:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbmdm.sys -- (hwdatacard)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbwwan.sys -- (ewusbmbb)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_usbenumfilter.sys -- (ew_usbenumfilter)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-3281900742-1341766618-1541079237-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&r=187
IE - HKU\S-1-5-21-3281900742-1341766618-1541079237-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" =
Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&FORM=IE8SRC
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Bu\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
[2013-02-16 15:43:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bu\AppData\Roaming\mozilla\Firefox\Profiles\mData\Kaspersky Lab\SafeBrowser\S-1-5-21-3521154519-1318579794-2059942315-1000\FireFox\extensions
[2013-02-15 21:49:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\ffxtlbr@babylon.com
[2012-12-18 19:13:30 | 000,532,971 | ---- | M] () (No name found) -- C:\USERS\BU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\697R8MDE.DEFAULT\EXTENSIONS\{73A6FE31-595D-460B-A920-FCC0F8843232}.XPI
[2012-05-13 11:38:40 | 000,434,392 | ---- | M] () (No name found) -- C:\USERS\BU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\697R8MDE.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI
[2012-11-16 08:34:12 | 000,124,993 | ---- | M] () (No name found) -- C:\USERS\BU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\697R8MDE.DEFAULT\EXTENSIONS\ADBLOCKPOPUPS@JESSEHAKANEN.NET.XPI
[2012-10-11 18:32:06 | 000,241,907 | ---- | M] () (No name found) -- C:\USERS\BU\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\697R8MDE.DEFAULT\EXTENSIONS\ILLIMITUX@ILLIMITUX.NET.XPI
O2 - BHO: (no name) - AutorunsDisabled - No CLSID value found.
O4 - HKU\S-1-5-19..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
O4 - HKU\S-1-5-20..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
O4 - HKU\S-1-5-21-3281900742-1341766618-1541079237-1001..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A43}
Dostępne tylko dla zarejestrowanych użytkowników (Reg Error: Key error.)
[2013-05-30 13:22:32 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2013-05-30 13:10:04 | 000,000,000 | ---D | C] -- C:\ProgramData\explauncher
[2013-05-30 13:10:02 | 000,000,000 | ---D | C] -- C:\ProgramData\launcher
[2013-05-18 17:48:53 | 000,000,000 | ---D | C] -- C:\Users\Bu\AppData\Roaming\.freeciv
[2013-05-18 17:48:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freeciv 2.1.9 (GTK+ client)
[2013-05-18 17:48:06 | 000,000,000 | ---D | C] -- C:\Program Files\Freeciv-2.1.9-gtk2
[2013-05-19 16:44:19 | 000,000,000 | ---D | C] -- C:\Program Files\TweakMe!
[2013-05-19 16:53:09 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\DAEMON Tools Lite
[2012-12-31 14:05:59 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\PC Suite
[2013-05-26 15:38:00 | 000,657,600 | ---- | C] (Sysinternals -
Dostępne tylko dla zarejestrowanych użytkowników) -- C:\Users\Bu\Desktop\autoruns.exe
[2013-06-01 00:01:03 | 001,839,910 | ---- | M] () -- C:\Users\Bu\Desktop\AutoRuns.arn
[2013-05-18 19:06:36 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\.freeciv
[2013-05-30 14:59:26 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\Auslogics
[2012-12-31 14:04:37 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\Canneverbe Limited
[2012-12-31 14:05:09 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\Cream Software
[2012-12-31 14:05:12 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\dp3d
[2012-12-31 14:05:13 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\EPSON
[2012-12-31 14:05:41 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\Mount&Blade
[2012-12-31 14:05:41 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\Mount&Blade Warband
[2012-12-31 14:05:59 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\Nokia
[2012-12-31 14:05:59 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\PC Suite
[2012-12-31 14:05:59 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\runic games
[2012-12-31 14:06:03 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\Spik
[2013-01-05 20:50:36 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\TuneUp Software
[2013-03-02 11:32:10 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\Unity
[2012-12-31 14:06:08 | 000,000,000 | ---D | M] -- C:\Users\Bu\AppData\Roaming\VDownloader
@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:E9EB8C3A
:Services
gupdate
gupdatem
:Files
C:\Program Files\Google\Update
C:\Users\Bu\Documents\*.reg
:Reg
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
:Commands
[clearallrestorepoints]
[emptytemp]