HKLM-x32\...\Run: [FAStartup] - [x]
HKCU\...\Policies\Explorer: [] 
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = 
C:\Users\admin\AppData\Local\Temp\i4jdel0.exe
AlternateDataStreams: C:\Users\YaoTheHong\AppData\Roaming\default.rss:OECustomProperty