m3plugin.dll

OTL logfile created on: 6. 10. 2009 19:16:09 - Run 1
OTL by OldTimer - Version 3.0.18.4     Folder = C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000041b | Country: Slovakia | Language: SKY | Date Format: d. M. yyyy
 
2,00 Gb Total Physical Memory | 1,06 Gb Available Physical Memory | 52,98% Memory free
3,85 Gb Paging File | 3,05 Gb Available in Paging File | 79,25% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 195,31 Gb Total Space | 105,66 Gb Free Space | 54,10% Space Free | Partition Type: NTFS
Drive D: | 270,44 Gb Total Space | 246,23 Gb Free Space | 91,05% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: XP-DCB8DCD5506D
Current User Name: Martin
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 7 Days
Output = Standard
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2008.04.13 17:12:19 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2009.05.14 15:47:54 | 00,731,840 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2007.10.16 10:08:08 | 00,081,920 | ---- | M] (FirebirdSQL Project) -- C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe
PRC - [2007.06.25 08:47:12 | 01,552,680 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
PRC - [2009.05.24 16:56:33 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2007.08.23 17:40:48 | 00,079,136 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe
PRC - [2007.11.26 23:34:58 | 02,189,864 | ---- | M] (Gainward Co.) -- C:\WINDOWS\TBPanel.exe
PRC - [2004.12.08 17:57:36 | 00,550,912 | ---- | M] () -- C:\WINDOWS\zHotkey.exe
PRC - [2007.04.12 02:33:10 | 16,132,608 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.EXE
PRC - [2006.02.19 02:41:10 | 00,049,152 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
PRC - [2009.07.01 09:37:06 | 00,037,888 | ---- | M] () -- C:\Program Files\Winamp\winampa.exe
PRC - [2009.05.24 16:56:33 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2007.06.25 08:47:24 | 01,629,480 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
PRC - [2007.06.25 08:47:02 | 01,057,064 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCD.exe
PRC - [2007.11.28 00:51:05 | 00,155,716 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe
PRC - [2004.12.14 18:19:44 | 00,221,184 | ---- | M] (Labtec Inc.) -- C:\WINDOWS\System32\LVCOMSX.EXE
PRC - [2004.12.14 18:51:34 | 00,217,088 | ---- | M] (Labtec Inc.) -- C:\Program Files\Logitech\Video\LogiTray.exe
PRC - [2006.03.03 21:03:10 | 00,069,632 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe
PRC - [2009.05.14 15:47:08 | 02,029,640 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2008.04.13 17:12:28 | 01,695,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe
PRC - [2007.08.23 17:36:30 | 00,455,968 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
PRC - [2007.06.27 19:03:40 | 00,152,872 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
PRC - [2009.04.16 13:36:36 | 24,264,488 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe
PRC - [2009.03.01 03:59:42 | 00,172,792 | ---- | M] (ICQ, LLC.) -- C:\Program Files\ICQ6.5\ICQ.exe
PRC - [2009.10.05 18:45:42 | 00,310,064 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2006.02.19 04:21:22 | 00,288,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
PRC - [2004.12.14 18:34:18 | 00,192,512 | ---- | M] (Labtec Inc.) -- C:\Program Files\Logitech\Video\FxSvr2.exe
PRC - [2007.10.16 10:07:38 | 02,711,552 | ---- | M] (FirebirdSQL Project) -- C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe
PRC - [2007.06.27 19:04:00 | 00,279,848 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
PRC - [2007.06.27 19:04:00 | 01,213,736 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
PRC - [2009.09.13 12:52:05 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.04.16 13:36:36 | 00,077,360 | R--- | M] (Skype Technologies) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe
PRC - [2006.02.19 05:24:52 | 00,239,320 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
PRC - [2009.10.06 19:01:09 | 00,604,488 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe
PRC - [2009.10.06 19:14:48 | 00,520,704 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Desktop\OTL.exe
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2009.08.07 11:39:54 | 00,072,704 | ---- | M] (Adobe Systems) -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service [On_Demand | Stopped])
SRV - [2008.07.25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2008.07.25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2009.05.14 15:54:22 | 00,020,680 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv [On_Demand | Stopped])
SRV - [2009.05.14 15:47:54 | 00,731,840 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn [Auto | Running])
SRV - [2007.10.16 10:08:08 | 00,081,920 | ---- | M] (FirebirdSQL Project) -- C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance [Auto | Running])
SRV - [2007.10.16 10:07:38 | 02,711,552 | ---- | M] (FirebirdSQL Project) -- C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe -- (FirebirdServerDefaultInstance [On_Demand | Running])
SRV - [2008.07.29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped])
SRV - [2008.04.13 17:12:02 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2008.07.29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped])
SRV - [2007.06.25 08:47:12 | 01,552,680 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv [Auto | Running])
SRV - [2009.05.24 16:56:33 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
SRV - [2007.08.23 17:40:48 | 00,079,136 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe -- (LightScribeService [Auto | Running])
SRV - [2007.06.29 19:16:56 | 00,800,040 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService [On_Demand | Stopped])
SRV - [2008.07.29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped])
SRV - [2007.06.27 19:04:00 | 00,279,848 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService [On_Demand | Running])
SRV - [2007.11.28 00:51:05 | 00,155,716 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvsvc32.exe -- (NVSvc [Auto | Running])
SRV - [2006.03.03 21:03:10 | 00,069,632 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe -- (Pml Driver HPZ12 [Unknown | Running])
SRV - [2008.12.10 01:10:14 | 00,024,636 | ---- | M] (Apache Software Foundation) -- C:\Program Files\wamp\bin\apache\apache2.2.11\bin\httpd.exe -- (wampapache [On_Demand | Stopped])
SRV - [2009.03.16 13:29:28 | 06,562,432 | ---- | M] () -- C:\Program Files\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe -- (wampmysqld [On_Demand | Stopped])
SRV - [2006.10.18 20:05:24 | 00,913,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])
SRV - [2009.10.06 19:01:07 | 00,361,288 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TuneUpDefragService.exe -- (TuneUp.Defrag [On_Demand | Stopped])
SRV - [2009.07.15 11:48:20 | 00,029,000 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll -- (UxTuneUp [Auto | Stopped])
SRV - [2009.10.06 19:01:09 | 00,604,488 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc [Auto | Running])
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2006.07.01 22:39:40 | 00,036,864 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\System32\DRIVERS\AmdK8.sys -- (AmdK8 [System | Running])
DRV - [2007.03.15 19:11:38 | 00,012,256 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\System32\drivers\TBPANEL.SYS -- (Cardex [On_Demand | Stopped])
DRV - [2001.07.16 04:54:00 | 00,007,888 | ---- | M] (C. Ghisler & Co.) -- C:\Program Files\wincmd\cglptnt.sys -- (cglptnt [On_Demand | Stopped])
DRV - File not found --  -- (cpuxp [On_Demand | Running])
DRV - [2009.05.14 15:41:10 | 00,114,472 | ---- | M] (ESET) -- C:\WINDOWS\System32\DRIVERS\eamon.sys -- (eamon [Auto | Running])
DRV - [2009.05.14 15:47:14 | 00,107,256 | ---- | M] (ESET) -- C:\WINDOWS\System32\DRIVERS\ehdrv.sys -- (ehdrv [System | Running])
DRV - [2009.05.14 15:49:22 | 00,133,000 | ---- | M] (ESET) -- C:\WINDOWS\System32\DRIVERS\epfw.sys -- (epfw [Auto | Running])
DRV - [2009.05.14 15:49:26 | 00,033,096 | ---- | M] (ESET) -- C:\WINDOWS\System32\DRIVERS\Epfwndis.sys -- (Epfwndis [On_Demand | Running])
DRV - [2009.05.14 15:49:26 | 00,055,768 | ---- | M] (ESET) -- C:\WINDOWS\System32\DRIVERS\epfwtdi.sys -- (epfwtdi [System | Running])
DRV - [2009.08.13 12:53:17 | 00,025,280 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\System32\DRIVERS\hamachi.sys -- (hamachi [On_Demand | Running])
DRV - [2006.11.22 10:01:48 | 00,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) -- C:\WINDOWS\System32\drivers\hardlock.sys -- (Hardlock [Auto | Running])
DRV - [2009.09.24 09:32:45 | 00,047,616 | ---- | M] (Aladdin Knowledge Systems) -- C:\WINDOWS\System32\drivers\Haspnt.sys -- (Haspnt [Auto | Running])
DRV - [2008.04.13 09:36:05 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])
DRV - [2009.06.30 17:41:47 | 00,024,064 | ---- | M] (Eltima Software) -- C:\WINDOWS\System32\drivers\HMFAxCore46691b2fe72383a3b643d95081ef1d95.sys -- (HMFAxCore46691b2fe72383a3b643d95081ef1d95 [System | Running])
DRV - [2007.06.25 08:47:02 | 00,119,080 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\drivers\InCDFs.sys -- (InCDfs [Disabled | Running])
DRV - [2007.06.25 08:47:12 | 00,036,776 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\drivers\InCDPass.sys -- (InCDPass [System | Running])
DRV - [2007.06.25 08:47:12 | 00,038,440 | ---- | M] (Nero AG) -- C:\WINDOWS\System32\drivers\InCDRm.sys -- (incdrm [System | Running])
DRV - [2007.04.23 03:12:28 | 04,402,176 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running])
DRV - [2004.10.11 10:18:58 | 00,022,016 | R--- | M] (Labtec Inc.) -- C:\WINDOWS\System32\drivers\lvusbsta.sys -- (LVUSBSta [On_Demand | Stopped])
DRV - [2004.08.13 11:56:20 | 00,005,810 | R--- | M] () -- C:\WINDOWS\System32\DRIVERS\ASACPI.sys -- (MTsensor [On_Demand | Running])
DRV - [2007.11.28 00:51:05 | 07,429,088 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys -- (nv [On_Demand | Running])
DRV - [2004.10.11 10:22:02 | 00,211,712 | R--- | M] (Labtec Inc.) -- C:\WINDOWS\System32\DRIVERS\LV561AV.SYS -- (PID_0928 [On_Demand | Stopped])
DRV - [2006.02.28 05:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2008.08.20 10:58:58 | 00,044,944 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running])
DRV - [2006.08.14 22:09:48 | 00,083,200 | R--- | M] (Realtek Semiconductor Corporation                           ) -- C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys -- (RTLE8023xp [On_Demand | Running])
DRV - [2008.04.13 09:39:15 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2009.05.22 20:11:48 | 00,721,904 | ---- | M] () -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd [Boot | Running])
DRV - [2007.03.15 19:11:38 | 00,012,256 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel [Auto | Running])
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
 
 
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.azet.sk/ [binary data]
IE - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hopsurf.com
IE - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\S-1-5-21-1491950412-2009852829-4049741679-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Winamp Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query="
FF - prefs.js..browser.search.selectedEngine: "Winamp Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampab&query="
 
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009.06.23 13:00:26 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009.09.21 17:31:27 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009.09.13 12:52:10 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
 
[2009.05.27 13:55:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\mozilla\Extensions
[2009.05.27 13:55:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009.10.06 19:00:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\mozilla\Firefox\Profiles\rgvt27h2.default\extensions
[2009.10.01 20:14:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\mozilla\Firefox\Profiles\rgvt27h2.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2009.06.23 14:48:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\mozilla\Firefox\Profiles\rgvt27h2.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009.09.22 15:14:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\mozilla\Firefox\Profiles\rgvt27h2.default\extensions\{49f3fc85-dcfe-4e42-9301-226ebe658509}
[2009.08.06 12:26:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\mozilla\Firefox\Profiles\rgvt27h2.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}
[2009.09.28 07:29:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\mozilla\Firefox\Profiles\rgvt27h2.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2009.08.14 10:35:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\mozilla\Firefox\Profiles\rgvt27h2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2009.09.25 16:08:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\mozilla\Firefox\Profiles\rgvt27h2.default\extensions\ctrl-tab@design-noir.de
[2009.09.28 07:29:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\mozilla\Firefox\Profiles\rgvt27h2.default\extensions\staged-xpis
[2009.08.26 18:58:29 | 00,000,682 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\ask.xml
[2009.08.20 13:59:47 | 00,002,603 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\gametrackercom-server-search.xml
[2009.10.01 13:19:01 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-1.xml
[2009.09.14 10:04:16 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-10.xml
[2009.10.05 14:05:23 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-11.xml
[2009.06.12 16:24:11 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-2.xml
[2009.06.12 17:14:32 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-3.xml
[2009.07.21 18:27:08 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-4.xml
[2009.07.21 18:27:30 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-5.xml
[2009.07.22 08:27:06 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-6.xml
[2009.07.22 12:02:17 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-7.xml
[2009.07.23 10:12:53 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-8.xml
[2009.08.05 17:03:05 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-9.xml
[2009.06.11 07:13:57 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin.xml
[2009.10.05 13:49:57 | 00,001,196 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\winamp-search.xml
[2009.10.06 18:55:16 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009.04.24 11:16:05 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2009.09.13 12:52:10 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009.04.24 11:11:00 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}
[2009.05.24 16:56:40 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009.09.13 12:52:04 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009.09.13 12:52:04 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2008.09.03 17:11:24 | 00,054,600 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\mozilla firefox\plugins\npbittorrent.dll
[2009.05.24 16:56:33 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeploytk.dll
[2009.09.13 12:52:07 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll
[2009.02.27 12:13:42 | 00,103,792 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll
[2009.08.10 09:59:26 | 00,001,583 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\atlas-sk.xml
[2009.08.10 09:59:26 | 00,001,380 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\azet-sk.xml
[2009.08.10 09:59:26 | 00,001,479 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\dunaj-sk.xml
[2009.08.10 09:59:26 | 00,002,343 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2009.09.17 14:41:47 | 00,003,700 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fast.png
[2009.09.17 14:41:47 | 00,001,963 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fast.xml
[2009.08.10 09:59:26 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009.04.25 13:55:24 | 00,002,381 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\kwinzy115.xml
[2009.04.27 19:16:04 | 00,002,381 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\kwinzy117.xml
[2009.05.15 12:18:28 | 00,002,381 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\kwinzy119.xml
[2009.06.16 13:42:30 | 00,002,381 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\kwinzy121.xml
[2009.06.18 17:28:28 | 00,002,381 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\kwinzy123.xml
[2009.08.10 09:59:26 | 00,001,104 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-sk.xml
[2009.08.10 09:59:27 | 00,000,830 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\zoznam-sk.xml
 
O1 HOSTS File: (849 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1       ad.de.doubleclick.net
O1 - Hosts: 127.0.0.1       ad.dk.doubleclick.net
O1 - Hosts: 127.0.0.1       www.war-board.net
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (XML Class) - {500BCA15-57A7-4eaf-8143-8C619470B13D} - Reg Error: Value error. File not found
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (FlashFXP Helper for Internet Explorer) - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\Program Files\FlashFXP\IEFlash.dll (IniCom Networks, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\..\Toolbar\WebBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [Gainward] C:\WINDOWS\TBPanel.exe (Gainward Co.)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [CHotkey] C:\WINDOWS\zHotkey.exe ()
O4 - HKLM..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe (Nero AG)
O4 - HKLM..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe (Labtec Inc.)
O4 - HKLM..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe (Labtec Inc.)
O4 - HKLM..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE (Labtec Inc.)
O4 - HKLM..\Run: [MyWebSearch Plugin] C:\PROGRA~1\MYWEBS~1\bar\3.bin\M3PLUGIN.DLL File not found
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe (Nero AG)
O4 - HKLM..\Run: [ShowWnd] C:\WINDOWS\ShowWnd.exe ()
O4 - HKLM..\Run: [StrSystem] C:\WINDOWS\strs.exe File not found
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe ()
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [GameTracker] C:\Program Files\GameTracker\GTLite.exe File not found
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [Google Update] C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (Google Inc.)
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [ICQ] C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company)
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [PopRock] C:\DOCUME~1\MARTIN~1.000\LOCALS~1\Temp\d.exe File not found
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe File not found
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [WindowBlinds] C:\Program Files\Stardock\Object Desktop\WindowBlinds\WBInstall32.exe ()
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\RunOnce: [UniblueRegistryBooster] C:\Program Files\Uniblue\RegistryBooster 2010\launcher.exe ()
O4 - Startup: C:\Documents and Settings\All Users\My applications\Tibia Client.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} http://195.28.70.134/kapor2/lib/mgaxctrl.cab (Autodesk MapGuide ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (wbsys.dll) - C:\WINDOWS\System32\wbsys.dll (Stardock.Net, Inc)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WBSrv: DllName - C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll - C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll (Stardock Corporation)
O24 - Desktop Components:0 (Aktuálna domovská stránka) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.04.24 09:59:31 | 00,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009.05.03 13:58:35 | 00,000,000 | ---D | M] - D:\autoskola -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) -  File not found
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found
 
[color=#E56717]========== Files/Folders - Created Within 7 Days ==========[/color]
 
[2009.10.06 19:00:25 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
[2009.10.06 19:00:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2009.10.02 10:31:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\muvee Technologies
[2009.10.05 14:17:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\SystemRequirementsLab
[2009.10.06 19:01:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\TuneUp Software
[2009.10.06 19:10:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Uniblue
[2009.10.05 07:12:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\uTorrent
[2009.10.01 20:01:07 | 00,000,000 | ---D | C] -- C:\Program Files\Firebird
[2009.09.30 16:36:38 | 00,000,000 | ---D | C] -- C:\Program Files\Fish Tycoon
[2009.10.01 15:52:58 | 00,000,000 | ---D | C] -- C:\Program Files\ReflexiveArcade
[2009.10.01 20:01:16 | 00,000,000 | ---D | C] -- C:\Program Files\SpacialAudio
[2009.10.05 14:17:37 | 00,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab
[2009.10.02 14:23:29 | 00,000,000 | ---D | C] -- C:\Program Files\Temp
[2009.10.06 19:00:40 | 00,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2009
[2009.10.06 19:10:39 | 00,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2009.10.05 07:12:32 | 00,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2009.10.06 19:14:26 | 00,520,704 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Desktop\OTL.exe
[2009.10.06 19:09:40 | 03,127,824 | ---- | C] (Uniblue Systems Ltd                                         ) -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Desktop\registrybooster.exe
[2009.10.06 19:01:09 | 00,604,488 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe
[2009.10.06 19:01:07 | 00,361,288 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TuneUpDefragService.exe
[2009.10.06 19:01:07 | 00,029,000 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll
[2009.10.06 18:56:30 | 17,774,920 | ---- | C] (TuneUp Software) -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Desktop\TU2009TrialEN-US.exe
[2009.10.02 17:44:44 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Desktop\hudba
[2009.10.01 20:01:12 | 00,442,368 | ---- | C] (FirebirdSQL Project) -- C:\WINDOWS\System32\GDS32.DLL
[2009.10.01 20:01:10 | 00,626,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr80.dll
[2009.10.01 20:01:10 | 00,548,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp80.dll
 
[color=#E56717]========== Files - Modified Within 7 Days ==========[/color]
 
[1 C:\WINDOWS\System32\*.tmp files]
[5 C:\WINDOWS\*.tmp files]
[2009.10.06 19:15:00 | 00,000,468 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{E4471D8D-40D4-4873-BA24-F2A6C0EB081C}.job
[2009.10.06 19:14:48 | 00,520,704 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Desktop\OTL.exe
[2009.10.06 19:14:41 | 00,000,558 | ---- | M] () -- C:\WINDOWS\DFC.INI
[2009.10.06 19:10:41 | 00,000,774 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\RegistryBooster 2010.lnk
[2009.10.06 19:10:18 | 03,127,824 | ---- | M] (Uniblue Systems Ltd                                         ) -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Desktop\registrybooster.exe
[2009.10.06 19:02:17 | 00,000,488 | ---- | M] () -- C:\WINDOWS\tasks\1-Click Maintenance.job
[2009.10.06 19:01:09 | 00,604,488 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe
[2009.10.06 19:01:07 | 00,361,288 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TuneUpDefragService.exe
[2009.10.06 19:01:01 | 00,001,617 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\TuneUp 1-Click Maintenance.lnk
[2009.10.06 19:01:00 | 00,001,545 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\TuneUp Utilities 2009.lnk
[2009.10.06 19:00:00 | 00,000,294 | -H-- | M] () -- C:\WINDOWS\tasks\{BB65B0FB-5712-401b-B616-E69AC55E2757}.job
[2009.10.06 18:59:51 | 17,774,920 | ---- | M] (TuneUp Software) -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Desktop\TU2009TrialEN-US.exe
[2009.10.06 18:49:38 | 00,000,416 | ---- | M] () -- C:\WINDOWS\tasks\PCConfidential.job
[2009.10.06 18:49:31 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009.10.06 18:49:23 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009.10.06 17:19:00 | 00,001,136 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1491950412-2009852829-4049741679-1006UA.job
[2009.10.05 13:56:45 | 00,001,820 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\WindowBlinds.lnk
[2009.10.05 07:12:34 | 00,000,630 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\µTorrent.lnk
[2009.10.03 15:36:29 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2009.10.02 14:23:36 | 00,095,245 | ---- | M] () -- C:\Documents and Settings\All Users\My applications\Tibia Client.exe
[2009.10.02 12:19:01 | 00,001,084 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1491950412-2009852829-4049741679-1006Core.job
[2009.10.01 20:12:17 | 00,000,664 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Winamp.lnk
[2009.10.01 20:01:22 | 00,001,655 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Desktop\SAM Broadcaster.lnk
[2009.10.01 14:40:08 | 00,955,000 | ---- | M] (Dot TK Registry) -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\My Documents\Setup.exe
[2009.10.01 07:29:55 | 04,808,894 | -H-- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Local Settings\Application Data\IconCache.db
 
[color=#E56717]========== Files - No Company Name ==========[/color]
[2009.10.06 19:10:41 | 00,000,774 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\RegistryBooster 2010.lnk
[2009.10.06 19:01:09 | 00,000,488 | ---- | C] () -- C:\WINDOWS\tasks\1-Click Maintenance.job
[2009.10.06 19:01:01 | 00,001,617 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\TuneUp 1-Click Maintenance.lnk
[2009.10.06 19:01:00 | 00,001,545 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\TuneUp Utilities 2009.lnk
[2009.10.05 13:56:45 | 00,001,820 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\WindowBlinds.lnk
[2009.10.05 07:12:34 | 00,000,630 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\µTorrent.lnk
[2009.10.05 07:08:36 | 00,000,294 | -H-- | C] () -- C:\WINDOWS\tasks\{BB65B0FB-5712-401b-B616-E69AC55E2757}.job
[2009.10.02 14:23:36 | 00,095,245 | ---- | C] () -- C:\Documents and Settings\All Users\My applications\Tibia Client.exe
[2009.10.01 20:12:17 | 00,000,664 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Winamp.lnk
[2009.10.01 20:01:22 | 00,001,655 | ---- | C] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Desktop\SAM Broadcaster.lnk
[2009.09.24 10:01:52 | 00,001,353 | ---- | C] () -- C:\WINDOWS\GtrDemo.ini
[2009.09.24 10:01:52 | 00,000,026 | ---- | C] () -- C:\WINDOWS\GtrDemo_NKN.ini
[2009.09.24 09:32:45 | 00,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys
[2009.09.12 13:45:05 | 00,000,243 | ---- | C] () -- C:\WINDOWS\Clony2.ini
[2009.08.24 13:41:45 | 00,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2009.08.11 15:51:51 | 00,000,029 | ---- | C] () -- C:\WINDOWS\SCNDRVU.INI
[2009.08.11 15:50:26 | 00,000,000 | ---- | C] () -- C:\WINDOWS\PRESTOPM.INI
[2009.08.11 15:49:51 | 00,028,672 | R--- | C] () -- C:\WINDOWS\PCCuo.dll
[2009.08.11 15:49:51 | 00,002,005 | R--- | C] () -- C:\WINDOWS\~~~runcd.ini
[2009.08.11 15:48:11 | 00,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2009.08.11 15:45:27 | 00,000,029 | ---- | C] () -- C:\WINDOWS\SCNDRVP.INI
[2009.07.23 16:25:18 | 00,022,093 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2009.07.06 12:30:09 | 00,006,812 | R--- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2009.07.02 09:09:16 | 00,000,600 | ---- | C] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\winscp.rnd
[2009.07.01 18:44:04 | 00,000,600 | ---- | C] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Local Settings\Application Data\PUTTY.RND
[2009.06.27 13:29:18 | 00,000,091 | ---- | C] () -- C:\WINDOWS\Rumble2.ini
[2009.06.08 18:00:09 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009.05.28 16:44:40 | 00,018,192 | ---- | C] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009.05.28 14:42:34 | 00,009,216 | ---- | C] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.05.27 15:36:57 | 04,808,894 | -H-- | C] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Local Settings\Application Data\IconCache.db
[2009.05.27 13:53:39 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\desktop.ini
[2009.05.27 13:30:38 | 00,000,000 | ---- | C] () -- C:\WINDOWS\WB.ini
[2009.05.22 20:11:47 | 00,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009.05.10 16:44:43 | 00,001,033 | ---- | C] () -- C:\WINDOWS\Gtr.ini
[2009.05.10 16:44:43 | 00,000,026 | ---- | C] () -- C:\WINDOWS\Gtr_NKN.ini
[2009.05.04 07:21:24 | 00,001,671 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009.05.02 13:28:13 | 00,000,494 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2009.04.25 13:29:31 | 00,000,883 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2009.04.24 10:10:08 | 00,022,131 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini
[2009.04.24 10:09:47 | 00,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2009.04.24 10:09:23 | 00,012,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2009.04.24 10:05:18 | 00,532,544 | ---- | C] () -- C:\WINDOWS\PIC.dll
[2009.04.24 10:05:18 | 00,024,576 | ---- | C] () -- C:\WINDOWS\HKNTDLL.dll
[2009.04.24 10:05:18 | 00,011,776 | ---- | C] () -- C:\WINDOWS\HIDMNT.dll
[2009.04.24 10:02:42 | 00,000,558 | ---- | C] () -- C:\WINDOWS\DFC.INI
[2009.04.24 09:55:19 | 00,032,768 | ---- | C] () -- C:\WINDOWS\TBPanelExt.dll
[2009.04.24 09:55:19 | 00,012,285 | ---- | C] () -- C:\WINDOWS\Cadx3.ini
[2009.04.24 09:55:19 | 00,006,942 | ---- | C] () -- C:\WINDOWS\cadx2.ini
[2009.04.24 09:55:19 | 00,005,120 | ---- | C] () -- C:\WINDOWS\TBManage.dll
[2009.04.24 02:20:58 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\desktop.ini
[2007.11.28 00:51:05 | 01,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007.11.28 00:51:05 | 01,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007.11.28 00:51:05 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007.11.28 00:51:05 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007.11.28 00:51:05 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006.05.15 23:25:43 | 00,077,824 | ---- | C] () -- C:\WINDOWS\System32\hpzids01.dll
[2006.02.28 05:00:00 | 00,000,688 | ---- | C] () -- C:\WINDOWS\win.ini
[2006.02.28 05:00:00 | 00,000,231 | ---- | C] () -- C:\WINDOWS\system.ini
[1999.01.27 13:39:06 | 00,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll
[1997.06.13 07:56:08 | 00,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:264A9BB7
< End of report >

:otl
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - Reg Error: Key error. File not found
FF - prefs.js..browser.search.defaultenginename: "Winamp Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query="
FF - prefs.js..browser.search.selectedEngine: "Winamp Search"
FF - prefs.js..keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampab&query="
[2009.08.26 18:58:29 | 00,000,682 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\ask.xml
[2009.08.20 13:59:47 | 00,002,603 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\gametrackercom-server-search.xml
[2009.10.01 13:19:01 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-1.xml
[2009.09.14 10:04:16 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-10.xml
[2009.10.05 14:05:23 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-11.xml
[2009.06.12 16:24:11 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-2.xml
[2009.06.12 17:14:32 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-3.xml
[2009.07.21 18:27:08 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-4.xml
[2009.07.21 18:27:30 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-5.xml
[2009.07.22 08:27:06 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-6.xml
[2009.07.22 12:02:17 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-7.xml
[2009.07.23 10:12:53 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-8.xml
[2009.08.05 17:03:05 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-9.xml
[2009.06.11 07:13:57 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin.xml
[2009.10.05 13:49:57 | 00,001,196 | ---- | M] () -- C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\winamp-search.xml
O2 - BHO: (XML Class) - {500BCA15-57A7-4eaf-8143-8C619470B13D} - Reg Error: Value error. File not found
O3 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\..\Toolbar\WebBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.
O4 - HKLM..\Run: [MyWebSearch Plugin] C:\PROGRA~1\MYWEBS~1\bar\3.bin\M3PLUGIN.DLL File not found
O4 - HKLM..\Run: [ShowWnd] C:\WINDOWS\ShowWnd.exe ()
O4 - HKLM..\Run: [StrSystem] C:\WINDOWS\strs.exe File not found
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe ()
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [GameTracker] C:\Program Files\GameTracker\GTLite.exe File not found
O4 - HKU\S-1-5-21-1491950412-2009852829-4049741679-1006..\Run: [PopRock] C:\DOCUME~1\MARTIN~1.000\LOCALS~1\Temp\d.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} http://195.28.70.134/kapor2/lib/mgaxctrl.cab (Autodesk MapGuide ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\msdaipp - No CLSID value found

:files
@C:\Documents and Settings\All Users\Application Data\TEMP:264A9BB7

:commands
[resethosts]
[emptytemp]
[reboot]

All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Secondary_Page_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Extensions Off Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Security Risk Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\CustomizeSearch| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\Default_Search_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Unable to set value : HKU\S-1-5-21-1491950412-2009852829-4049741679-1006\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E!
Registry value HKEY_USERS\S-1-5-21-1491950412-2009852829-4049741679-1006\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00A6FAF6-072E-44cf-8957-5838F569A31D} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\ not found.
Prefs.js: "Winamp Search" removed from browser.search.defaultenginename
Prefs.js: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query=" removed from browser.search.defaulturl
Prefs.js: "Winamp Search" removed from browser.search.selectedEngine
Prefs.js: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampab&query=" removed from keyword.URL
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\ask.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\gametrackercom-server-search.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-1.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-10.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-11.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-2.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-3.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-4.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-5.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-6.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-7.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-8.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin-9.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\icqplugin.xml not found.
File C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Application Data\Mozilla\FireFox\Profiles\rgvt27h2.default\searchplugins\winamp-search.xml not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{500BCA15-57A7-4eaf-8143-8C619470B13D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{500BCA15-57A7-4eaf-8143-8C619470B13D}\ not found.
Registry value HKEY_USERS\S-1-5-21-1491950412-2009852829-4049741679-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041D03E-FD4B-44E0-B742-2D9B88305F98} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Plugin not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ShowWnd not found.
File C:\WINDOWS\ShowWnd.exe not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\StrSystem not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WinampAgent not found.
File C:\Program Files\Winamp\winampa.exe not found.
Registry value HKEY_USERS\S-1-5-21-1491950412-2009852829-4049741679-1006\Software\Microsoft\Windows\CurrentVersion\Run\\GameTracker not found.
Registry value HKEY_USERS\S-1-5-21-1491950412-2009852829-4049741679-1006\Software\Microsoft\Windows\CurrentVersion\Run\\PopRock not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ not found.
Starting removal of ActiveX control {62789780-B744-11D0-986B-00609731A21D}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{62789780-B744-11D0-986B-00609731A21D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{62789780-B744-11D0-986B-00609731A21D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{62789780-B744-11D0-986B-00609731A21D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{62789780-B744-11D0-986B-00609731A21D}\ not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {D0C0F75C-683A-4390-A791-1ACFD5599AB8}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D0C0F75C-683A-4390-A791-1ACFD5599AB8}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D0C0F75C-683A-4390-A791-1ACFD5599AB8}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D0C0F75C-683A-4390-A791-1ACFD5599AB8}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D0C0F75C-683A-4390-A791-1ACFD5599AB8}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ not found.
File Protocol\Handler\ipp - No CLSID value found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\ not found.
File Protocol\Handler\msdaipp - No CLSID value found not found.
========== FILES ==========
Unable to delete ADS C:\Documents and Settings\All Users\Application Data\TEMP:264A9BB7 .
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
 
User: Administrator.XP-DCB8DCD5506D
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
 
User: Administrator.XP-DCB8DCD5506D.000
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
 
User: Administrator.XP-DCB8DCD5506D.001
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 32768 bytes
 
User: Martin
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Martin.XP-DCB8DCD5506D
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
 
User: Martin.XP-DCB8DCD5506D.000
->Temp folder emptied: 12956 bytes
File delete failed. C:\Documents and Settings\Martin.XP-DCB8DCD5506D.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 1392774 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 20672628 bytes
->Opera cache emptied: 0 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: xp
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
 
User: xp.XP-DCB8DCD5506D
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
 
User: XPDC67~1~XP-
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
File delete failed. C:\WINDOWS\temp\hlktmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_374.dat scheduled to be deleted on reboot.
Windows Temp folder emptied: 8421399 bytes
RecycleBin emptied: 300940005 bytes
 
Total Files Cleaned = 316,12 mb
 
 
OTL by OldTimer - Version 3.0.18.4 log created on 10072009_110839

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\hlktmp scheduled to be moved on reboot.
File\Folder C:\WINDOWS\temp\Perflib_Perfdata_374.dat not found!

Registry entries deleted on Reboot...