:OTL
SRV - (SoftwareUpd) -- C:\Documents and Settings\Jennifer 1\Impostazioni locali\Dati applicazioni\SoftwareUpdater\SoftwareUpdService.exe File not found
SRV - (PowerOffer Service) -- C:\Documents and Settings\Jennifer 1\Impostazioni locali\Dati applicazioni\PosService\Pos.exe (PowerOfferService)
SRV - (ServUpdater) -- C:\Documents and Settings\Jennifer 1\Impostazioni locali\Dati applicazioni\ServUpdater\ServiceUpd.exe (ServiceUpd)
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://search.findeer.comIE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://search.findeer.comIE - HKU\S-1-5-19\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" =
http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZ1NhvDrYVql-uC9kxlrafm0RuxR6E2iJ8_41D0fuPWS159Og2C3__sZOsVXeXTcoRTuTE4Rn_CA7_Cre3mVnBe2AaqgZksxBQYTdGmgPeqZCh-ibbwxSEQKUAiq65bl9liGZPnaXgUsjw,,&q={searchTerms}
IE - HKU\S-1-5-20\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" =
http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZ1NhvDrYVql-uC9kxlrafm0RuxR6E2iJ8_41D0fuPWS159Og2C3__sZOsVXeXTcoRTuTE4Rn_CA7_Cre3mVnBe2AaqgZksxBQYTdGmgPeqZCh-ibbwxSEQKUAiq65bl9liGZPnaXgUsjw,,&q={searchTerms}
O3 - HKU\S-1-5-21-4050226225-4127120148-2012080114-1008\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-4050226225-4127120148-2012080114-1008\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-4050226225-4127120148-2012080114-1008\..\Toolbar\WebBrowser: (no name) - {2C965F3F-8EFD-4BFC-A2C5-1672845FDBBF} - No CLSID value found.
O3 - HKU\S-1-5-21-4050226225-4127120148-2012080114-1008\..\Toolbar\WebBrowser: (no name) - {CD90BF73-20F6-44EF-993D-BB920303BD2E} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [PosService] C:\Documents and Settings\All Users\Documenti\AppData\PoApp\PLauncher.exe (PLauncher)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4}
http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx (WRC Class)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}
http://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: CabBuilder
http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab (Reg Error: Key error.)
O33 - MountPoints2\{517454ae-4904-11de-9f23-001377b526a5}\Shell - "" = AutoRun
O33 - MountPoints2\{517454ae-4904-11de-9f23-001377b526a5}\Shell\1\Command - "" = Recycle.exe
O33 - MountPoints2\{517454ae-4904-11de-9f23-001377b526a5}\Shell\2\Command - "" = Recycle.exe
O33 - MountPoints2\{517454ae-4904-11de-9f23-001377b526a5}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycle.exe
O33 - MountPoints2\{5712ede8-3eaa-11df-84eb-00242cdcb4e6}\Shell\AutoRun\command - "" = E:\Menu.exe
O33 - MountPoints2\{e8dd4e4e-7eb7-11e2-8aab-00255654fbf0}\Shell - "" = AutoRun
O33 - MountPoints2\{e8dd4e4e-7eb7-11e2-8aab-00255654fbf0}\Shell\AutoRun\command - "" = E:\Windows\AutoRun.exe
O33 - MountPoints2\{e8dd4e51-7eb7-11e2-8aab-00255654fbf0}\Shell - "" = AutoRun
O33 - MountPoints2\{e8dd4e51-7eb7-11e2-8aab-00255654fbf0}\Shell\AutoRun\command - "" = E:\Windows\AutoRun.exe
[2014/04/24 20.52.45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\ConduitEngine
[2014/04/05 16.50.06 | 000,000,000 | ---D | C] -- C:\Programmi\bettermarkit Corp
[2014/03/29 23.00.40 | 000,001,747 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\McAfee Security Scan Plus.lnk
[2014/03/22 17.44.32 | 000,000,418 | ---- | C] () -- C:\WINDOWS\tasks\At2.job
[2014/03/18 16.43.48 | 000,000,418 | ---- | C] () -- C:\WINDOWS\tasks\At1.job
[2013/11/22 10.21.40 | 105,626,457 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㟻倂嗌6
[2013/11/22 10.21.40 | 105,626,457 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㟻倂嗌6
[2013/10/10 16.28.16 | 100,267,706 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ᅵ䐖嗌6
[2013/10/10 16.28.16 | 100,267,706 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ᅵ䐖嗌6
[2013/10/10 00.14.47 | 100,163,860 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\�凸嗌6
[2013/10/10 00.14.47 | 100,163,860 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\�凸嗌6
[2013/10/04 14.24.26 | 099,209,434 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\埦嗌6
[2013/10/04 14.24.26 | 099,209,434 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\埦嗌6
[2013/09/19 21.29.02 | 098,395,704 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ᕬ䏥嗌6
[2013/09/19 21.29.02 | 098,395,704 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\ᕬ䏥嗌6
[2013/09/18 11.44.48 | 098,123,923 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䎸过嗌6
[2013/09/18 11.44.48 | 098,123,923 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䎸过嗌6
[2013/09/16 20.57.23 | 097,845,400 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䙈ᰥ嗌6
[2013/09/16 20.57.23 | 097,845,400 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\䙈ᰥ嗌6
[2013/09/13 10.29.27 | 097,443,711 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\锂嗌6
[2013/09/13 10.29.27 | 097,443,711 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\锂嗌6
[2013/09/10 20.57.57 | 096,985,259 | ---- | M] ()(C:\WINDOWS\System32\B??6) -- C:\WINDOWS\System32\ℬ팖嗌6
[2013/09/10 20.57.57 | 096,985,259 | ---- | C] ()(C:\WINDOWS\System32\B??6) -- C:\WINDOWS\System32\ℬ팖嗌6
:Files
C:\Documents and Settings\Jennifer 1\Impostazioni locali\Dati applicazioni\SoftwareUpdater
C:\Documents and Settings\Jennifer 1\Impostazioni locali\Dati applicazioni\PosService
C:\Documents and Settings\Jennifer 1\Impostazioni locali\Dati applicazioni\ServUpdater
C:\Documents and Settings\All Users\Documenti\AppData\PoApp
ipconfig /flushdns /c
:commands
[purity]
[emptytemp]
[Emptyjava]
[EMPTYFLASH]
[start explorer]
[Reboot]