:OTL MOD - [2011-02-17 12:17:58 | 000,042,667 | ---- | M] () – C:\Users\Dodo\AppData\Local\winlogon.exe MOD - [2011-02-17 12:17:58 | 000,042,667 | ---- | M] () – C:\Users\Dodo\AppData\Local\services.exe MOD - [2011-02-17 12:17:58 | 000,042,667 | ---- | M] () – C:\Users\Dodo\AppData\Local\lsass.exe O4 - HKU\S-1-5-21-703970065-3050351753-67648752-1001…\Run: [Tok-Cirrhatus] C:\Users\Dodo\AppData\Local\smss.exe () O4 - HKU\S-1-5-21-703970065-3050351753-67648752-1000…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\Dodo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Empty.pif () [2012-11-08 18:32:00 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-8 [2012-11-07 16:36:12 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-7 [2012-11-06 10:01:55 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-6 [2012-11-05 12:16:34 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-5 [2012-11-04 10:42:19 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-4 [2012-11-03 14:54:25 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-3 [2012-11-02 09:08:29 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-2 [2012-11-01 09:39:59 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-1 [2012-10-31 10:03:12 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-31 [2012-10-30 10:28:43 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-30 [2012-10-29 13:42:20 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-29 [2012-10-28 11:25:51 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-28 [2012-10-27 19:01:46 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-27 [2012-10-25 23:00:01 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-26 [2012-10-25 09:38:51 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-25 [2012-10-23 23:13:10 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Loc.Mail.Bron.Tok [2012-10-23 23:12:47 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Ok-SendMail-Bron-tok [2012-10-23 23:07:08 | 000,000,000 | —D | C] – C:\Users\Dodo\AppData\Local\Bron.tok-12-24 [2012-11-08 18:43:19 | 000,012,393 | ---- | M] () – C:\Users\Dodo\AppData\Local\Bron.tok.A12.em.bin [2010-11-23 09:08:01 | 000,042,667 | ---- | C] () – C:\Users\Dodo\AppData\Local\winlogon.exe [2010-11-23 09:08:01 | 000,042,667 | ---- | C] () – C:\Users\Dodo\AppData\Local\smss.exe [2010-11-23 09:08:01 | 000,042,667 | ---- | C] () – C:\Users\Dodo\AppData\Local\services.exe [2010-11-23 09:08:01 | 000,042,667 | ---- | C] () – C:\Users\Dodo\AppData\Local\lsass.exe [2010-11-23 09:08:01 | 000,042,667 | ---- | C] () – C:\Users\Dodo\AppData\Local\inetinfo.exe [2010-11-23 09:08:01 | 000,042,667 | ---- | C] () – C:\Users\Dodo\AppData\Local\csrss.exe :Commands [emptytemp]