Located: HK_LM:RunOnce, SpybotDeletingC5288
command: cmd /c del "C:\Program Files (x86)\Mozilla Firefox\extensions\{A89AED22-9133-424c-88E7-C8235C5FF302}\components\MeMedia_FF.dll"
file: C:\Windows\system32\cmd.exe
size: 320000
MD5: 349CD4318E6E351C9BB72EE13B7CA807