:OTL
PRC - [2010/04/10 09:03:46 | 000,077,824 | ---- | M] () -- C:\Windows\KMService.exe
PRC - [2003/04/18 19:06:26 | 000,008,192 | ---- | M] () -- C:\Windows\SysWOW64\srvany.exe
SRV - [2011/10/25 15:59:16 | 000,244,960 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\StartNow Toolbar\ToolbarUpdaterService.exe -- (Updater Service for StartNow Toolbar)
SRV - [2003/04/18 19:06:26 | 000,008,192 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\srvany.exe -- (KMService)
IE - HKLM\..\URLSearchHook: {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files (x86)\Protection_ZoneAlarm\prxtbPro2.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-3616166266-2019032645-3874157447-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://klit.startnow.com/?src=startpage ... el=&toolba IE - HKU\S-1-5-21-3616166266-2019032645-3874157447-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore =
http://search.conduit.com?SearchSource= ... =CT2645238 FF - prefs.js..browser.search.defaulturl:
http://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
[2012/01/10 11:04:48 | 000,000,000 | ---D | M] (Protection ZoneAlarm Community Toolbar) -- C:\Users\Eric\AppData\Roaming\mozilla\Firefox\Profiles\xoxh9jsg.default\extensions\{d7f26d0e-9801-45c3-a091-8a65e4ed73b5}
[2011/06/30 20:25:46 | 000,000,939 | ---- | M] () -- C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\xoxh9jsg.default\searchplugins\conduit.xml
O2 - BHO: (StartNow Toolbar Helper) - {6E13D095-45C3-4271-9475-F3B48227DD9F} - C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll ()
O2 - BHO: (Protection ZoneAlarm Toolbar) - {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files (x86)\Protection_ZoneAlarm\prxtbPro2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (StartNow Toolbar) - {5911488E-9D1E-40ec-8CBB-06B231CC153F} - C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll ()
O3 - HKLM\..\Toolbar: (Protection ZoneAlarm Toolbar) - {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files (x86)\Protection_ZoneAlarm\prxtbPro2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-3616166266-2019032645-3874157447-1000\..\Toolbar\WebBrowser: (Protection ZoneAlarm Toolbar) - {D7F26D0E-9801-45C3-A091-8A65E4ED73B5} - C:\Program Files (x86)\Protection_ZoneAlarm\prxtbPro2.dll (Conduit Ltd.)
O4 - HKLM\..\Run: [] File not found
O4 - HKLM\..\Run: [ISW] File not found
O4 - HKLM\..\Run: [] File not found
O4 - HKLM\..\RunOnce: [] File not found
O9 - Extra Button: Zend Studio Toolbar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - C:\Program Files (x86)\Zend\Zend Studio 9.0.1\toolbars\ZendIEToolbar.dll (Zend Technologies Ltd)
O9 - Extra 'Tools' menuitem : Zend Studio - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
[2012/02/08 18:31:17 | 000,000,198 | ---- | M] () -- C:\windows\tasks\AutoKMS.job
[2012/02/08 18:31:16 | 000,000,204 | ---- | M] () -- C:\windows\tasks\AutoKMSDaily.job
[2012/02/08 18:30:58 | 000,078,848 | ---- | M] () -- C:\windows\KMSEmulator.exe
:Commands
[emptytemp]
[createrestorepoint]