: OTL
PRC - [2013-06-06 08:01:35 | 001,495,712 | ---- | M] (APN) -- D:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
MOD - [2013-08-20 11:46:13 | 000,086,016 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEMA340.tmp
MOD - [2013-08-20 11:46:13 | 000,086,016 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEMA2C1.tmp
MOD - [2013-08-20 11:46:13 | 000,086,016 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEMA1F4.tmp
MOD - [2013-08-20 11:46:12 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM9F8E.tmp
MOD - [2013-08-20 11:46:12 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM9EB1.tmp
MOD - [2013-08-20 11:46:12 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM9DB6.tmp
MOD - [2013-08-20 11:46:12 | 000,086,016 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEMA127.tmp
MOD - [2013-08-20 11:46:11 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM9CCA.tmp
MOD - [2013-08-20 11:46:11 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM9BFD.tmp
MOD - [2013-08-20 11:46:11 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM9B01.tmp
MOD - [2013-08-20 11:46:11 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM99C7.tmp
MOD - [2013-08-20 11:46:10 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM990A.tmp
MOD - [2013-08-20 11:46:10 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM984D.tmp
MOD - [2013-08-20 11:46:10 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM9770.tmp
MOD - [2013-08-20 11:46:10 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM96C3.tmp
MOD - [2013-08-20 11:46:10 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM95C7.tmp
MOD - [2013-08-20 11:46:09 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM94DB.tmp
MOD - [2013-08-20 11:46:09 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM93D0.tmp
MOD - [2013-08-20 11:46:09 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM9322.tmp
MOD - [2013-08-20 11:46:09 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM9227.tmp
MOD - [2013-08-20 11:46:08 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM916A.tmp
MOD - [2013-08-20 11:46:08 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM909D.tmp
MOD - [2013-08-20 11:46:08 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM8FE0.tmp
MOD - [2013-08-20 11:46:08 | 000,120,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM8F02.tmp
MOD - [2013-08-20 11:46:08 | 000,072,192 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM8E16.tmp
MOD - [2013-08-20 11:46:07 | 000,072,704 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM8CEA.tmp
MOD - [2013-08-20 11:46:07 | 000,072,192 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM8DA7.tmp
MOD - [2013-08-20 11:46:07 | 000,072,192 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM8BBF.tmp
MOD - [2013-08-20 11:46:07 | 000,057,344 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM8A95.tmp
MOD - [2013-08-20 11:46:07 | 000,053,760 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM89D8.tmp
MOD - [2013-08-20 11:46:06 | 000,064,000 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM88EC.tmp
MOD - [2013-08-20 11:46:06 | 000,053,760 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM880F.tmp
MOD - [2013-08-20 11:46:05 | 000,075,776 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM84E2.tmp
MOD - [2013-08-20 11:46:05 | 000,075,776 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM8463.tmp
MOD - [2013-08-20 11:46:05 | 000,075,776 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM8366.tmp
MOD - [2013-08-20 11:46:05 | 000,075,776 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM82B8.tmp
MOD - [2013-08-20 11:46:05 | 000,056,320 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM83C5.tmp
MOD - [2013-08-20 11:46:04 | 000,075,776 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM821A.tmp
MOD - [2013-08-20 11:46:04 | 000,075,776 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM80FD.tmp
MOD - [2013-08-20 11:46:04 | 000,075,776 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM807F.tmp
MOD - [2013-08-20 11:46:04 | 000,075,776 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM800F.tmp
MOD - [2013-08-20 11:46:04 | 000,068,608 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM7F43.tmp
MOD - [2013-08-20 11:46:04 | 000,056,832 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM815D.tmp
MOD - [2013-08-20 11:46:04 | 000,055,296 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM7E57.tmp
MOD - [2013-08-20 11:46:03 | 000,075,776 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM7B85.tmp
MOD - [2013-08-20 11:46:03 | 000,056,320 | ---- | M] () -- D:\Users\klaudia\AppData\Local\Temp\XTMP1MC3VE\DEM7D99.tmp
SRV - [2013-06-06 08:01:43 | 000,169,640 | ---- | M] (APN LLC.) [Auto | Running] -- D:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe -- (APNMCP)
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = D:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=vsl&s={searchTerms}&f=4
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {FE69C007-C452-4d3e-86D2-1730DF8BC871} - D:\Program Files (x86)\SimilarSites\SimilarSites.dll (SimilarGroup)
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2247187
IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.lookforithere.info/?l=1&q={searchTerms}&pid=685&r=2013/05/10&hid=212833661&lg=EN&cc=PL&unqvl=14
E - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\URLSearchHook: {192a6019-26d2-4611-aead-07cd7733b146} - No CLSID value found
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\URLSearchHook: {707db484-2428-402d-afb5-d85b387544c7} - No CLSID value found
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - No CLSID value found
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\URLSearchHook: {FE69C007-C452-4d3e-86D2-1730DF8BC871} - D:\Program Files (x86)\SimilarSites\SimilarSites.dll (SimilarGroup)
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = http://start.facemoods.com/?a=vsl&s={searchTerms}&f=4
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=D44F6CF0498EF8D3&affID=119357&tsp=4979
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\SearchScopes\{4ED5866A-A71B-48C6-802B-3EABE1681B96}: "URL" = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2247187
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.lookforithere.info/?l=1&q={searchTerms}&pid=685&r=2013/05/10&hid=212833661&lg=EN&cc=PL&unqvl=14
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/mb161/?search={searchTerms}&loc=IB_DS&a=6R8brpzOCD&i=26
IE - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - prefs.js..browser.search.defaultenginename: "WebSearch"
FF - prefs.js..browser.search.defaultenginename,S: S", "WebSearch"
FF - prefs.js..browser.search.defaultthis.engineName: "Mario Forever Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://websearch.lookforithere.info/?pid=685&r=2013/05/10&hid=212833661&lg=EN&cc=PL&unqvl=14&l=1&q="
FF - prefs.js..browser.search.order.1: "Delta Search"
FF - prefs.js..browser.search.order.1,S: S", "WebSearch"
FF - prefs.js..browser.search.selectedEngine: "Delta Search"
FF - prefs.js..browser.search.selectedEngine,S: S", "WebSearch"
FF - prefs.js..browser.startup.homepage: "http://www1.delta-search.com/?babsrc=HP_ss&mntrId=D44F6CF0498EF8D3&affID=119357&tsp=4979"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1
[2013-03-11 11:48:05 | 000,000,000 | ---D | M] (IncrediMail MediaBar 2 Community Toolbar) -- D:\Users\klaudia\AppData\Roaming\mozilla\Firefox\Profiles\ftan1rmc.default\extensions\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}
[2013-03-12 18:17:58 | 000,000,000 | ---D | M] ("SimilarSites") -- D:\Users\klaudia\AppData\Roaming\mozilla\Firefox\Profiles\ftan1rmc.default\extensions\{E71B541F-5E72-5555-A47C-E47863195841}
[2011-11-21 16:28:39 | 000,000,000 | ---D | M] (DealPly) -- D:\Users\klaudia\AppData\Roaming\mozilla\Firefox\Profiles\ftan1rmc.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
[2013-05-13 20:19:18 | 000,000,000 | ---D | M] (coonytiynnueotiosave) -- D:\Users\klaudia\AppData\Roaming\mozilla\Firefox\Profiles\ftan1rmc.default\extensions\6i6zpn9@bclkkgrbxxs.com
[2013-04-05 13:28:20 | 000,000,000 | ---D | M] (Bruowsee2save) -- D:\Users\klaudia\AppData\Roaming\mozilla\Firefox\Profiles\ftan1rmc.default\extensions\edetbvr-lxb@apqwovrrbaf.edu
[2013-05-13 20:19:18 | 000,000,000 | ---D | M] (SearchNewTab) -- D:\Users\klaudia\AppData\Roaming\mozilla\Firefox\Profiles\ftan1rmc.default\extensions\eeou@oqsabvyr.com
[2013-08-19 16:34:26 | 000,000,000 | ---D | M] (No name found) -- D:\Users\klaudia\AppData\Roaming\mozilla\Firefox\Profiles\ftan1rmc.default\extensions\ffxtlbr@babylon.com
[2013-08-19 16:34:50 | 000,000,000 | ---D | M] (Delta Toolbar) -- D:\Users\klaudia\AppData\Roaming\mozilla\Firefox\Profiles\ftan1rmc.default\extensions\ffxtlbr@delta.com
[2011-05-23 19:15:52 | 000,000,000 | ---D | M] (Facemoods) -- D:\Users\klaudia\AppData\Roaming\mozilla\Firefox\Profiles\ftan1rmc.default\extensions\ffxtlbr@Facemoods.com
[2010-10-10 16:46:56 | 000,004,669 | ---- | M] () (No name found) -- D:\Users\klaudia\AppData\Roaming\mozilla\firefox\profiles\ftan1rmc.default\extensions\ffxtlbr@Facemoods.com\content\xpiInstallLgc.js
[2013-07-23 13:41:49 | 000,006,507 | ---- | M] () -- D:\Users\klaudia\AppData\Roaming\mozilla\firefox\profiles\ftan1rmc.default\searchplugins\babylon.xml
[2012-12-14 22:38:47 | 000,002,432 | ---- | M] () -- D:\Users\klaudia\AppData\Roaming\mozilla\firefox\profiles\ftan1rmc.default\searchplugins\babylon1.xml
[2012-11-15 23:33:04 | 000,000,929 | ---- | M] () -- D:\Users\klaudia\AppData\Roaming\mozilla\firefox\profiles\ftan1rmc.default\searchplugins\conduit.xml
[2013-07-23 13:42:24 | 000,001,294 | ---- | M] () -- D:\Users\klaudia\AppData\Roaming\mozilla\firefox\profiles\ftan1rmc.default\searchplugins\delta.xml
[2012-06-24 11:22:23 | 000,002,203 | ---- | M] () -- D:\Users\klaudia\AppData\Roaming\mozilla\firefox\profiles\ftan1rmc.default\searchplugins\MyStart Search.xml
[2013-05-13 20:19:41 | 000,007,848 | ---- | M] () -- D:\Users\klaudia\AppData\Roaming\mozilla\firefox\profiles\ftan1rmc.default\searchplugins\WebSearch.xml
[2013-04-12 20:43:16 | 000,263,064 | ---- | M] (Mozilla Foundation) -- D:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011-10-03 06:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2013-03-14 09:15:47 | 000,002,980 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2012-12-14 22:38:11 | 000,002,349 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2013-03-14 09:15:47 | 000,001,619 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2011-05-23 19:15:53 | 000,002,046 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrchvsl.xml
[2013-03-14 09:15:47 | 000,001,130 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2013-03-14 09:15:47 | 000,001,071 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2013-03-14 09:15:47 | 000,001,396 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2013-03-14 09:15:47 | 000,001,896 | ---- | M] () -- D:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
CHR - default_search_provider: Delta Search (Enabled)
CHR - default_search_provider: search_url = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=D44F6CF0498EF8D3&affID=119357&tsp=4979
CHR - default_search_provider: suggest_url = ,
CHR - homepage: http://www1.delta-search.com/?babsrc=HP_ss&mntrId=D44F6CF0498EF8D3&affID=119357&tsp=4979
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
O2 - BHO: (Ask Toolbar) - {4D594333-0076-A76A-76A7-7A786E7484D7} - D:\Program Files (x86)\AskPartnerNetwork\Toolbar\MYC3\Passport.dll (APN LLC.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - D:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {4D594333-0076-A76A-76A7-7A786E7484D7} - D:\Program Files (x86)\AskPartnerNetwork\Toolbar\MYC3\Passport.dll (APN LLC.)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Incredibar Toolbar) - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - D:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll File not found
O3 - HKLM\..\Toolbar: (SimilarSites) - {FE69C007-C452-4d3e-86D2-1730DF8BC871} - D:\Program Files (x86)\SimilarSites\SimilarSites.dll (SimilarGroup)
O3 - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\Toolbar\WebBrowser: (no name) - {192A6019-26D2-4611-AEAD-07CD7733B146} - No CLSID value found.
O3 - HKU\S-1-5-21-2070675462-2244790327-4228716878-1000\..\Toolbar\WebBrowser: (Ask Toolbar) - {4D594333-0076-A76A-76A7-7A786E7484D7} - D:\Program Files (x86)\AskPartnerNetwork\Toolbar\MYC3\Passport.dll (APN LLC.)
O4 - HKLM..\Run: [ApnTBMon] D:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
O4 - HKU\S-1-5-19..\Run: [Sidebar] D:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] D:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKLM..\RunOnce: [AvgUninstallURL] D:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - D:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (D:\Windows\system32\userinit.exe) - D:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - D:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - D:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O33 - MountPoints2\{09a477fd-e7e0-11e2-9d13-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{09a477fd-e7e0-11e2-9d13-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{0a9e8a0a-d027-11e2-91c0-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{0a9e8a0a-d027-11e2-91c0-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{0a9e8a16-d027-11e2-91c0-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{0a9e8a16-d027-11e2-91c0-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{0db49d34-fa58-11e1-ad68-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{0db49d34-fa58-11e1-ad68-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{0db49d40-fa58-11e1-ad68-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{0db49d40-fa58-11e1-ad68-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{1bc4a6b5-991c-11e1-a6a1-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{1bc4a6b5-991c-11e1-a6a1-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{1bc4a6c0-991c-11e1-a6a1-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{1bc4a6c0-991c-11e1-a6a1-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{1d5e5874-b49c-11e2-8d74-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{1d5e5874-b49c-11e2-8d74-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{1d5e5889-b49c-11e2-8d74-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{1d5e5889-b49c-11e2-8d74-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{20f26e0b-b409-11e2-8006-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{20f26e0b-b409-11e2-8006-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{20f26e16-b409-11e2-8006-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{20f26e16-b409-11e2-8006-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{20f26e21-b409-11e2-8006-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{20f26e21-b409-11e2-8006-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{24f9d40f-c50e-11e0-9626-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{24f9d40f-c50e-11e0-9626-6cf0498ef8d3}\Shell\AutoRun\command - "" = L:\Setup.exe
O33 - MountPoints2\{24f9d412-c50e-11e0-9626-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{24f9d412-c50e-11e0-9626-6cf0498ef8d3}\Shell\AutoRun\command - "" = K:\Setup.exe
O33 - MountPoints2\{262b814a-565e-11e1-b40c-00a0c6000000}\Shell - "" = AutoRun
O33 - MountPoints2\{262b814a-565e-11e1-b40c-00a0c6000000}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{262b8191-565e-11e1-b40c-00a0c6000000}\Shell - "" = AutoRun
O33 - MountPoints2\{262b8191-565e-11e1-b40c-00a0c6000000}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{286b8c6b-a4a7-11e1-a4d1-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{286b8c6b-a4a7-11e1-a4d1-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{2a1e14c2-2e72-11e2-960e-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{2a1e14c2-2e72-11e2-960e-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{2a1e14cd-2e72-11e2-960e-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{2a1e14cd-2e72-11e2-960e-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{2b3cac5e-b3bc-11e2-bd03-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{2b3cac5e-b3bc-11e2-bd03-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{2b3cac6b-b3bc-11e2-bd03-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{2b3cac6b-b3bc-11e2-bd03-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{3b43cff8-eebf-11e2-bd9c-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{3b43cff8-eebf-11e2-bd9c-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{3cc6031c-8810-11e2-8fd3-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{3cc6031c-8810-11e2-8fd3-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{3cc6032a-8810-11e2-8fd3-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{3cc6032a-8810-11e2-8fd3-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4b64dd08-7299-11e2-b0e7-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{4b64dd08-7299-11e2-b0e7-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4b64dd12-7299-11e2-b0e7-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{4b64dd12-7299-11e2-b0e7-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4b64dd31-7299-11e2-b0e7-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{4b64dd31-7299-11e2-b0e7-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4b64dd3c-7299-11e2-b0e7-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{4b64dd3c-7299-11e2-b0e7-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4b64dd49-7299-11e2-b0e7-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{4b64dd49-7299-11e2-b0e7-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4b64dd54-7299-11e2-b0e7-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{4b64dd54-7299-11e2-b0e7-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4b64dd60-7299-11e2-b0e7-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{4b64dd60-7299-11e2-b0e7-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4b64dd6b-7299-11e2-b0e7-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{4b64dd6b-7299-11e2-b0e7-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{616ebe84-66cc-11e0-9a4e-9a99ddd2f149}\Shell - "" = AutoRun
O33 - MountPoints2\{616ebe84-66cc-11e0-9a4e-9a99ddd2f149}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{616ebe8f-66cc-11e0-9a4e-9a99ddd2f149}\Shell - "" = AutoRun
O33 - MountPoints2\{616ebe8f-66cc-11e0-9a4e-9a99ddd2f149}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{616ebe9b-66cc-11e0-9a4e-9a99ddd2f149}\Shell - "" = AutoRun
O33 - MountPoints2\{616ebe9b-66cc-11e0-9a4e-9a99ddd2f149}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{616ebea6-66cc-11e0-9a4e-9a99ddd2f149}\Shell - "" = AutoRun
O33 - MountPoints2\{616ebea6-66cc-11e0-9a4e-9a99ddd2f149}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{6306a318-a64f-11e1-8a24-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{6306a318-a64f-11e1-8a24-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{6c65e211-cf9c-11e2-9fee-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{6c65e211-cf9c-11e2-9fee-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{6c65e21c-cf9c-11e2-9fee-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{6c65e21c-cf9c-11e2-9fee-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{72151c73-9224-11e2-8b11-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{72151c73-9224-11e2-8b11-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{7272e819-8820-11e2-abf0-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{7272e819-8820-11e2-abf0-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{7272e824-8820-11e2-abf0-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{7272e824-8820-11e2-abf0-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{72e4ee5d-5657-11e1-a0e4-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{72e4ee5d-5657-11e1-a0e4-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{72e4ee96-5657-11e1-a0e4-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{72e4ee96-5657-11e1-a0e4-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{7520c4a0-8219-11e0-b056-a46182dc5ce0}\Shell - "" = AutoRun
O33 - MountPoints2\{7520c4a0-8219-11e0-b056-a46182dc5ce0}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{7520c4b6-8219-11e0-b056-a46182dc5ce0}\Shell - "" = AutoRun
O33 - MountPoints2\{7520c4b6-8219-11e0-b056-a46182dc5ce0}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{78019044-209f-11e0-9a89-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{78019044-209f-11e0-9a89-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{78019062-209f-11e0-9a89-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{78019062-209f-11e0-9a89-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{78281c8a-b3d0-11e2-8f43-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{78281c8a-b3d0-11e2-8f43-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{78281c96-b3d0-11e2-8f43-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{78281c96-b3d0-11e2-8f43-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{78281ca0-b3d0-11e2-8f43-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{78281ca0-b3d0-11e2-8f43-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{78281cac-b3d0-11e2-8f43-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{78281cac-b3d0-11e2-8f43-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{78281cb6-b3d0-11e2-8f43-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{78281cb6-b3d0-11e2-8f43-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{78281cc2-b3d0-11e2-8f43-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{78281cc2-b3d0-11e2-8f43-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{8236dd28-6862-11e0-b95d-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{8236dd28-6862-11e0-b95d-806e6f6e6963}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{88003989-4cdc-11e2-ae26-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{88003989-4cdc-11e2-ae26-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{8c94a180-cf9a-11e2-8543-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{8c94a180-cf9a-11e2-8543-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{8c94a1a2-cf9a-11e2-8543-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{8c94a1a2-cf9a-11e2-8543-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{900c366b-cf62-11e2-8a5a-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{900c366b-cf62-11e2-8a5a-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{918b8196-e7e2-11e2-802b-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{918b8196-e7e2-11e2-802b-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{9aebe979-8802-11e2-8b1e-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{9aebe979-8802-11e2-8b1e-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{9aebe984-8802-11e2-8b1e-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{9aebe984-8802-11e2-8b1e-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{a13d584b-8233-11e0-9024-b2a5633a74e6}\Shell - "" = AutoRun
O33 - MountPoints2\{a13d584b-8233-11e0-9024-b2a5633a74e6}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{b5078bd5-2ae9-11e0-8634-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{b5078bd5-2ae9-11e0-8634-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{b5078be2-2ae9-11e0-8634-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{b5078be2-2ae9-11e0-8634-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{b5078bed-2ae9-11e0-8634-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{b5078bed-2ae9-11e0-8634-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c06fe9b7-585f-11e0-aac0-e46938472159}\Shell - "" = AutoRun
O33 - MountPoints2\{c06fe9b7-585f-11e0-aac0-e46938472159}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c06fe9c3-585f-11e0-aac0-e46938472159}\Shell - "" = AutoRun
O33 - MountPoints2\{c06fe9c3-585f-11e0-aac0-e46938472159}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c18b4645-3b29-11e2-b5ed-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{c18b4645-3b29-11e2-b5ed-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c19c8cc3-2fb0-11e2-bf83-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{c19c8cc3-2fb0-11e2-bf83-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c19c8ccf-2fb0-11e2-bf83-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{c19c8ccf-2fb0-11e2-bf83-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c9a93232-8e8a-11e0-86c4-b87fb17c27e7}\Shell - "" = AutoRun
O33 - MountPoints2\{c9a93232-8e8a-11e0-86c4-b87fb17c27e7}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{cf745a0e-37fb-11e2-9bc4-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{cf745a0e-37fb-11e2-9bc4-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{cf745a1a-37fb-11e2-9bc4-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{cf745a1a-37fb-11e2-9bc4-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{d96d5207-2ae0-11e0-b5cc-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{d96d5207-2ae0-11e0-b5cc-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{e40ef915-d847-11e2-9426-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{e40ef915-d847-11e2-9426-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{e40ef923-d847-11e2-9426-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{e40ef923-d847-11e2-9426-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{e767d7d8-c11b-11e2-a180-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{e767d7d8-c11b-11e2-a180-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{e767d805-c11b-11e2-a180-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{e767d805-c11b-11e2-a180-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{eb859be4-735b-11e2-b1d9-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{eb859be4-735b-11e2-b1d9-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{eb859bfc-735b-11e2-b1d9-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{eb859bfc-735b-11e2-b1d9-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{ebd870b4-f37f-11e1-80f3-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{ebd870b4-f37f-11e1-80f3-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{f191d64b-5a81-11e1-a1d3-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{f191d64b-5a81-11e1-a1d3-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{f4c7037c-b481-11e2-acfa-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{f4c7037c-b481-11e2-acfa-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{f4c70389-b481-11e2-acfa-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{f4c70389-b481-11e2-acfa-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{f7cb5e58-b097-11e1-b507-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{f7cb5e58-b097-11e1-b507-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{f7cb5e66-b097-11e1-b507-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{f7cb5e66-b097-11e1-b507-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{f7e0703a-2f37-11e2-a37b-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{f7e0703a-2f37-11e2-a37b-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{f7e07048-2f37-11e2-a37b-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{f7e07048-2f37-11e2-a37b-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{fe68ad93-3413-11e2-a12f-6cf0498ef8d3}\Shell - "" = AutoRun
O33 - MountPoints2\{fe68ad93-3413-11e2-a12f-6cf0498ef8d3}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2009-08-22 20:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
[2013-08-17 01:03:51 | 000,000,000 | ---D | C] -- D:\Users\klaudia\AppData\Roaming\Otaku Helper
[2013-08-05 21:14:38 | 000,000,000 | ---D | C] -- D:\Users\klaudia\AppData\Local\Unity
[2013-08-04 15:14:15 | 000,000,000 | ---D | C] -- D:\Users\klaudia\Desktop\22
[2013-07-26 13:58:51 | 000,000,000 | ---D | C] -- D:\Windows\SysWow64\Extensions
[2013-07-26 13:58:49 | 000,000,000 | ---D | C] -- D:\Windows\SysWow64\searchplugins
:REG
"{15CC861C-C69E-3758-8961-CE304C2595B6}" = Google Talk Plugin
"{4D594333-0076-A76A-76A7-A758B70B0A00}" = Ask Toolbar
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{C3592426-531E-4110-911D-BFECE2CE284C}" = osu!
:Commands
[emptytemp]
z opcji USUŃ.