R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://www.couldnotfind.com/search_page.html?&account_id=137837
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.couldnotfind.com/search_page.html?&account_id=137837
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.coolsearch.biz/
R1 – HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://www.couldnotfind.com/search_page.html?&account_id=137837
R0 – HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://www.locators.com/sidebar/
R1 – HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://www.locators.com/search.php?que=%s
R1 – HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = proxy.toya.net.pl:6060
R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
R3 – URLSearchHook: (no name) – _{CFBFAE00–17A6–11D0–99CB–00C04FD64497} – (no file)
F1 – win.ini: run=C:WINDOWSSystem32serviceswmplayer.exe
O2 – BHO: (no name) – {000006B1–19B5–414A–849F–2A3C64AE6939} – C:WINDOWSi.dll
O2 – BHO: (no name) – {000020DD–C72E–4113–AF77–DD56626C6C42} – C:WINDOWS waintec.dll
O2 – BHO: (no name) – {06849E9F–C8D7–4D59–B87D–784B7D6BE0B3} – C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 – BHO: (no name) – {5321E378–FFAD–4999–8C62–03CA8155F0B3} – C:WINDOWSSystem32services2.00.00.dll
O2 – BHO: (no name) – {71ED4FBA–4024–4bbe–91DC–9704C93F453E} – c:progra~1iesearchbariesearchbar.dll
O2 – BHO: (no name) – {83DE62E0–5805–11D8–9B25–00E04C60FAF2} – C:WINDOWS2_0_1browserhelper2.dll
O2 – BHO: (no name) – {9C691A33–7DDA–4C2F–BE4C–C176083F35CF} – C:WINDOWSDownloaded Program Filesridge.dll
O2 – BHO: (no name) – {AA58ED58–01DD–4d91–8333–CF10577473F7} – c:program filesgooglegoogletoolbar1.dll
O2 – BHO: (no name) – {F7F808F0–6F7D–442C–93E3–4A4827C2E4C8} – C:WINDOWS em214.dll
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – C:WINDOWSSystem32msdxm.ocx
O3 – Toolbar: IE Search Bar – {71ED4FBA–4024–4bbe–91DC–9704C93F453E} – c:progra~1iesearchbariesearchbar.dll
O4 – HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 – HKLM..Run: [IgfxTray] C:WINDOWSSystem32igfxtray.exe
O4 – HKLM..Run: [HotKeysCmds] C:WINDOWSSystem32hkcmd.exe
O4 – HKLM..Run: [QuickTime Task] "C:WINDOWSSystem32qttask.exe" –atboottime
O4 – HKLM..Run: [NeroCheck] C:WINDOWSsystem32NeroCheck.exe
O4 – HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavaj2re1.4.2_01injusched.exe
O4 – HKLM..Run: [xpsystem] C:WINDOWSSystem32serviceswmplayer.exe
O4 – HKLM..Run: [Zone system] C:WINDOWSszchost.exe
O4 – HKLM..Run: [IST Service] C:Program FilesISTsvcistsvc.exe
O4 – HKLM..Run: [Internet Optimizer] "C:Program FilesInternet Optimizeroptimize.exe"
O4 – HKLM..Run: [msbb] c:docume~1userustawi~1 empmsbb.exe
O4 – HKLM..Run: [Power Scan] C:Program FilesPower Scanpowerscan.exe
O4 – HKLM..Run: [kxid] C:WINDOWSkxid.exe
O4 – HKLM..Run: [RunDLL] rundll32.exe "C:WINDOWSDownloaded Program Filesridge.dll",Load
O4 – HKCU..Run: [MSMSGS] "C:Program FilesMessengermsmsgs.exe" /background
O4 – HKCU..Run: [sws.exe] c:program filesGlobalDialerdomer00084gd–dial.exe –remove
O4 – HKCU..Run: [xpsystem] C:WINDOWSSystem32serviceswmplayer.exe
O4 – HKCU..Run: [Wtil] C:Documents and SettingsUserDane aplikacjistte.exe
O4 – HKCU..Run: [WAPI] C:WINDOWSSystem32wtssvtr.exe
O4 – HKCU..Run: [winupd.exe] C:WINDOWSSystem32winupd.exe
O4 – Startup: Girder3.lnk = C:ProgramyGirderGirder.exe
O4 – Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O4 – Global Startup: Free WebSite Tools.lnk = ?
O4 – Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O4 – Global Startup: Symantec Fax Starter Edition Port.lnk = C:Program FilesMicrosoft OfficeOffice1045OLFSNT40.EXE
O8 – Extra context menu item: &Google Search – res://C:Program FilesGoogleGoogleToolbar1.dll/cmsearch.html
O8 – Extra context menu item: Backward &Links – res://C:Program FilesGoogleGoogleToolbar1.dll/cmbacklinks.html
O8 – Extra context menu item: Cac&hed Snapshot of Page – res://C:Program FilesGoogleGoogleToolbar1.dll/cmcache.html
O8 – Extra context menu item: Si&milar Pages – res://C:Program FilesGoogleGoogleToolbar1.dll/cmsimilar.html
O8 – Extra context menu item: Translate into English – res://C:Program FilesGoogleGoogleToolbar1.dll/cmtrans.html
O9 – Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 – Extra button: ICQ Pro (HKLM)
O9 – Extra 'Tools' menuitem: ICQ (HKLM)
O9 – Extra button: Locators.com Search Bar (HKLM)
O9 – Extra 'Tools' menuitem: Locators.com Search Bar (HKLM)
O9 – Extra button: Related (HKLM)
O9 – Extra 'Tools' menuitem: Show &Related Links (HKLM)
O16 – DPF: {1EB17D1C–141D–4D9D–91CB–24D99215851D} – http://akamai.downloadv3.com/binaries/IA/netia32_EN_XP.cab
O16 – DPF: {5CBA93A3–E0ED–11D5–A70E–00C12601EADE} – http://www.nastolatki.42–net.com/active.exe
O16 – DPF: {91433D86–9F27–402C–B5E3–DEBDD122C339} – http://www.netvenda.com/sites/games–intl/pl/games4.cab
O16 – DPF: {9C691A33–7DDA–4C2F–BE4C–C176083F35CF} (brdg Class) – http://www2.flingstone.com/cab/2000XP/CDTInc/bridge.cab
O16 – DPF: {9EB320CE–BE1D–4304–A081–4B4665414BEF} (MediaTicketsInstaller Control) – http://www.mt–download.com/MediaTicketsInstaller.cab
O16 – DPF: {9F1C11AA–197B–4942–BA54–47A8489BB47F} (Update Class) – http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37958.1080092593
O16 – DPF: {A67BA5E3–5B79–11D6–A711–00C12601EADE} – http://swiatlasek.god.pl/wejscie/extrasexdekoder.exe
O16 – DPF: {BFA1F11D–3121–AFE1–4112–894323212DAC} (GINWORDS Class) – http://gryonline.wp.pl/files/words_2_0_0_11.cab
O16 – DPF: {D27CDB6E–AE6D–11CF–96B8–444553540000} (Shockwave Flash Object) – http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
O16 – DPF: {EF791A6B–FC12–4C68–99EF–FB9E207A39E6} (McFreeScan Class) – http://download.mcafee.com/molbin/iss–loc/vso/en–us/tools/mcfscan/1,5,0,4346/mcfscan.cab
O16 – DPF: {FA65E95C–9B0E–11D6–9BC9–00104B0B4D56} (ActX2 Control) – http://www.certum.pl/unizeto.cab
O16 – DPF: {FDDBE2B8–6602–4AD8–946D–94C5A32FA6C1}