CreateRestorePoint:
HKU\S-1-5-21-398714757-4205386782-3194616843-1001\...\MountPoints2: {27c4ae19-45b6-11e6-b22e-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {0047b642-2e1f-11e6-b223-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {0047b6fb-2e1f-11e6-b223-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {03ebf6f1-15c4-11e6-b21a-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {0bf10f4c-12ba-11e6-b218-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {24f15df7-2e22-11e6-b224-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {24f15e50-2e22-11e6-b224-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {27c4ae19-45b6-11e6-b22e-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {43d5efc6-2d55-11e6-b220-c03fd5622fbd} - "H:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {43d5eff9-2d55-11e6-b220-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {49952199-0fa4-11e6-b1e9-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {849c3bfb-2e23-11e6-b225-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {849c3c3a-2e23-11e6-b225-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {850c2721-45b5-11e6-b22d-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {850c2775-45b5-11e6-b22d-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {8e0e99bc-572a-11e6-b232-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {8e0e9a0b-572a-11e6-b232-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {9514f49b-d089-11e5-b162-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {dcba3730-2d58-11e6-b221-c03fd5622fbd} - "G:\AutoRun.exe"
HKU\S-1-5-21-398714757-4205386782-3194616843-1002\...\MountPoints2: {dcba37a6-2d58-11e6-b221-c03fd5622fbd} - "G:\AutoRun.exe"
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
C:\Windows\system32\netcfg*.txt
Hosts:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp: