\WINDOWS\update.7.1 [2011-08-19 11:10:08 | 000,000,000 | —D | C] – C:\WINDOWS\rpcminer [2011-08-19 11:10:08 | 000,000,000 | —D | C] – C:\WINDOWS\phoenix [2011-08-19 11:08:18 | 000,000,000 | -H-D | C] – C:\WINDOWS\update.5.0 [2011-08-19 11:08:10 | 000,000,000 | -H-D | C] – C:\WINDOWS\update.2 [2011-08-19 10:18:40 | 000,000,000 | -H-D | C] – C:\WINDOWS\update.1 [2011-05-11 19:12:10 | 007,987,953 | ---- | C] (CCCP Project ) – C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Codecs.exe [2011-05-11 19:12:10 | 000,566,784 | ---- | C] ( ) – C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\jushed.exe [2011-05-11 19:12:10 | 000,347,136 | ---- | C] (NirSoft) – C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\nircmd.exe [2011-08-21 19:36:43 | 000,000,734 | ---- | M] () – C:\WINDOWS\System32\drivers\etc\hîsts [2011-08-21 15:49:52 | 000,000,178 | ---- | M] () – C:\WINDOWS\info1 [2011-08-21 10:10:32 | 000,246,272 | ---- | M] () – C:\WINDOWS\unrar.exe [2011-08-21 10:10:30 | 000,182,617 | ---- | M] () – C:\WINDOWS\ufa.rar [2011-08-21 10:10:29 | 005,589,370 | ---- | M] () – C:\WINDOWS\phoenix.rar [2011-08-21 10:10:13 | 001,075,284 | ---- | M] () – C:\WINDOWS\rpcminer.rar [2011-08-19 11:08:25 | 000,232,960 | ---- | M] () – C:\WINDOWS\l1rezerv.exe [2011-08-19 11:08:14 | 000,000,000 | ---- | M] () – C:\WINDOWS\loader2.exe_ok [2011-08-19 11:07:36 | 000,904,792 | ---- | M] () – C:\WINDOWS\geoiplist.rar [2011-08-19 10:18:59 | 000,258,048 | ---- | M] () – C:\WINDOWS\sysdriver32_.exe [2011-08-19 10:18:59 | 000,258,048 | ---- | M] () – C:\WINDOWS\sysdriver32.exe [2011-08-19 10:16:28 | 001,215,488 | ---- | M] () – C:\WINDOWS\services32.exe [2011-08-19 11:07:37 | 004,636,907 | ---- | C] () – C:\WINDOWS\geoiplist :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] “C:\WINDOWS\update.1\svchost.exe”=- “C:\WINDOWS\update.2\svchost.exe”=- :Commands [CLEARALLRESTOREPOINTS] [RESETHOSTS] [emptytemp]