HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [FAStartup] => [X] HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] C:\$Recycle.Bin\S-1-5-18\$e42e17430ba35f5c8e508ef8d0ee41fc\n. ATTENTION! ====> ZeroAccess? HKU\S-1-5-21-2944147335-3770540022-3163696298-1001\...\Run: [euqkxrup] => "C:\Users\Shirley\AppData\Local\tvemurfl.exe" HKU\S-1-5-21-2944147335-3770540022-3163696298-1001\...\Run: [pwqllapm] => "C:\Users\Shirley\AppData\Local\nnbbnsgw.exe" HKU\S-1-5-21-2944147335-3770540022-3163696298-1001\...\MountPoints2: {aeb1ca51-cc4c-11e2-9aaf-7ce9d318f216} - E:\HTC_Sync_Manager_PC.exe SearchScopes: HKLM-x32 - DefaultScope value is missing. BHO-x32: No Name -> {300BEC06-B743-4D19-86B9-11DC711D7FFB} -> No File Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @microsoft.com/GENUINE - disabled No File CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION C:\$Recycle.Bin\S-1-5-21-2944147335-3770540022-3163696298-1001\$e42e17430ba35f5c8e508ef8d0ee41fc C:\$Recycle.Bin\S-1-5-18\$e42e17430ba35f5c8e508ef8d0ee41fc C:\Users\Shirley\AppData\Local\tvemurfl.exe C:\Users\Shirley\AppData\Local\nnbbnsgw.exe C:\Users\Shirley\AppData\Local\Temp\HitmanPro.exe C:\Users\Shirley\AppData\Local\Temp\UpdateFlashPlayer_4d8f050f.exe C:\Users\Shirley\AppData\Local\Temp\UpdateFlashPlayer_6e4dfcce.exe C:\Users\Shirley\AppData\Local\Temp\UpdateFlashPlayer_8ffc2dd3.exe Task: {FDF2DDD9-6EB3-4061-8E7E-86BC6828B15A} - System32\Tasks\DTReg => C:\Users\Shirley\AppData\Roaming\DefaultTab\DefaultTab\DTReg.exe <==== ATTENTION