:OTL
PRC - [2009-12-25 11:14:18 | 000,030,208 | ---- | M] () -- D:\Documents and Settings\Mateusz\Menu Start\Programy\Autostart\lsass.exe
SRV - [2004-08-04 00:44:02 | 000,911,040 | RHS- | M] () [Auto | Stopped] -- D:\WINDOWS\system32\iiniz.dll -- (vdonaqw)
FF - prefs.js..browser.search.selectedEngine: "DAEMON Search"
FF - prefs.js..extensions.enabledItems:
[email protected]:1.1.2.0185
[2010-07-26 11:29:42 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\rj11ndwq.default\extensions\
[email protected][2010-07-26 11:29:16 | 000,000,523 | ---- | M] () -- D:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\rj11ndwq.default\searchplugins\daemon-search.xml
O4 - Startup: D:\Documents and Settings\Asia\Menu Start\Programy\Autostart\IMVU.lnk = D:\Documents and Settings\Mateusz\Dane aplikacji\IMVUClient\IMVUQualityAgent.exe File not found
O4 - Startup: D:\Documents and Settings\Mateusz\Menu Start\Programy\Autostart\lsass.exe ()
O33 - MountPoints2\{1f40f0b8-8c37-11df-9791-001b9ee3651a}\Shell - "" = AutoRun
[2010-07-30 11:01:05 | 000,000,882 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010-07-30 11:01:00 | 000,000,232 | ---- | M] () -- D:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2010-07-30 08:45:03 | 000,000,878 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
:Files
D:\WINDOWS\Tasks\Install.job
:Reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Alcmtr"=-
"NeroFilterCheck"=-
:Commands
[emptytemp]