:OTL FF - HKLM\Software\MozillaPlugins@real.com/nsJSRealPlayerPlugin;version=: File not found O3 - HKU\S-1-5-21-329068152-1897051121-725345543-1003…\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. SafeBootMin: wxpdrivers - C:\WINDOWS\update.1\svchost.exe () SafeBootNet: wxpdrivers - C:\WINDOWS\update.1\svchost.exe () [2011-08-19 21:26:05 | 000,000,000 | —D | C] – C:\windows\rpcminer [2011-08-19 21:26:05 | 000,000,000 | —D | C] – C:\windows\phoenix [2011-08-19 21:22:25 | 000,000,000 | -H-D | C] – C:\windows\update.5.0 [2011-08-19 21:21:38 | 000,000,000 | -H-D | C] – C:\windows\update.2 [2011-08-19 21:20:58 | 000,000,000 | -H-D | C] – C:\windows\update.7.1 [2011-08-19 20:33:53 | 000,000,000 | —D | C] – C:\windows\av_ico [2011-08-19 20:32:42 | 000,000,000 | -H-D | C] – C:\windows\update.1 [2011-08-19 20:32:37 | 000,000,000 | -H-D | C] – C:\windows\update.tray-7-0-lnk [2011-08-19 20:32:37 | 000,000,000 | -H-D | C] – C:\windows\update.tray-7-0 [2011-08-19 21:22:06 | 000,000,734 | ---- | M] () – C:\windows\System32\drivers\etc\hîsts [2011-08-19 21:19:53 | 000,904,792 | ---- | M] () – C:\windows\geoiplist.rar [2011-08-19 21:19:01 | 000,000,000 | ---- | M] () – C:\windows\loader2.exe_ok [2011-08-10 16:14:40 | 000,436,352 | R— | M] () – C:\windows\System32\drivers\etc\hosts.20110817-143139.backup [2011-08-06 11:27:19 | 000,436,286 | R— | M] () – C:\windows\System32\drivers\etc\hosts.20110810-161440.backup [2011-08-03 20:31:05 | 000,436,286 | R— | M] () – C:\windows\System32\drivers\etc\hosts.20110806-112719.backup [2011-07-28 12:17:52 | 000,436,226 | R— | M] () – C:\windows\System32\drivers\etc\hosts.20110803-203105.backup [2011-07-28 10:54:03 | 000,436,226 | R— | M] () – C:\windows\System32\drivers\etc\hosts.20110728-121752.backup [2011-08-19 21:26:04 | 005,589,370 | ---- | C] () – C:\windows\phoenix.rar [2011-08-19 21:26:04 | 001,075,284 | ---- | C] () – C:\windows\rpcminer.rar [2011-08-19 21:20:58 | 000,000,177 | ---- | C] () – C:\windows\info1 [2011-08-19 21:19:54 | 004,636,907 | ---- | C] () – C:\windows\geoiplist [2011-08-19 21:19:53 | 000,904,792 | ---- | C] () – C:\windows\geoiplist.rar [2011-08-19 21:19:53 | 000,246,272 | ---- | C] () – C:\windows\unrar.exe [2011-08-19 21:19:01 | 000,000,000 | ---- | C] () – C:\windows\loader2.exe_ok [2011-08-13 12:51:05 | 000,000,328 | ---- | C] () – C:\windows\tasks\GlaryInitialize.job [2011-07-24 18:03:16 | 000,000,284 | ---- | C] () – C:\windows\tasks\AppleSoftwareUpdate.job [2011-07-04 07:29:59 | 000,107,520 | RHS- | C] () – C:\windows\System32\TAKDSDecoder.dll :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] “C:\WINDOWS\update.1\svchost.exe”=- “C:\WINDOWS\update.tray-7-0-lnk\svchost.exe”=- :Commands [CLEARALLRESTOREPOINTS] [RESETHOSTS] [emptytemp]