HKCU\...\Run: [ctfmon.exe] C:\DOCUME~1\ALLUSE~1\APPLIC~1\rundll32.exe c:\docume~1\alluse~1\applic~1\ini3zd.dat,FG00 [155648 2013-05-08] (Microsoft Corporation)
HKU\Gene\...\Run: [ctfmon.exe] C:\DOCUME~1\ALLUSE~1\APPLIC~1\rundll32.exe c:\docume~1\alluse~1\applic~1\ini3zd.dat,FG00 [ 2013-05-08] (Microsoft Corporation)
HKU\Nancy\...\Run: [ctfmon.exe] C:\DOCUME~1\ALLUSE~1\APPLIC~1\rundll32.exe c:\docume~1\alluse~1\applic~1\ini3zd.dat,FG00 [ 2013-05-08] (Microsoft Corporation)
C:\DOCUME~1\ALLUSE~1\APPLIC~1\rundll32.exe
Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\msconfig.lnk
ShortcutTarget: msconfig.lnk -> c:\docume~1\alluse~1\applic~1\ini3zd.dat (Microsoft Corporation)
Startup: C:\Documents and Settings\Gene\Start Menu\Programs\Startup\msconfig.lnk
ShortcutTarget: msconfig.lnk -> C:\DOCUME~1\ALLUSE~1\APPLIC~1\ini3zd.dat (Microsoft Corporation)
Startup: C:\Documents and Settings\Nancy\Start Menu\Programs\Startup\msconfig.lnk
ShortcutTarget: msconfig.lnk -> c:\docume~1\alluse~1\applic~1\ini3zd.dat (Microsoft Corporation)
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM - {56256A51-B582-467e-B8D4-7786EDA79AE0} URL = http://www.mywebsear...r={searchTerms}
SearchScopes: HKCU - DefaultScope value is missing.
DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} http://ak.exe.imgfar...etup1.0.1.1.cab
Handler: ic32pp - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - C:\WINDOWS\wc98pp.dll ()

S2 winmgmt; C:\DOCUME~1\ALLUSE~1\APPLIC~1\ini3zd.dat [155648 2013-05-08] (Microsoft Corporation)
2013-06-20 19:58 - 2013-05-08 06:31 - 95023320 ___AT C:\Documents and Settings\All Users\Application Data\dz3ini.pad
2013-06-20 19:55 - 2013-05-08 06:32 - 00000000 ____A C:\Documents and Settings\All Users\Application Data\as98213.txt