:OTL PRC - [2011-11-23 09:43:05 | 000,083,264 | ---- | M] () – C:\Documents and Settings\User\Dane aplikacji\regsrv64.exe PRC - [2011-03-01 16:10:58 | 000,389,120 | ---- | M] () – C:\Documents and Settings\User\Ustawienia lokalne\Temp\vcheck.exe PRC - [2010-10-04 19:46:12 | 000,339,968 | ---- | M] () – C:\Documents and Settings\User\Ustawienia lokalne\TempImg\VerControl.exe MOD - [2011-11-23 09:43:05 | 000,083,264 | ---- | M] () – C:\Documents and Settings\User\Dane aplikacji\regsrv64.exe MOD - [2011-03-01 16:10:58 | 000,389,120 | ---- | M] () – C:\Documents and Settings\User\Ustawienia lokalne\Temp\vcheck.exe MOD - [2010-10-04 19:46:12 | 000,339,968 | ---- | M] () – C:\Documents and Settings\User\Ustawienia lokalne\TempImg\VerControl.exe IE - HKLM…\SearchScopes,DefaultScope = {c591090f-599d-4169-a768-1ee6160e7dca} IE - HKLM…\SearchScopes{40439b93-f815-4122-8073-d03bed94c303}: “URL” = http://slirsredirect.search.aol.com/sli … 685&query={searchTerms}&invocationType=tb50-ie-shoutcast-chromesbox-en-us IE - HKLM…\SearchScopes{c591090f-599d-4169-a768-1ee6160e7dca}: “URL” = http://search.freecause.com/search?ourm … e=63263&p={searchTerms} IE - HKLM…\SearchScopes{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: “URL” = http://slirsredirect.search.aol.com/sli … 685&query={searchTerms}&invocationType=tb50winampie7 IE - HKCU…\URLSearchHook: - No CLSID value found IE - HKCU…\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - No CLSID value found IE - HKCU…\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - No CLSID value found IE - HKCU…\URLSearchHook: {51a86bb3-6602-4c85-92a5-130ee4864f13} - No CLSID value found IE - HKCU…\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKCU…\SearchScopes{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: “URL” = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=101067&mntrId=a4d1f7de0000000000000016d4afb923 IE - HKCU…\SearchScopes{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: “URL” = http://websearch.ask.com/redirect?clien … src=crm&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=&apn_uid=C6F26DE9-F609-466E-91DE-2504A54D187B&apn_sauid=E10D3D09-DE07-4357-938B-DE32E863DB0A IE - HKCU…\SearchScopes{40439b93-f815-4122-8073-d03bed94c303}: “URL” = http://slirsredirect.search.aol.com/sli … 685&query={searchTerms}&invocationType=tb50-ie-shoutcast-chromesbox-en-us IE - HKCU…\SearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b}: “URL” = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2776682 IE - HKCU…\SearchScopes{c591090f-599d-4169-a768-1ee6160e7dca}: “URL” = http://search.freecause.com/search?ourm … e=63263&p={searchTerms} IE - HKCU…\SearchScopes{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: “URL” = http://slirsredirect.search.aol.com/sli … 685&query={searchTerms}&invocationType=tb50winampie7 FF - HKLM\Software\MozillaPlugins@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\MpcStar\Codecs\Real\browser\plugins\nppl3260.dll File not found FF - HKLM\Software\MozillaPlugins@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\MpcStar\Codecs\Real\browser\plugins\nprpjplug.dll File not found FF - HKLM\Software\MozillaPlugins@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\m3ffxtbr@mywebsearch.com: C:\Program Files\MyWebSearch\bar\1.bin O2 - BHO: (no name) - {1631550F-191D-4826-B069-D9439253D926} - No CLSID value found. O2 - BHO: (no name) - {2EECD738-5844-4a99-B4B6-146BF802613B} - No CLSID value found. O2 - BHO: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {51a86bb3-6602-4c85-92a5-130ee4864f13} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {51A86BB3-6602-4C85-92A5-130EE4864F13} - No CLSID value found. O4 - HKCU…\Run: [Microsoft DLL Registration] C:\Documents and Settings\User\Dane aplikacji\regsrv64.exe () O4 - HKCU…\Run: [vcheck] C:\Documents and Settings\User\Ustawienia lokalne\Temp\vcheck.exe () O4 - HKCU…\Run: [VerControl] C:\Documents and Settings\User\Ustawienia lokalne\TempImg\VerControl.exe () O4 - HKLM…\RunOnce: [Del C:\Documents and Settings\User\Pulpit\csxcxzcxz\20100403490.jpg OnNextReboot] C:\WINDOWS\System32\cmd.exe (Microsoft Corporation) O20 - HKLM Winlogon: TaskMan - (C:\Documents and Settings\User\Dane aplikacji\insnts.exe) - C:\Documents and Settings\User\Dane aplikacji\insnts.exe (vlotjsjtf) O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKCU Winlogon: Shell - (C:\Documents and Settings\User\Dane aplikacji\insnts.exe) - C:\Documents and Settings\User\Dane aplikacji\insnts.exe (vlotjsjtf) [2011-11-22 23:04:16 | 000,246,784 | ---- | C] (suppressor peashooters) – C:\Documents and Settings\User\Dane aplikacji\476.exe [2011-06-06 19:35:40 | 000,192,512 | RHS- | C] (vlotjsjtf) – C:\Documents and Settings\User\Dane aplikacji\insnts.exe [2012-05-21 20:34:37 | 000,000,390 | -H-- | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{2242C092-1DE1-439D-970D-2E707B200219}.job [2012-05-21 20:01:00 | 000,001,128 | ---- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-299502267-1644491937-1001UA.job [2012-05-21 20:01:00 | 000,001,076 | ---- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-299502267-1644491937-1001Core.job [2012-05-20 09:26:31 | 000,000,388 | ---- | M] () – C:\WINDOWS\tasks\1-Click Maintenance.job [2011-12-04 01:17:34 | 000,405,515 | ---- | C] () – C:\Documents and Settings\User\Dane aplikacji\494.exe [2011-12-03 22:30:10 | 000,066,793 | ---- | C] () – C:\Documents and Settings\User\Dane aplikacji\478.exe [2011-11-26 19:10:12 | 000,147,456 | ---- | C] ( ) – C:\Documents and Settings\User\Dane aplikacji\A.exe [2011-11-25 10:08:45 | 000,083,776 | ---- | C] () – C:\Documents and Settings\User\Dane aplikacji\3EB.exe [2011-11-24 18:36:37 | 000,474,829 | ---- | C] () – C:\Documents and Settings\User\Dane aplikacji\6.exe [2011-11-23 23:24:33 | 000,459,417 | ---- | C] () – C:\Documents and Settings\User\Dane aplikacji\5.exe [2011-11-23 23:24:26 | 000,286,720 | ---- | C] ( ) – C:\Documents and Settings\User\Dane aplikacji\4.exe [2011-11-23 23:24:19 | 000,327,680 | ---- | C] ( ) – C:\Documents and Settings\User\Dane aplikacji\3.exe [2011-11-23 09:44:40 | 000,083,264 | ---- | C] () – C:\Documents and Settings\User\Dane aplikacji\regsrv64.exe [2011-11-23 09:43:05 | 000,083,264 | ---- | C] () – C:\Documents and Settings\User\Dane aplikacji\D.exe [2011-11-23 09:41:14 | 000,286,720 | ---- | C] ( ) – C:\Documents and Settings\User\Dane aplikacji\8.exe [2011-11-23 09:41:08 | 000,474,829 | ---- | C] () – C:\Documents and Settings\User\Dane aplikacji\7.exe [2011-11-23 09:41:00 | 000,443,356 | ---- | C] () – C:\Documents and Settings\User\Dane aplikacji\2.exe [2011-11-22 17:51:03 | 000,137,536 | ---- | C] () – C:\Documents and Settings\User\Dane aplikacji\103.exe [2011-11-22 17:50:48 | 000,443,356 | ---- | C] () – C:\Documents and Settings\User\Dane aplikacji\FD.exe [2011-08-08 18:21:22 | 000,000,048 | -HS- | C] () – C:\Documents and Settings\All Users\Dane aplikacji.zreglib [2011-08-07 19:55:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2011-08-08 00:34:00 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Dane aplikacji\BabylonUpdater [2011-08-07 19:55:20 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Dane aplikacji\Babylon [2011-08-10 20:09:27 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Dane aplikacji\BabylonToolbar :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [RESETHOSTS] [emptytemp]