:OTL
SRV - [2010/08/23 03:31:18 | 001,938,880 | ---- | M] (Discordia Limited) [Auto | Stopped] -- C:\Program Files\Fun4IM\Bandoo.exe -- (Fun4IM Coordinator)
IE - HKU\S-1-5-21-527237240-1682526488-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://search.babylon.com/?babsrc=HP_ss ... 22158d5681 IE - HKU\S-1-5-21-527237240-1682526488-682003330-1003\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\InprocServer32 File not found
IE - HKU\S-1-5-21-527237240-1682526488-682003330-1003\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..keyword.URL: "http://www.searchqu.com/web?src=ffb&systemid=403&q="
[2011/12/13 11:18:13 | 000,002,288 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (myBabylon English Toolbar) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - Reg Error: Value error. File not found
O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (myBabylon English Toolbar) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-527237240-1682526488-682003330-1003\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-527237240-1682526488-682003330-1003\..\Toolbar\WebBrowser: (myBabylon English Toolbar) - {B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} - Reg Error: Value error. File not found
O4 - HKLM\..\RunOnce: [] File not found
O8 - Extra context menu item: Translate this web page with Babylon -
res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm File not found
O8 - Extra context menu item: Translate with Babylon -
res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm File not found
O9 - Extra Button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} -
res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm File not found
O9 - Extra 'Tools' menuitem : Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} -
res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm File not found
O20 - AppInit_DLLs: (c:\progra~1\windows searchqu toolbar\datamngr\datamngr.dll) - File not found
O20 - AppInit_DLLs: (c:\progra~1\fun4im\bndhook.dll) - c:\Program Files\Fun4IM\BndHook.dll (Discordia Limited)
[2011/12/13 11:18:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Babylon
[2010/12/10 18:09:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Fun4IM
[2010/08/08 10:54:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Champin\Application Data\Babylon
[2010/12/30 22:06:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Champin\Application Data\Bandoo
[2010/08/07 15:40:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Champin\Application Data\CrazyLoader
[2010/08/08 10:26:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Champin\Application Data\WhiteSmokeSetup
[2010/08/08 10:26:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Champin\Application Data\WhiteSmokeTranslator
[2012/02/16 16:57:01 | 000,000,984 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-527237240-1682526488-682003330-1003Core.job
[2012/02/17 19:57:02 | 000,001,006 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-527237240-1682526488-682003330-1003UA.job
[2009/04/10 18:40:40 | 000,118,784 | ---- | M] () -- C:\Documents and Settings\Champin\Application Data\Convivea\Bit_Che\scripts\x.exe
[2010/08/01 14:05:18 | 000,807,744 | ---- | M] (Acresso Software Inc. ) -- C:\Documents and Settings\Champin\Application Data\WhiteSmokeSetup\setup.exe
:Commands
[emptytemp]
[createrestorepoint]