:OTL MOD - [2012-03-08 10:03:46 | 000,042,713 | ---- | M] () – C:\Users\Aga\AppData\Local\winlogon.exe MOD - [2012-03-08 10:03:46 | 000,042,713 | ---- | M] () – C:\Users\Aga\AppData\Local\services.exe MOD - [2012-03-08 10:03:46 | 000,042,713 | ---- | M] () – C:\Users\Aga\AppData\Local\lsass.exe O3 - HKLM…\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\13.0.0.7\AVG Secure Search_toolbar.dll () O4 - HKU\S-1-5-21-4107683473-536859672-1821821354-1000…\Run: [AdobeBridge] File not found O4 - HKU\S-1-5-21-4107683473-536859672-1821821354-1000…\Run: [Tok-Cirrhatus] C:\Users\Aga\AppData\Local\smss.exe () O4 - HKU\S-1-5-19…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\Aga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Empty.pif () [2012-09-08 07:23:37 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-8 [2012-09-07 05:23:58 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-7 [2012-09-06 00:11:27 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-6 [2012-09-05 05:23:47 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-5 [2012-09-04 05:08:01 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-4 [2012-09-03 04:35:49 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-3 [2012-09-02 05:07:24 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-2 [2012-09-01 04:13:09 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-1 [2012-08-31 04:10:59 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-31 [2012-08-30 20:59:17 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-30 [2012-08-19 19:24:28 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Roaming\OpenCandy [2012-08-14 05:21:43 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-14 [2012-08-13 05:04:50 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-13 [2012-08-12 05:45:07 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-12 [2012-08-11 05:29:01 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-11 [2012-08-10 03:46:56 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-10 [2012-08-09 11:52:14 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-9 [2012-07-29 03:59:16 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-29 [2012-07-28 05:20:23 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-28 [2012-07-27 05:32:02 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-27 [2012-07-26 05:23:47 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-26 [2012-07-25 05:47:49 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-25 [2012-07-24 05:23:55 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-24 [2012-07-23 22:23:32 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-23 [2012-07-22 04:12:27 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-22 [2012-07-21 05:45:49 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-21 [2012-07-20 04:44:16 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-20 [2012-07-19 03:53:57 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-19 [2012-07-18 03:31:40 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-18 [2012-07-17 03:44:02 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-17 [2012-07-16 04:59:08 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-16 [2012-07-15 18:23:50 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Loc.Mail.Bron.Tok [2012-07-15 18:23:20 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Ok-SendMail-Bron-tok [2012-07-15 18:17:47 | 000,000,000 | —D | C] – C:\Users\Aga\AppData\Local\Bron.tok-12-15 :Commands [emptytemp]