OTL logfile created on: 2/4/2013 7:04:01 PM - Run 4 OTL by OldTimer - Version 3.2.69.0 Folder = D:\download Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2.97 Gb Total Physical Memory | 1.40 Gb Available Physical Memory | 47.23% Memory free 5.93 Gb Paging File | 4.22 Gb Available in Paging File | 71.19% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files Drive C: | 225.33 Gb Total Space | 178.01 Gb Free Space | 79.00% Space Free | Partition Type: NTFS Drive D: | 225.33 Gb Total Space | 179.37 Gb Free Space | 79.60% Space Free | Partition Type: NTFS Computer Name: ANNA-KOMPUTER | User Name: Anna | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2789141661-186915839-826018185-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.facebook.com/home.php?ref=hp [binary data] IE - HKU\S-1-5-21-2789141661-186915839-826018185-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-2789141661-186915839-826018185-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\S-1-5-21-2789141661-186915839-826018185-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-2789141661-186915839-826018185-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-2789141661-186915839-826018185-1000\..\SearchScopes\{484C784D-5019-44A2-A2A4-29553CF9D34F}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=052D3AC7-7086-4815-AA48-8656D3B1F575&apn_sauid=C0629CA9-F8B1-4C17-98F1-D2EC6A77B443 IE - HKU\S-1-5-21-2789141661-186915839-826018185-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0 FF - prefs.js..browser.search.selectedEngine: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_uid=052D3AC7-7086-4815-AA48-8656D3B1F575&apn_ptnrs=U3&apn_sauid=C0629CA9-F8B1-4C17-98F1-D2EC6A77B443&apn_dtid=OSJ000YYPL&&q=" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.13.2: C:\windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Anna\AppData\Local\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Anna\AppData\Local\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}: C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ [2012/12/19 16:19:45 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/01/13 13:33:01 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/11/17 11:14:41 | 000,000,204 | ---- | M] () FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 18.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/01/13 13:33:01 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 18.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/11/17 11:14:41 | 000,000,204 | ---- | M] () [2012/11/04 11:56:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Anna\AppData\Roaming\mozilla\Extensions [2013/02/04 15:49:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Anna\AppData\Roaming\mozilla\Firefox\Profiles\hc3e8ncq.default-1358272101213\extensions [2013/01/20 11:13:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Anna\AppData\Roaming\mozilla\Firefox\Profiles\hc3e8ncq.default-1358272101213\extensions\staged [2013/02/04 15:49:57 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Users\Anna\AppData\Roaming\mozilla\Firefox\Profiles\hc3e8ncq.default-1358272101213\extensions\toolbar@ask.com [2013/01/15 18:48:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Anna\AppData\Roaming\mozilla\Firefox\Profiles\y32qdsds.default\extensions [2013/01/15 18:48:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Anna\AppData\Roaming\mozilla\Firefox\Profiles\y32qdsds.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013/02/04 15:49:57 | 000,002,308 | ---- | M] () -- C:\Users\Anna\AppData\Roaming\mozilla\firefox\profiles\hc3e8ncq.default-1358272101213\searchplugins\askcom.xml [2013/01/13 13:32:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2013/01/13 13:33:01 | 000,262,704 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012/10/11 03:58:06 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012/10/11 03:58:06 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012/10/11 03:58:06 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012/10/11 03:58:06 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012/10/11 03:58:06 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012/10/11 03:58:06 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://google.pl/ CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}, CHR - homepage: http://google.pl/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Anna\AppData\Local\Google\Chrome\Application\24.0.1312.57\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Anna\AppData\Local\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Anna\AppData\Local\Google\Chrome\Application\24.0.1312.57\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: AVG SiteSafety plugin (Enabled) = C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\\npsitesafety.dll CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files\VideoLAN\VLC\npvlc.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Google Update (Enabled) = C:\Users\Anna\AppData\Local\Google\Update\1.3.21.124\npGoogleUpdate3.dll CHR - plugin: Shockwave for Director (Enabled) = C:\windows\system32\Adobe\Director\np32dsw_1168638.dll CHR - plugin: Shockwave Flash (Enabled) = C:\windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\windows\system32\npDeployJava1.dll CHR - Extension: Fiery Horse chrome Theme = C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\miipddolmnknmpiednnbijmeogpdgknp\1_0\ CHR - Extension: Fiery Horse chrome Theme = C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\miipddolmnknmpiednnbijmeogpdgknp\1_0\ O1 HOSTS File: ([2009/06/10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Free Download Manager) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [APLangApp] C:\Program Files\AnyPC Client\APLangApp.exe (DoctorSoft) O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) O4 - HKLM..\Run: [NvCplDaemon] C:\windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [PDVD8LanguageShortcut] C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe (CyberLink Corp.) O4 - HKLM..\Run: [RemoteControl8] C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePDRShortCut] C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePPShortCut] C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKU\S-1-5-21-2789141661-186915839-826018185-1000..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe () O4 - HKU\S-1-5-21-2789141661-186915839-826018185-1000..\Run: [Tok-Cirrhatus] C:\Users\Anna\AppData\Local\smss.exe () O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Empty.pif () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8 - Extra context menu item: Free YouTube Download - C:\Users\Anna\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm () O8 - Extra context menu item: Pobierz plik wideo w FDM - C:\Program Files\Free Download Manager\dlfvideo.htm () O8 - Extra context menu item: Pobierz w FDM - C:\Program Files\Free Download Manager\dllink.htm () O8 - Extra context menu item: Pobierz wszystkie pliki w FDM - C:\Program Files\Free Download Manager\dlall.htm () O8 - Extra context menu item: Pobierz zaznaczone pliki w FDM - C:\Program Files\Free Download Manager\dlselected.htm () O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.21.99.95 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{42BEF7EB-13E5-4D60-BA22-572C7AC8F720}: DhcpNameServer = 62.21.99.95 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{442FB787-B184-4F19-B4B4-DED6569817AA}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D5F058E3-80EA-40BF-9414-7D8C1337AA38}: DhcpNameServer = 192.168.1.1 192.168.1.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013/01/21 09:47:19 | 000,000,007 | -HS- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{01564e30-2e14-11e2-9c0d-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{01564e30-2e14-11e2-9c0d-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{071f0ba8-2b56-11e2-b802-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{071f0ba8-2b56-11e2-b802-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{071f0bbc-2b56-11e2-b802-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{071f0bbc-2b56-11e2-b802-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{565bb29c-2723-11e2-85f0-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{565bb29c-2723-11e2-85f0-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{682a536f-2f4b-11e2-837a-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{682a536f-2f4b-11e2-837a-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{766bf200-29d2-11e2-b83d-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{766bf200-29d2-11e2-b83d-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{79df8cbc-2dc5-11e2-bec6-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{79df8cbc-2dc5-11e2-bec6-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{87208320-2658-11e2-b225-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{87208320-2658-11e2-b225-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8e8eb74a-3eca-11e2-ae5a-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{8e8eb74a-3eca-11e2-ae5a-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8e8eb76d-3eca-11e2-ae5a-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{8e8eb76d-3eca-11e2-ae5a-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8e8eb783-3eca-11e2-ae5a-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{8e8eb783-3eca-11e2-ae5a-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8eafdd94-3d3d-11e2-85ef-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{8eafdd94-3d3d-11e2-85ef-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8f040b40-3148-11e2-b9bb-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{8f040b40-3148-11e2-b9bb-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{b11dcdf7-2350-11e2-ae59-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{b11dcdf7-2350-11e2-ae59-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{b11dce19-2350-11e2-ae59-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{b11dce19-2350-11e2-ae59-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{c378949a-34f2-11e2-a248-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{c378949a-34f2-11e2-a248-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{c5a7e27a-3d81-11e2-8577-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{c5a7e27a-3d81-11e2-8577-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{c5a7e2a3-3d81-11e2-8577-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{c5a7e2a3-3d81-11e2-8577-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{d9a5e873-1882-11e2-a70e-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{d9a5e873-1882-11e2-a70e-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{d9a5e879-1882-11e2-a70e-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{d9a5e879-1882-11e2-a70e-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{f8e672e4-38ca-11e2-912a-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{f8e672e4-38ca-11e2-912a-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{fa841d74-397d-11e2-a074-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{fa841d74-397d-11e2-a074-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) < End of report >