Prawdopodobny problem z trojanem

Kod:
: OTL

DRV - File not found [File_System | On_Demand | Stopped] -- C: \Program Files\Xfire2\XFDriver.sys -- (XFDriver)

DRV - File not found [Kernel | On_Demand | Stopped] -- D: \Games\LineageII PL\Frost\frost.sys -- (Frost_6_9_0_1)

DRV - File not found [File_System | On_Demand | Stopped] -- C: \ProgramData\BitRaider\BRDriver.sys -- (BRDriver)

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http: //www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD5000AAKS-00V1A0_WD-WCAWF186034860348&ts=1379165268

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http: //www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD5000AAKS-00V1A0_WD-WCAWF186034860348&ts=1379165268

IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}

IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}:  "URL" = http: //search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD5000AAKS-00V1A0_WD-WCAWF186034860348&ts=1379165269

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http: //isearch.babylon.com/?affID=119816&babsrc=HP_ss_bayi&mntrId=241B243C2006CD67

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http: //www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD5000AAKS-00V1A0_WD-WCAWF186034860348&ts=1379165268

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http: //mysearch.avg.com?cid={8C38DACF-C2B7-442E-9BCC-0F9C5DD186A6}&mid=43b3ac51e5d143ab9b867a3fab6cc647-8dda247d732466c0489f88b2630167c10e7d46ae&lang=pl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2013-12-21 09: 43: 46&v=17.2.0.38&pid=safeguard&sg=&sap=hp

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A9 4A 0D 1C 72 37 CE 01  [binary data]

IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}:  "URL" = http: //www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR

IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}:  "URL" = http: //isearch.babylon.com/?q={searchTerms}&affID=119816&babsrc=SP_ss_bayi&mntrId=241B243C2006CD67

IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}:  "URL" = http: //search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD5000AAKS-00V1A0_WD-WCAWF186034860348&ts=1379165269

IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}:  "URL" = http: //mysearch.avg.com/search?cid={8C38DACF-C2B7-442E-9BCC-0F9C5DD186A6}&mid=43b3ac51e5d143ab9b867a3fab6cc647-8dda247d732466c0489f88b2630167c10e7d46ae&lang=pl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2013-12-21 09: 43: 46&v=17.2.0.38&pid=safeguard&sg=&sap=dsp&q={searchTerms}

O4 - HKCU..\Run:  [AVG-Secure-Search-Update_1213b] C: \Users\Abyx!\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=43b3ac51e5d143ab9b867a3fab6cc647-8dda247d732466c0489f88b2630167c10e7d46ae /CMPID=1213b File not found

O4 - HKCU..\Run:  [Tiny download manager] "C: \Users\Abyx!\AppData\Local\DM\TinyDM.exe" /M File not found

O4 - HKLM..\RunOnce:  [Malwarebytes Anti-Malware] C: \Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent File not found

O8 - Extra context menu item:  &Download All using 4shared Desktop - res: //C: \Program Files\4shared Desktop\Desktop.32/D_ALL_LINK File not found

O8 - Extra context menu item:  &Download using 4shared Desktop - res: //C: \Program Files\4shared Desktop\Desktop.32/D_ONE_LINK File not found

O9 - Extra 'Tools' menuitem :  Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error:  Key error. File not found

@Alternate Data Stream - 134 bytes -> C: \ProgramData\TEMP: 373E1720



: Files

C: \Program Files\mozilla firefox\searchplugins\qvo6.xml



: Commands

[emptytemp]