:Processes Explorer.EXE :OTL PRC - [2009-12-18 09:37:54 | 01,015,808 | ---- | M] () – C:\Program Files\GameRaving Toolbar\2.2.0.7580\mvbsvc.exe PRC - [2009-12-17 17:30:26 | 00,348,160 | ---- | M] () – C:\Program Files\Internet Today\1.2.0.1420\InternetToday.exe FF - prefs.js…extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.2.0.5360 FF - prefs.js…extensions.enabledItems: {E889F097-B0BE-471B-89AD-B86B6F04B506}:4.2.0.2050 FF - prefs.js…extensions.enabledItems: {AAF6454A-4000-4015-84C1-6CD844C06B19}:1.0 FF - prefs.js…extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:4.2.0.2150 FF - HKLM\software\mozilla\Firefox\extensions\{40f1eb95-4de4-4f36-a826-054ee36bb905}: C:\Program Files\GameRaving Toolbar\2.2.0.7580\FFToolbar [2009-12-29 13:58:36 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\extensions\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\4.2.0.2150\FF [2009-12-29 13:58:42 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\extensions\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.2.0.5360\FF [2009-12-29 13:58:46 | 00,000,000 | —D | M] FF - HKLM\software\mozilla\Firefox\extensions\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\4.2.0.2050\FF [2009-12-29 13:58:51 | 00,000,000 | —D | M] [2009-09-20 12:32:18 | 00,001,201 | ---- | M] () – C:\Documents and Settings\ADMIN\Dane aplikacji\Mozilla\Firefox\Profiles\dye12cmm.default\searchplugins\winamp-search.xml [2009-12-29 14:01:50 | 00,000,000 | —D | M] (QuestService) – C:\Program Files\Mozilla Firefox\extensions{AAF6454A-4000-4015-84C1-6CD844C06B19} O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.2.0.2080\CMWIE.dll () O2 - BHO: (Textual Content Provider) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.2.0.2040\TCPIE.dll File not found O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\4.2.0.2150\WSO.dll () O3 - HKCU…\Toolbar\WebBrowser: (GameRaving Toolbar) - {D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} - C:\Program Files\GameRaving Toolbar\2.2.0.7580\mvb0.dll () O4 - HKCU…\RunOnce: [shockwave Updater] C:\WINDOWS\System32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -Mozilla\5.0_( File not found O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html () [2009-12-29 13:59:37 | 00,000,000 | —D | C] – C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Textual Content Provider [2009-12-29 13:59:31 | 00,000,000 | —D | C] – C:\Program Files\QuestService [2009-12-29 13:59:31 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Dane aplikacji\QuestService [2009-12-29 13:59:10 | 00,000,000 | —D | C] – C:\Program Files\Content Management Wizard [2009-12-29 13:59:02 | 00,000,000 | —D | C] – C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Internet Today [2009-12-29 13:59:00 | 00,000,000 | —D | C] – C:\Program Files\Internet Today [2009-12-29 13:58:51 | 00,000,000 | —D | C] – C:\Program Files\Customized Platform Advancer [2009-12-29 13:58:51 | 00,000,000 | —D | C] – C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Customized Platform Advancer [2009-12-29 13:58:46 | 00,000,000 | —D | C] – C:\Program Files\Automated Content Enhancer [2009-12-29 13:58:46 | 00,000,000 | —D | C] – C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Automated Content Enhancer [2009-12-29 13:58:42 | 00,000,000 | —D | C] – C:\Program Files\Web Search Operator [2009-12-29 13:58:42 | 00,000,000 | —D | C] – C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Web Search Operator [2009-12-29 13:58:32 | 00,000,000 | —D | C] – C:\Program Files\GameRaving Toolbar [2009-12-29 13:58:25 | 00,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Dane aplikacji{B113CF49-D973-4D7E-B1AC-A607BE26CDE8} [2009-12-29 13:58:15 | 00,000,000 | —D | C] – C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\GameRaving Toolbar :Reg [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] “MSConfig”=- :Services QuestService Service :Commands [emptytemp] [start explorer]