CreateRestorePoint: 
Startup: C:\Users\Diego B\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\video porno de chibola universitaria.lnk [2015-04-23]
ShortcutTarget: video porno de chibola universitaria.lnk -> C:\ProgramData\{18717157-4052-a4c0-1871-17157405c55d}\video porno de chibola universitaria.exe (No File)
FF Plugin HKU\S-1-5-21-3919295077-688054640-3730574233-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll No File
2015-04-09 15:10 - 2015-04-09 15:10 - 00000000 __SHD () C:\Users\Diego B\AppData\Local\EmieUserList
2015-04-09 15:10 - 2015-04-09 15:10 - 00000000 __SHD () C:\Users\Diego B\AppData\Local\EmieSiteList
2015-04-09 15:10 - 2015-04-09 15:10 - 00000000 __SHD () C:\Users\Diego B\AppData\Local\EmieBrowserModeList
2015-04-23 23:27 - 2015-04-24 23:27 - 00000402 _____ () C:\WINDOWS\Tasks\Bidaily Synchronize Task.job
2015-04-23 23:27 - 2015-04-23 23:27 - 00003294 _____ () C:\WINDOWS\System32\Tasks\Bidaily Synchronize Task
Task: {664ACFA4-DD0A-41BF-969C-E8E80856E7B6} - System32\Tasks\Bidaily Synchronize Task => C:\ProgramData\{78542764-078a-aae7-7854-427640789d90}\video porno de chibola universitaria.exe
Task: C:\WINDOWS\Tasks\Bidaily Synchronize Task.job => C:\ProgramData\{78542764-078a-aae7-7854-427640789d90}\video porno de chibola universitaria.exe
C:\ProgramData\{18717157-4052-a4c0-1871-17157405c55d}
C:\ProgramData\{78542764-078a-aae7-7854-427640789d90}
Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services" /F
Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services" /F
Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F
Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F
eg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp: 
CMD: bitsadmin /reset /allusers