:OTL SRV - [2010-01-08 00:51:02 | 000,380,928 | ---- | M] (Spigot, Inc.) [Auto | Running] – C:\Program Files\Application Updater\ApplicationUpdater.exe – (Application Updater) IE - HKCU…\URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll (Spigot, Inc.) FF - prefs.js…extensions.enabledItems: pdfforge@mybrowserbar.com:1.1.2 FF - prefs.js…extensions.enabledItems: searchsettings@spigot.com:1.2.3 [2010-01-21 18:39:49 | 000,000,000 | —D | M] (pdfforge Toolbar Plugin) – C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF [2010-01-21 18:39:49 | 000,000,000 | —D | M] (Search Settings Plugin) – C:\PROGRAM FILES\PDFFORGE TOOLBAR\SSFF O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll (Spigot, Inc.) O4 - HKLM…\Run: [KernelFaultCheck] File not found O4 - HKLM…\Run: [searchSettings] C:\Program Files\pdfforge Toolbar\SearchSettings.exe (Spigot, Inc.) O4 - HKLM…\Run: [WinampAgent] File not found O4 - HKCU…\Run: [1XgXLvwiLN1L0Y] File not found O4 - HKCU…\Run: [5DEdOJlkMp] File not found O4 - HKCU…\Run: [6WLhM1bUkzMr] File not found O4 - HKCU…\Run: [850bxQ9KDLyE] File not found O4 - HKCU…\Run: [eCKfEsOtOABG.exe] File not found O4 - HKCU…\Run: [JeC03UjzF8PW7j] File not found O4 - HKCU…\Run: [Q46gkTYyudR] File not found O4 - HKCU…\Run: [RJASvApE] File not found O4 - HKCU…\Run: [uilEgLeZ83q8lt] File not found O4 - HKCU…\Run: [VYsAwJZj7F54V] File not found O4 - HKCU…\Run: [Yk3Fp0v9] File not found O4 - HKCU…\Run: [ysvscfmx] File not found O33 - MountPoints2{53b5f962-a516-11dd-b6bf-001d7d9434bd}\Shell\AutoRun\command - “” = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe O33 - MountPoints2{7fb101be-c48a-11de-b89c-001d7d9434bd}\Shell\AutoRun\command - “” = I:\ycvvj.exe O33 - MountPoints2{7fb101be-c48a-11de-b89c-001d7d9434bd}\Shell\open\Command - “” = I:\ycvvj.exe O33 - MountPoints2{87a01737-d60b-11de-b8b2-001d7d9434bd}\Shell\AutoRun\command - “” = I:\mt.bat O33 - MountPoints2{87a01737-d60b-11de-b8b2-001d7d9434bd}\Shell\open\Command - “” = I:\mt.bat [2011-02-15 16:14:39 | 000,000,344 | ---- | M] () – C:\Documents and Settings\All Users\Dane aplikacji\UilEgLeZ83q8lt [2011-02-15 16:14:37 | 000,422,400 | ---- | M] () – C:\Documents and Settings\All Users\Dane aplikacji\eNwIsbFOjFdo.dll [2011-02-15 12:24:39 | 000,000,352 | ---- | M] () – C:\Documents and Settings\All Users\Dane aplikacji\ysvscfmx [2011-02-15 11:38:26 | 000,000,336 | ---- | M] () – C:\Documents and Settings\All Users\Dane aplikacji\JeC03UjzF8PW7j [2011-02-12 20:57:24 | 000,000,336 | ---- | M] () – C:\Documents and Settings\All Users\Dane aplikacji\RJASvApE [2011-02-12 12:55:15 | 000,000,336 | ---- | M] () – C:\Documents and Settings\All Users\Dane aplikacji\1XgXLvwiLN1L0Y [2011-02-12 09:39:38 | 000,000,344 | ---- | M] () – C:\Documents and Settings\All Users\Dane aplikacji\5DEdOJlkMp [2011-02-11 19:49:01 | 000,000,344 | ---- | M] () – C:\Documents and Settings\All Users\Dane aplikacji\Q46gkTYyudR [2011-02-11 18:30:45 | 000,000,344 | ---- | M] () – C:\Documents and Settings\All Users\Dane aplikacji\6WLhM1bUkzMr [2011-02-11 08:54:15 | 000,000,336 | ---- | M] () – C:\Documents and Settings\All Users\Dane aplikacji\850bxQ9KDLyE [2011-01-24 18:34:51 | 000,000,160 | ---- | M] () – C:\Documents and Settings\All Users\Dane aplikacji~Yk3Fp0v9r [2011-01-24 18:34:50 | 000,000,795 | ---- | M] () – C:\Documents and Settings\gk\Pulpit\Windows Scan.lnk [2011-02-15 16:14:39 | 000,000,344 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\UilEgLeZ83q8lt [2011-02-15 12:24:39 | 000,000,352 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\ysvscfmx [2011-02-15 11:38:26 | 000,000,336 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\JeC03UjzF8PW7j [2011-02-12 20:57:24 | 000,000,336 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\RJASvApE [2011-02-12 12:55:15 | 000,000,336 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\1XgXLvwiLN1L0Y [2011-02-12 09:39:38 | 000,000,344 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\5DEdOJlkMp [2011-02-11 19:49:01 | 000,000,344 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\Q46gkTYyudR [2011-02-11 18:30:45 | 000,000,344 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\6WLhM1bUkzMr [2011-02-11 08:54:15 | 000,000,336 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\850bxQ9KDLyE [2011-02-10 18:36:57 | 000,000,336 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\VYsAwJZj7F54V [2011-01-24 18:34:51 | 000,000,160 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji~Yk3Fp0v9r [2011-01-24 18:34:50 | 000,000,795 | ---- | C] () – C:\Documents and Settings\gk\Pulpit\Windows Scan.lnk [2011-01-24 18:34:50 | 000,000,272 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji~Yk3Fp0v9 [2011-01-24 18:34:49 | 000,000,416 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\Yk3Fp0v9 [2011-01-24 18:33:20 | 000,422,400 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\eNwIsbFOjFdo.dll :Files RECYCLER /alldrives :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptytemp]