:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/?a=1ex5WFJRhpw
FF - prefs.js..browser.search.defaultthis.engineName: "Veoh Web Player Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2653012&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811&ilc=12"
FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=CT2653012&SearchSource=13"
FF - prefs.js..extensions.enabledItems:
DTToolbar@toolbarnet.com:1.1.4.0024
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2653012&SearchSource=2&q="
[2012-07-16 10:29:24 | 000,000,000 | ---D | M] (Veoh Web Player Community Toolbar) -- C:\Documents and Settings\Naomi\Dane aplikacji\Mozilla\Firefox\Profiles\6xs01gco.default\extensions\{cd90bf73-20f6-44ef-993d-bb920303bd2e}
[2012-07-16 10:29:24 | 000,000,000 | ---D | M] (IncrediMail MediaBar 2 Community Toolbar) -- C:\Documents and Settings\Naomi\Dane aplikacji\Mozilla\Firefox\Profiles\6xs01gco.default\extensions\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}
[2012-05-26 09:44:50 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Documents and Settings\Naomi\Dane aplikacji\Mozilla\Firefox\Profiles\6xs01gco.default\extensions\DTToolbar@toolbarnet.com
[2011-10-28 02:12:22 | 000,000,933 | ---- | M] () -- C:\Documents and Settings\Naomi\Dane aplikacji\Mozilla\Firefox\Profiles\6xs01gco.default\searchplugins\conduit.xml
[2011-03-13 15:02:22 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\Naomi\Dane aplikacji\Mozilla\Firefox\Profiles\6xs01gco.default\searchplugins\daemon-search.xml
[2011-04-10 20:06:00 | 000,002,187 | ---- | M] () -- C:\Documents and Settings\Naomi\Dane aplikacji\Mozilla\Firefox\Profiles\6xs01gco.default\searchplugins\MyStart Search.xml
[2012-08-01 00:46:01 | 000,000,000 | ---D | M] (YTD Toolbar) -- C:\PROGRAM FILES\YTD TOOLBAR\FF
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O33 - MountPoints2\{03a5fd08-dddd-11df-bc58-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{03a5fd08-dddd-11df-bc58-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{03a5fd0b-dddd-11df-bc58-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{03a5fd0b-dddd-11df-bc58-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{03a5fd0c-dddd-11df-bc58-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{03a5fd0c-dddd-11df-bc58-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{197b5c72-e2a1-11df-bc64-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{197b5c72-e2a1-11df-bc64-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{197b5c73-e2a1-11df-bc64-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{197b5c73-e2a1-11df-bc64-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{197b5c74-e2a1-11df-bc64-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{197b5c74-e2a1-11df-bc64-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{1b765cda-2d64-11e0-bd20-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{1b765cda-2d64-11e0-bd20-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{1b765cdb-2d64-11e0-bd20-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{1b765cdb-2d64-11e0-bd20-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{42b90340-cf4c-11e0-bd76-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{42b90340-cf4c-11e0-bd76-0016d453f96a}\Shell\AutoRun\command - "" = F:\MicroLauncher.exe
O33 - MountPoints2\{4651c2bc-1367-11e0-bcde-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{4651c2bc-1367-11e0-bcde-0016d453f96a}\Shell\AutoRun\command - "" = F:\MicroLauncher.exe
O33 - MountPoints2\{520e9341-52c0-11e0-83cd-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{520e9341-52c0-11e0-83cd-0016d453f96a}\Shell\AutoRun\command - "" = H:\start.exe
O33 - MountPoints2\{594ae142-758e-11e0-aba9-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{594ae142-758e-11e0-aba9-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{5b81c340-8b84-11e1-bb83-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{5b81c340-8b84-11e1-bb83-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5ca44b40-a3e3-11e1-8eec-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{5ca44b40-a3e3-11e1-8eec-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{650fd440-caa7-11e0-a737-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{650fd440-caa7-11e0-a737-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{650fd443-caa7-11e0-a737-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{650fd443-caa7-11e0-a737-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{711631c0-c747-11e0-9a49-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{711631c0-c747-11e0-9a49-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{711631c1-c747-11e0-9a49-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{711631c1-c747-11e0-9a49-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{711631c3-c747-11e0-9a49-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{711631c3-c747-11e0-9a49-0016d453f96a}\Shell\AutoRun\command - "" = F:\MicroLauncher.exe
O33 - MountPoints2\{711631c4-c747-11e0-9a49-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{711631c4-c747-11e0-9a49-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{7695ff40-6469-11e0-9c00-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{7695ff40-6469-11e0-9c00-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7695ff41-6469-11e0-9c00-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{7695ff41-6469-11e0-9c00-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7695ff42-6469-11e0-9c00-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{7695ff42-6469-11e0-9c00-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{7a0a695a-0f58-11e0-bcd6-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{7a0a695a-0f58-11e0-bcd6-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{7a0a695b-0f58-11e0-bcd6-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{7a0a695b-0f58-11e0-bcd6-0016d453f96a}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{9eb46e40-c4ee-11e0-a55d-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{9eb46e40-c4ee-11e0-a55d-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{9eb46e43-c4ee-11e0-a55d-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{9eb46e43-c4ee-11e0-a55d-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{a796e441-5787-11e0-a50b-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{a796e441-5787-11e0-a50b-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{aa3e6f2c-78a3-11df-bb56-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{aa3e6f2c-78a3-11df-bb56-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{ab974c72-7333-11df-bb4a-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{ab974c72-7333-11df-bb4a-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{c9cfecc0-bd8d-11e0-bc5d-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{c9cfecc0-bd8d-11e0-bc5d-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{d49806c0-b8e1-11e0-8022-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{d49806c0-b8e1-11e0-8022-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{dce33aef-a6fe-11df-bbdd-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{dce33aef-a6fe-11df-bbdd-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{e4c64138-fde7-11df-bcaf-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{e4c64138-fde7-11df-bcaf-0016d453f96a}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{e4c64139-fde7-11df-bcaf-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{e4c64139-fde7-11df-bcaf-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{ec48f516-70e0-11df-bb42-0016d453f96a}\Shell - "" = AutoRun
O33 - MountPoints2\{ec48f516-70e0-11df-bb42-0016d453f96a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{f29cc21c-6ef1-11df-bb36-861b5b326d82}\Shell - "" = AutoRun
O33 - MountPoints2\{f29cc21c-6ef1-11df-bb36-861b5b326d82}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{fc670142-fd4e-11e0-87a6-0016d453f96a}\Shell - "" = AutoRun
[2011-08-15 15:51:40 | 000,000,008 | RHS- | C] () -- C:\WINDOWS\System32\Desktop_.ini
:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
:Commands
[emptytemp]