O4 - HKUS\S-1-5-19\..\Run: [woraduzipa] Rundll32.exe "C:\WINDOWS\system32\wimesabi.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [woraduzipa] Rundll32.exe "C:\WINDOWS\system32\wimesabi.dll",s (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-507921405-1383384898-839522115-1005\..\Run: [woraduzipa] Rundll32.exe "C:\WINDOWS\system32\wimesabi.dll",s (User 'postgres')
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O20 - AppInit_DLLs: hmvgld.dll,C:\WINDOWS\system32\jideraye.dll