:OTL SRV - [2013/01/30 01:34:57 | 000,217,088 | ---- | M] (Корпорация Майкрософт) [Auto] -- C:\Users\l.magrez\AppData\Local\Temp\ATAO8kk.exe -- (Winmgmt) SRV - [2012/11/14 03:50:04 | 000,139,576 | ---- | M] (Boxore OU.) [Auto] -- C:\Program Files\Software\Update\SoftwareUpdate.exe -- (supdate) Software Update Service (supdate) SRV - [2012/10/04 08:06:46 | 000,188,760 | ---- | M] () [Auto] -- C:\Program Files\IB Updater\ExtensionUpdaterService.exe -- (IB Updater) IE - HKU\l.magrez_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) FF - HKLM\Software\MozillaPlugins\@www.dlmanager.net/omaha/tools//Software Update;version=8: C:\Program Files\Software\Update\1.2.201.0\npSoftwareOneClick8.dll (Boxore OU.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\webbooster@iminent.com: C:\Program Files\Iminent\webbooster@iminent.com FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\IB Updater\Firefox [2013/01/04 10:27:54 | 000,000,000 | ---D | M] [2012/11/14 03:45:34 | 000,002,349 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml O2 - BHO: (IB Updater) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll () O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKU\l.magrez_ON_C\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [Boxore Client] C:\Program Files\Boxore\BoxoreClient\boxore.exe (Boxore OU) O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.) O20 - AppInit_DLLs: (c:\progra~2\browse~1\23796~1.11\{16cdf~1\browse~1.dll) NetSvcs: winmgmt - C:\Users\l.magrez\AppData\Local\Temp\ATAO8kk.exe (Корпорация Майкрософт) SafeBootMin: WinMgmt - C:\Users\l.magrez\AppData\Local\Temp\ATAO8kk.exe (Корпорация Майкрософт) SafeBootNet: WinMgmt - C:\Users\l.magrez\AppData\Local\Temp\ATAO8kk.exe (Корпорация Майкрософт) [2013/01/04 10:28:21 | 000,000,000 | ---D | C] -- C:\Program Files\Perion [2013/01/04 10:27:54 | 000,000,000 | ---D | C] -- C:\Program Files\IB Updater [2013/02/01 03:12:32 | 000,000,926 | ---- | M] () -- C:\Users\l.magrez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk [2013/01/30 11:08:10 | 000,003,349 | ---- | M] () -- C:\ProgramData\kk8OATA.js [2012/11/14 03:45:22 | 000,000,000 | ---D | M] -- C:\Users\l.magrez\AppData\Roaming\Babylon [2012/09/27 03:58:23 | 000,000,000 | ---D | M] -- C:\Users\l.magrez\AppData\Roaming\pdfforge [2012/07/19 09:49:01 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\OpenCandy [2012/12/21 22:31:45 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\pdfforge [2012/11/14 03:45:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Babylon [2012/12/21 22:30:25 | 000,000,000 | ---D | M] -- C:\ProgramData\SweetIM [2013/01/02 03:25:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Tarma Installer