:OTL IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2102}: "URL" = http://www.searchqu....q={searchTerms} IE - HKU\S-1-5-21-2411852452-117403543-12125213-500\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - No CLSID value found IE - HKU\S-1-5-21-2411852452-117403543-12125213-500\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://supertoolbar....ale.underscore} FF - prefs.js..extensions.enabledItems: avg@toolbar:9.0.0.22 FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) [2012/07/22 09:29:35 | 000,000,000 | ---D | M] (uTorrentControl2) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\knjvk5v2.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03} [2011/02/01 19:05:08 | 000,002,333 | ---- | M] () -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\knjvk5v2.default\searchplugins\askcom.xml [2012/01/20 12:30:53 | 000,000,984 | ---- | M] () -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\knjvk5v2.default\searchplugins\filestube.xml [2009/02/09 15:05:22 | 000,002,236 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\askcom.xml [2012/01/20 11:34:12 | 000,003,766 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found. O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O3 - HKU\S-1-5-21-2411852452-117403543-12125213-500\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found. O3 - HKU\S-1-5-21-2411852452-117403543-12125213-500\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found. [2012/07/22 09:23:23 | 000,895,376 | ---- | C] (BitTorrent, Inc.) -- C:\Users\Administrator\Desktop\uTorrent.exe [2012/06/19 13:14:03 | 000,000,008 | RHS- | C] () -- C:\ProgramData\8510DB6088.sys [2012/03/13 11:11:51 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\AutoHideIP [2012/01/30 23:11:02 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip133C9_jZip21F0_RealHideIP.exe [2012/01/30 23:10:15 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip133C9_jZipF38_RealHideIP.exe [2012/03/17 13:08:01 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip14144_jZip152_RealHideIP.exe [2012/03/17 13:05:29 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip14144_jZip1C1F2_RealHideIP.exe [2011/12/24 12:11:17 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip192F_jZip10113_PlatinumHideIP.exe [2011/12/24 12:15:23 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip192F_jZip16361_PlatinumHideIP.exe [2011/12/24 12:18:33 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip192F_jZip20166_PlatinumHideIP.exe [2011/12/24 12:13:35 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip192F_jZip213D0_PlatinumHideIP.exe [2011/12/24 12:17:38 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip192F_jZip2523B_PlatinumHideIP.exe [2011/12/24 13:00:22 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip1A44_jZip15199_PlatinumHideIP.exe [2011/12/24 12:59:22 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip1A44_jZip152D4_PlatinumHideIP.exe [2011/12/24 12:58:29 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip1A44_jZip1C3C4_PlatinumHideIP.exe [2012/04/07 14:29:48 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip1B394_jZip2F272_HideIPEasy.exe [2012/03/13 10:56:13 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip25279_jZipC396_RealHideIP.exe [2012/04/03 23:49:26 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip25B4_jZip1A21_HideIPEasy.exe [2012/04/03 23:47:52 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip25B4_jZip223C1_HideIPEasy.exe [2012/04/03 23:47:09 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip25B4_jZip3747_HideIPEasy.exe [2011/12/24 12:48:22 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2814D_jZip151F0_PlatinumHideIP.exe [2011/12/24 12:49:24 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2814D_jZip171D7_PlatinumHideIP.exe [2011/12/24 12:46:25 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2814D_jZip1826F_PlatinumHideIP.exe [2011/12/24 12:47:28 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2814D_jZip1BD8_PlatinumHideIP.exe [2011/12/24 12:44:37 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2814D_jZip24320_PlatinumHideIP.exe [2011/12/24 12:46:41 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2814D_jZip28B7_PlatinumHideIP.exe [2011/12/24 12:50:43 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2814D_jZip2A2A0_PlatinumHideIP.exe [2011/12/24 12:42:59 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2814D_jZip3A257_PlatinumHideIP.exe [2012/04/03 23:14:36 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2C118_jZip141E1_PlatinumHideIP.exe [2012/04/03 23:20:18 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2C118_jZip3217_PlatinumHideIP.exe [2012/01/30 23:26:31 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2D140_jZip1E306_RealHideIP.exe [2012/01/30 23:26:47 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip2D140_jZip2F136_RealHideIP.exe [2012/04/03 23:34:55 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip3115C_jZip35E1_RealHideIP.exe [2012/02/01 11:14:14 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip322E5_jZipD37F_RealHideIP.exe [2012/03/13 12:16:17 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip342F9_jZip11215_RealHideIP.exe [2012/03/13 12:15:33 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip342F9_jZip211AF_RealHideIP.exe [2012/03/13 11:01:17 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip376C_jZip102E6_HideIPEasy.exe [2012/03/13 11:05:32 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip3B32E_jZip203C_RealHideIP.exe [2012/04/03 23:25:36 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip7333_jZip142D0_PlatinumHideIP.exe [2012/04/03 23:26:05 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZip7333_jZip5131_PlatinumHideIP.exe [2011/12/18 12:20:48 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZipAD7_jZip2FB5_PlatinumHideIP.exe [2011/12/18 12:20:11 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\C__Users_ADMINI~1_AppData_Local_Temp_jZip_jZipAD7_jZipA91_PlatinumHideIP.exe [2012/05/06 11:44:03 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\DAEMON Tools Lite [2012/04/03 23:55:36 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\F__NEW PROGRAMS_Hide IP_Hide IP Easy v5.1.3.8 + Crack (Srkfan-Invicta RG)_Crack_HideIPEasy.exe [2012/01/30 23:19:59 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\F__NEW PROGRAMS_Hide IP_Platinum.Hide.IP.3.0.9.2_incl.Cracked.By.ScoRPioN2_CRACK_PlatinumHideIP.exe [2011/12/18 12:21:28 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\PlatinumHideIP [2012/07/22 14:06:14 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\uTorrent [2000/12/13 09:28:42 | 000,030,068 | ---- | M] () -- C:\FIXKRIZ.EXE :files ipconfig /flushdns /c :reg :Commands [purity] [resethosts] [emptytemp]