Some things are still to fix: O4 - HKLM..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM..\Run: [spool322] c:\windows\system32\spool322.exe O4 - HKLM..\RunServices: [spool322] c:\windows\system32\spool322.exe