:OTL
SRV - File not found [Auto | Stopped] --  -- (CLTNetCnService) 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 
http://pl.intl.acer.yahoo.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
http://pl.intl.acer.yahoo.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = 
http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = 
http://global.acer.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
http://www.daemon-search.com/default IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found 
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - No CLSID value found.
O4 - HKLM..\Run: [Acer Tour]  File not found 
O4 - HKLM..\Run: [eRecoveryService]  File not found 
O32 - AutoRun File - [2009-11-05 15:55:36 | 000,000,055 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{25b6bbe5-dd48-11dc-aee3-000000000000}\Shell - "" = AutoRun
O33 - MountPoints2\{25b6bbe5-dd48-11dc-aee3-000000000000}\Shell\AutoRun\command - "" = F:\Autorun.exe -- File not found
O33 - MountPoints2\{2e6987c9-0f8f-11dd-b0de-000000000000}\Shell\AutoRun\command - "" = G:\EXPLORER.EXE -- File not found
O33 - MountPoints2\{2e6987c9-0f8f-11dd-b0de-000000000000}\Shell\explore\Command - "" = G:\EXPLORER.EXE -- File not found
O33 - MountPoints2\{2e6987c9-0f8f-11dd-b0de-000000000000}\Shell\open\Command - "" = G:\EXPLORER.EXE -- File not found
O33 - MountPoints2\{73f0a14c-1259-11de-a7cb-000000000000}\Shell\AutoRun\command - "" = uvsqfgwd.cmd
O33 - MountPoints2\{73f0a14c-1259-11de-a7cb-000000000000}\Shell\open\Command - "" = uvsqfgwd.cmd
O33 - MountPoints2\{8ddb7c35-303f-11df-bbcf-000000000000}\Shell - "" = AutoRun
O33 - MountPoints2\{8ddb7c35-303f-11df-bbcf-000000000000}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- File not found
O33 - MountPoints2\{bc3b0aaa-008c-11dd-b1d1-001d72087572}\Shell\AutoRun\command - "" = C:\Windows\explorer.exe -- [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{bc3b0aaa-008c-11dd-b1d1-001d72087572}\Shell\explore\Command - "" = C:\Windows\explorer.exe -- [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{bc3b0aaa-008c-11dd-b1d1-001d72087572}\Shell\open\Command - "" = C:\Windows\explorer.exe -- [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) 
@Alternate Data Stream - 1318 bytes 

 C:\ProgramData\Microsoft:lsY6SGCZ1vIuDD1D
@Alternate Data Stream - 1153 bytes 

 C:\Users\ACER\AppData\Local\ObSFPOmh9YELfD:Z4a0uTcAiDdyJEKCNitieElNDR
@Alternate Data Stream - 1146 bytes 

 C:\Users\ACER\AppData\Local\YPpLWof3C3a8:U4IwaGXgvfA4PMSAzghkbAMI
@Alternate Data Stream - 1091 bytes 

 C:\ProgramData\Microsoft:cGjX53uUz9pkW28QjnwY 
:Reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"CheckedValue"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LanguageShortcut"=-
:Commands
[emptytemp]