:OTL DRV - File not found [Kernel | System | Stopped] – C:\Windows\system32\drivers\wqxgeqrp.sys – (wqxgeqrp) DRV - File not found [Kernel | System | Stopped] – C:\Windows\system32\drivers\ehaugprx.sys – (ehaugprx) DRV - File not found [Kernel | On_Demand | Stopped] – C:\Windows\system32\drivers\EagleNT.sys – (EagleNT) DRV - File not found [Kernel | System | Stopped] – -- (ASPI32) DRV - File not found [Kernel | On_Demand | Stopped] – C:\Users\marek\AppData\Local\Temp\catchme.sys – (catchme) O4 - HKU\S-1-5-21-1652410064-855316490-4250319663-1000…\Run: [Kuheelzu] C:\Users\marek\AppData\Roaming\Ewliqy\hyzi.exe () [2012-10-21 21:23:57 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Udta [2012-10-21 21:23:57 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Pupar [2012-10-21 21:23:57 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Locuuz [2012-10-18 20:23:39 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Zooc [2012-10-18 20:23:39 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Viipi [2012-10-18 20:23:39 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Axog [2012-10-15 20:08:34 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Zaneo [2012-10-15 20:08:34 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Ryxoz [2012-10-15 20:08:34 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Qeimd [2012-10-13 04:50:24 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Uzufn [2012-10-13 04:50:24 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Syeqzy [2012-10-13 04:50:24 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Gyaxvu [2012-10-10 16:49:59 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Apyq [2012-10-10 16:49:58 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Zeagdo [2012-10-10 16:49:58 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Erzyaf [2012-10-08 03:55:04 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Uncuid [2012-10-08 03:55:04 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Ozor [2012-10-05 15:54:53 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Ibxu [2012-10-05 15:54:53 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Gyfiy [2012-10-05 15:54:53 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Edxu [2012-10-03 03:36:00 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Kuez [2012-10-03 03:35:58 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Ychila [2012-10-03 03:35:58 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Uqqy [2012-10-02 15:39:54 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Icupwo [2012-10-02 15:39:54 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Afqon [2012-09-30 03:37:44 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Faza [2012-09-30 03:37:43 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Owkii [2012-09-30 03:37:43 | 000,000,000 | —D | C] – C:\Users\marek\AppData\Roaming\Ewliqy [2012-10-08 15:10:50 | 000,076,349 | ---- | C] () – C:\ProgramData\icdiazjwnnwupze :Files C:\Users\marek\AppData\Local\Temp*.html :Commands [emptytemp]