:OTL O3 - HKLM…\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKLM…\Toolbar: (no name) - {E9FAB13D-4600-49E1-90D1-EE961C859D39} - No CLSID value found. O3 - HKCU…\Toolbar\ShellBrowser: (no name) - {B5146C40-189A-4311-BDA9-FBAE3E023187} - No CLSID value found. O3 - HKCU…\Toolbar\ShellBrowser: (no name) - {F14B0CCD-AA41-4406-AB68-C5DE9D85B4A3} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found. O9 - Extra Button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - Reg Error: Key error. File not found O9 - Extra Button: HopSurf - {ED98F8D1-09AC-4107-B2FF-91DBE011B0C5} - Reg Error: Key error. File not found O20 - AppInit_DLLs: (C:\PROGRA~1\Kaspersky) - File not found O20 - AppInit_DLLs: (Lab\Kaspersky) - File not found O20 - AppInit_DLLs: (Anti-Virus) - File not found O20 - AppInit_DLLs: (2009\mzvkbd.dll) - File not found O20 - AppInit_DLLs: (C:\PROGRA~1\Kaspersky) - File not found O20 - AppInit_DLLs: (Lab\Kaspersky) - File not found O20 - AppInit_DLLs: (Anti-Virus) - File not found O20 - AppInit_DLLs: (2009\mzvkbd3.dll) - File not found O33 - MountPoints2{52dcf45e-49e1-11de-af46-00196605940b}\Shell\PRM\command - “” = F:\Thumbs.exe – File not found O33 - MountPoints2{666c93a8-18ef-11dd-a9f7-00196605940b}\Shell\PRM\command - “” = Thumbs.exe -start [2009-11-19 23:34:09 | 00,000,000 | —D | C] – C:\WINDOWS\System32\9Q5DCRRUQ7 [2009-11-19 23:33:25 | 00,000,000 | —D | C] – C:\WINDOWS\System32\9ZLB6DHV1N [2009-11-19 23:32:35 | 00,000,000 | —D | C] – C:\WINDOWS\System32\9WWCRIU8CU [2009-11-19 23:31:52 | 00,000,000 | —D | C] – C:\WINDOWS\System32\9SGR8CR2OW [2009-11-19 23:31:07 | 00,000,000 | —D | C] – C:\WINDOWS\System32\91XQ2YH30C [2009-11-19 23:30:23 | 00,000,000 | —D | C] – C:\WINDOWS\System32\9LXE7OA1UL [2009-11-19 23:29:39 | 00,000,000 | —D | C] – C:\WINDOWS\System32\8UED1A0161 [2009-11-19 23:28:56 | 00,000,000 | —D | C] – C:\WINDOWS\System32\82IIU91S0X [2009-11-19 23:28:13 | 00,000,000 | —D | C] – C:\WINDOWS\System32\8Y2YA3YNC0 [2009-11-19 23:27:20 | 00,000,000 | —D | C] – C:\WINDOWS\System32\8K61MRWDMY [2009-11-19 23:26:31 | 00,000,000 | —D | C] – C:\WINDOWS\System32\86WBVR5UFB [2009-11-19 23:25:56 | 00,000,000 | —D | C] – C:\WINDOWS\System32\81DC6OXVBP [2009-11-19 23:21:33 | 00,000,000 | —D | C] – C:\WINDOWS\System32\73WQRXRKRF [2009-11-19 23:19:48 | 00,000,000 | —D | C] – C:\WINDOWS\System32\6Z7D0GVUDX [2009-11-19 22:38:12 | 00,000,000 | —D | C] – C:\WINDOWS\System32\X9GFCDSTN8 [2009-11-19 22:29:09 | 00,000,000 | —D | C] – C:\WINDOWS\System32\V5FNFA8B14 [2009-11-19 21:18:36 | 00,000,000 | —D | C] – C:\WINDOWS\System32\GNP5Z15H1C [2009-11-19 21:14:30 | 00,000,000 | —D | C] – C:\WINDOWS\System32\FYLHJJSG3H [2009-11-19 21:09:36 | 00,000,000 | —D | C] – C:\WINDOWS\System32\EVVBBFYMGG [2009-11-19 21:05:05 | 00,000,000 | —D | C] – C:\WINDOWS\System32\DNLKOU4XEI [2009-11-19 20:59:29 | 00,000,000 | —D | C] – C:\WINDOWS\System32\CFEUXL7Y3J [2009-11-19 20:42:15 | 00,000,000 | —D | C] – C:\WINDOWS\System32\8L89RS38KD [2009-11-19 20:34:52 | 00,000,000 | —D | C] – C:\WINDOWS\System32\7AQXBP0SCH [2009-11-19 18:40:36 | 00,000,000 | —D | C] – C:\WINDOWS\System32\I2HGW0PC50 [2009-11-19 18:29:41 | 00,000,000 | —D | C] – C:\WINDOWS\System32\G8EGPIHV3W [2009-11-19 18:23:02 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ECVG4PLI1R [2009-11-19 18:14:03 | 00,000,000 | —D | C] – C:\WINDOWS\System32\DVLDR8HKXP [2009-11-19 18:07:34 | 00,000,000 | —D | C] – C:\WINDOWS\System32\BYBR245OWG [2009-11-19 17:48:42 | 00,000,000 | —D | C] – C:\WINDOWS\System32\7C0JH096HL [2009-11-19 17:47:08 | 00,000,000 | —D | C] – C:\WINDOWS\System32\744EEP3U5Q [2009-11-19 17:44:58 | 00,000,000 | —D | C] – C:\WINDOWS\System32\65P66ZNJ5B [2009-11-19 17:43:40 | 00,000,000 | —D | C] – C:\WINDOWS\System32\6WQNXRCFCR [2009-11-19 17:42:31 | 00,000,000 | —D | C] – C:\WINDOWS\System32\694Z7ISLKP [2009-11-19 17:41:11 | 00,000,000 | —D | C] – C:\WINDOWS\System32\5PYHPS3TRW [2009-11-19 17:40:16 | 00,000,000 | —D | C] – C:\WINDOWS\System32\5ZIUQBYNJ1 [2009-11-19 17:39:03 | 00,000,000 | —D | C] – C:\WINDOWS\System32\51Q8QK06RQ [2009-11-19 17:37:58 | 00,000,000 | —D | C] – C:\WINDOWS\System32\5EQRYOR2I3 [2009-11-19 17:31:42 | 00,000,000 | —D | C] – C:\WINDOWS\System32\3EADXQ4KJG [2009-11-19 17:25:17 | 00,000,000 | —D | C] – C:\WINDOWS\System32\23ENQLKYJP [2009-11-19 17:24:58 | 00,000,000 | —D | C] – C:\WINDOWS\System32\2VFHTYHXGT [2009-11-19 17:24:33 | 00,000,000 | —D | C] – C:\WINDOWS\System32\2OFCWBDWDY [2009-11-19 17:24:12 | 00,000,000 | —D | C] – C:\WINDOWS\System32\2GSZ0B04SN [2009-11-19 17:22:55 | 00,000,000 | —D | C] – C:\WINDOWS\System32\2JD637SXHW [2009-11-19 17:21:53 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1J3DWW0DQC [2009-11-19 17:21:41 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1X3AFLYC7F [2009-11-19 17:17:06 | 00,000,000 | —D | C] – C:\WINDOWS\System32\01Q36RXT5T [2009-11-19 16:53:27 | 00,000,000 | —D | C] – C:\WINDOWS\System32\V9LA7L1OL9 [2009-11-19 16:28:58 | 00,000,000 | —D | C] – C:\WINDOWS\System32\QEQJSJIWEV [2009-11-19 00:13:14 | 00,000,000 | —D | C] – C:\WINDOWS\System32\W28IKZQUF5 [2009-11-19 00:04:10 | 00,000,000 | —D | C] – C:\WINDOWS\System32\UNN0BS2FB7 [2009-11-18 23:54:41 | 00,000,000 | —D | C] – C:\WINDOWS\System32\SBZWJP463S [2009-11-18 23:53:56 | 00,000,000 | —D | C] – C:\WINDOWS\System32\S8X417RAXE [2009-11-18 23:53:10 | 00,000,000 | —D | C] – C:\WINDOWS\System32\SHD3VTHB9U [2009-11-18 23:52:27 | 00,000,000 | —D | C] – C:\WINDOWS\System32\RDYICNE5KX [2009-11-18 23:51:38 | 00,000,000 | —D | C] – C:\WINDOWS\System32\RA8IXSQJW4 [2009-11-18 23:50:51 | 00,000,000 | —D | C] – C:\WINDOWS\System32\RK29T16TP4 [2009-11-18 23:50:08 | 00,000,000 | —D | C] – C:\WINDOWS\System32\RGMPAV3N16 [2009-11-18 23:49:21 | 00,000,000 | —D | C] – C:\WINDOWS\System32\R1Z6H9MUC0 [2009-11-18 23:13:58 | 00,000,000 | —D | C] – C:\WINDOWS\System32\JNL57UZILB [2009-11-18 23:02:24 | 00,000,000 | —D | C] – C:\WINDOWS\System32\H09IRO2IVJ [2009-11-18 21:22:26 | 00,000,000 | —D | C] – C:\WINDOWS\System32\VKBUQWCBJW [2009-11-18 21:11:38 | 00,000,000 | —D | C] – C:\WINDOWS\System32\TCLQ2DW4IB [2009-11-18 21:09:49 | 00,000,000 | —D | C] – C:\WINDOWS\System32\S9MYG7GY3Y [2009-11-18 18:53:13 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Z6XWV511OI [2009-11-18 18:53:02 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ZKXUEU014L [2009-11-18 18:51:53 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ZYB6OKG6DJ [2009-11-18 18:51:51 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ZA8P1B9DCW [2009-11-18 18:50:42 | 00,000,000 | —D | C] – C:\WINDOWS\System32\YB2A0XLM21 [2009-11-18 18:50:03 | 00,000,000 | —D | C] – C:\WINDOWS\System32\YVCE2D00X6 [2009-11-18 18:48:10 | 00,000,000 | —D | C] – C:\WINDOWS\System32\YG7O6Q67HK [2009-11-18 18:46:47 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Y8YP1SAMO4 [2009-11-18 18:45:36 | 00,000,000 | —D | C] – C:\WINDOWS\System32\XY9KP9JYWG [2009-11-18 18:45:17 | 00,000,000 | —D | C] – C:\WINDOWS\System32\X1FD14UKTU [2009-11-18 18:44:13 | 00,000,000 | —D | C] – C:\WINDOWS\System32\X2JDVGRAKU [2009-11-18 18:43:43 | 00,000,000 | —D | C] – C:\WINDOWS\System32\XWNL4QT1YN [2009-11-18 18:42:29 | 00,000,000 | —D | C] – C:\WINDOWS\System32\XMA9UVSNNJ [2009-11-18 18:41:49 | 00,000,000 | —D | C] – C:\WINDOWS\System32\XT1MK6250U [2009-11-18 18:41:10 | 00,000,000 | —D | C] – C:\WINDOWS\System32\WP88YEAQUD [2009-11-18 18:40:19 | 00,000,000 | —D | C] – C:\WINDOWS\System32\WAZI8EJ6NQ [2009-11-18 18:38:54 | 00,000,000 | —D | C] – C:\WINDOWS\System32\WFM3H7GSTO [2009-11-18 18:37:48 | 00,000,000 | —D | C] – C:\WINDOWS\System32\W4K622ZUKG [2009-11-18 18:36:46 | 00,000,000 | —D | C] – C:\WINDOWS\System32\VFU36VA7BP [2009-11-18 18:33:14 | 00,000,000 | —D | C] – C:\WINDOWS\System32\VYQMO108GQ [2009-11-18 18:31:26 | 00,000,000 | —D | C] – C:\WINDOWS\System32\UGE4GJWS3Q [2009-11-18 18:28:39 | 00,000,000 | —D | C] – C:\WINDOWS\System32\UOCHVI1QX2 [2009-11-18 18:28:31 | 00,000,000 | —D | C] – C:\WINDOWS\System32\UQGV1F6IER [2009-11-18 18:26:03 | 00,000,000 | —D | C] – C:\WINDOWS\System32\TIBXST8NBC [2009-11-18 18:24:24 | 00,000,000 | —D | C] – C:\WINDOWS\System32\T1C7MYTIFX [2009-11-18 18:19:47 | 00,000,000 | —D | C] – C:\WINDOWS\System32\SVS23NECC3 [2009-11-18 18:16:57 | 00,000,000 | —D | C] – C:\WINDOWS\System32\RRKHA56M66 [2009-11-18 18:12:11 | 00,000,000 | —D | C] – C:\WINDOWS\System32\QMQXV47Z3G [2009-11-18 01:03:21 | 00,000,000 | —D | C] – C:\WINDOWS\System32\L8B9RRSJQH [2009-11-18 01:02:10 | 00,000,000 | —D | C] – C:\WINDOWS\System32\KXL4F82VYT [2009-11-18 01:01:31 | 00,000,000 | —D | C] – C:\WINDOWS\System32\K5CH5KCCA4 [2009-11-18 00:59:49 | 00,000,000 | —D | C] – C:\WINDOWS\System32\KC6UQ8KKEG [2009-11-18 00:59:10 | 00,000,000 | —D | C] – C:\WINDOWS\System32\KWGXROYY8L [2009-11-18 00:59:01 | 00,000,000 | —D | C] – C:\WINDOWS\System32\KXKBXL3RP9 [2009-11-18 00:57:08 | 00,000,000 | —D | C] – C:\WINDOWS\System32\JVYCD2DURH [2009-11-18 00:56:59 | 00,000,000 | —D | C] – C:\WINDOWS\System32\JLI07UFQQC [2009-11-18 00:54:15 | 00,000,000 | —D | C] – C:\WINDOWS\System32\JS3KL7UE34 [2009-11-18 00:54:12 | 00,000,000 | —D | C] – C:\WINDOWS\System32\JTGDNUKNLO [2009-11-18 00:52:19 | 00,000,000 | —D | C] – C:\WINDOWS\System32\I2E4EFXO5P [2009-11-18 00:49:43 | 00,000,000 | —D | C] – C:\WINDOWS\System32\IWCKAQ3LJY [2009-11-18 00:49:34 | 00,000,000 | —D | C] – C:\WINDOWS\System32\IYGYGN9E0N [2009-11-18 00:47:43 | 00,000,000 | —D | C] – C:\WINDOWS\System32\H7EP78MEKO [2009-11-18 00:45:24 | 00,000,000 | —D | C] – C:\WINDOWS\System32\HY5DROIQ1K [2009-11-18 00:45:15 | 00,000,000 | —D | C] – C:\WINDOWS\System32\HOP0MHKMZF [2009-11-18 00:44:28 | 00,000,000 | —D | C] – C:\WINDOWS\System32\HLM84Z6QT2 [2009-11-18 00:44:21 | 00,000,000 | —D | C] – C:\WINDOWS\System32\HY9DM0FGSK [2009-11-18 00:41:01 | 00,000,000 | —D | C] – C:\WINDOWS\System32\GOS8Z6I8IW [2009-11-18 00:40:52 | 00,000,000 | —D | C] – C:\WINDOWS\System32\GQVM53O1ZL [2009-11-18 00:39:32 | 00,000,000 | —D | C] – C:\WINDOWS\System32\GH9VYI26NL [2009-11-18 00:39:24 | 00,000,000 | —D | C] – C:\WINDOWS\System32\GJC94F7Z4A [2009-11-18 00:38:58 | 00,000,000 | —D | C] – C:\WINDOWS\System32\FCPW9FU8JZ [2009-11-18 00:38:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\FG9HNXU3YX [2009-11-18 00:37:27 | 00,000,000 | —D | C] – C:\WINDOWS\System32\FH42MJ7CO2 [2009-11-18 00:36:16 | 00,000,000 | —D | C] – C:\WINDOWS\System32\F7EX90GPWD [2009-11-18 00:36:00 | 00,000,000 | —D | C] – C:\WINDOWS\System32\FYO683X4UD [2009-11-18 00:34:48 | 00,000,000 | —D | C] – C:\WINDOWS\System32\FCFBKH3KKW [2009-11-18 00:34:29 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ERIM927CHN [2009-11-18 00:33:21 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ESZF61TBP7 [2009-11-18 00:33:04 | 00,000,000 | —D | C] – C:\WINDOWS\System32\E8QXT07U5E [2009-11-18 00:31:33 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ED4463KZAH [2009-11-18 00:30:54 | 00,000,000 | —D | C] – C:\WINDOWS\System32\EKUHWFVGNS [2009-11-18 00:30:28 | 00,000,000 | —D | C] – C:\WINDOWS\System32\E1ODQBESJO [2009-11-18 00:27:25 | 00,000,000 | —D | C] – C:\WINDOWS\System32\D0XZ4E04B0 [2009-11-18 00:27:13 | 00,000,000 | —D | C] – C:\WINDOWS\System32\D3D6CYV7A9 [2009-11-18 00:26:35 | 00,000,000 | —D | C] – C:\WINDOWS\System32\DA4J2A6OMK [2009-11-18 00:26:18 | 00,000,000 | —D | C] – C:\WINDOWS\System32\DPU2P8K72R [2009-11-18 00:24:11 | 00,000,000 | —D | C] – C:\WINDOWS\System32\C2LSQ0HJ2L [2009-11-18 00:21:44 | 00,000,000 | —D | C] – C:\WINDOWS\System32\CIX35AFRHD [2009-11-18 00:17:00 | 00,000,000 | —D | C] – C:\WINDOWS\System32\BONA2DK2WG [2009-11-18 00:14:27 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ATRN854MAZ [2009-11-18 00:14:19 | 00,000,000 | —D | C] – C:\WINDOWS\System32\AVV2E29FRO [2009-11-18 00:12:47 | 00,000,000 | —D | C] – C:\WINDOWS\System32\APPHF2INEX [2009-11-18 00:12:40 | 00,000,000 | —D | C] – C:\WINDOWS\System32\AQF3JCY6D2 [2009-11-18 00:05:02 | 00,000,000 | —D | C] – C:\WINDOWS\System32\86702CC736 [2009-11-18 00:04:22 | 00,000,000 | —D | C] – C:\WINDOWS\System32\8DYDSNNOGH [2009-11-18 00:04:11 | 00,000,000 | —D | C] – C:\WINDOWS\System32\8RYABCLNWK [2009-11-18 00:01:48 | 00,000,000 | —D | C] – C:\WINDOWS\System32\7VZAB70FUD [2009-11-18 00:01:38 | 00,000,000 | —D | C] – C:\WINDOWS\System32\79Z7UVZFAG [2009-11-18 00:01:01 | 00,000,000 | —D | C] – C:\WINDOWS\System32\74T17GGQNE [2009-11-17 23:57:16 | 00,000,000 | —D | C] – C:\WINDOWS\System32\6NPJOM6QSF [2009-11-17 23:55:59 | 00,000,000 | —D | C] – C:\WINDOWS\System32\6EQ0GDVMZV [2009-11-17 23:54:44 | 00,000,000 | —D | C] – C:\WINDOWS\System32\6GA6J9NEO4 [2009-11-17 23:53:57 | 00,000,000 | —D | C] – C:\WINDOWS\System32\61OOQN6L0Y [2009-11-17 23:52:18 | 00,000,000 | —D | C] – C:\WINDOWS\System32\5W8PVWVCMC [2009-11-17 23:51:36 | 00,000,000 | —D | C] – C:\WINDOWS\System32\5SS4CQS7YE [2009-11-17 23:50:35 | 00,000,000 | —D | C] – C:\WINDOWS\System32\5GZLUBWQP1 [2009-11-17 23:49:54 | 00,000,000 | —D | C] – C:\WINDOWS\System32\5C688I4BKJ [2009-11-17 23:49:19 | 00,000,000 | —D | C] – C:\WINDOWS\System32\56N9JGVCFX [2009-11-17 23:47:52 | 00,000,000 | —D | C] – C:\WINDOWS\System32\4BOMUWI73F [2009-11-17 23:47:47 | 00,000,000 | —D | C] – C:\WINDOWS\System32\4OYY9B1NKD [2009-11-17 23:46:00 | 00,000,000 | —D | C] – C:\WINDOWS\System32\4KMELHV7NF [2009-11-17 23:45:43 | 00,000,000 | —D | C] – C:\WINDOWS\System32\4BWNJKDNLG [2009-11-17 23:44:10 | 00,000,000 | —D | C] – C:\WINDOWS\System32\4T7C9FJYQW [2009-11-17 23:42:41 | 00,000,000 | —D | C] – C:\WINDOWS\System32\3MOZ9R2WVL [2009-11-17 23:41:54 | 00,000,000 | —D | C] – C:\WINDOWS\System32\3WIQ50I6OL [2009-11-17 23:41:21 | 00,000,000 | —D | C] – C:\WINDOWS\System32\32IIR1D52S [2009-11-17 23:39:20 | 00,000,000 | —D | C] – C:\WINDOWS\System32\3P3DZOZULB [2009-11-17 23:38:01 | 00,000,000 | —D | C] – C:\WINDOWS\System32\2S1D47HXS4 [2009-11-17 23:37:15 | 00,000,000 | —D | C] – C:\WINDOWS\System32\2DEUBK043Y [2009-11-17 23:36:16 | 00,000,000 | —D | C] – C:\WINDOWS\System32\2CS92MIAVT [2009-11-17 23:35:53 | 00,000,000 | —D | C] – C:\WINDOWS\System32\2S8DTVBCA5 [2009-11-17 23:34:13 | 00,000,000 | —D | C] – C:\WINDOWS\System32\20QXCVTAWW [2009-11-17 23:32:46 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1GA1YGK228 [2009-11-17 23:31:52 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1FBNNVCYCJ [2009-11-17 23:31:10 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1ZYJRYGMO8 [2009-11-17 23:31:01 | 00,000,000 | —D | C] – C:\WINDOWS\System32\102XXVLF5X [2009-11-17 23:29:40 | 00,000,000 | —D | C] – C:\WINDOWS\System32\14CQ31SRUB [2009-11-17 23:28:59 | 00,000,000 | —D | C] – C:\WINDOWS\System32\00JCI90COT [2009-11-17 23:27:55 | 00,000,000 | —D | C] – C:\WINDOWS\System32\0O4M1GT5X0 [2009-11-17 23:27:05 | 00,000,000 | —D | C] – C:\WINDOWS\System32\0AUWBG2LQE [2009-11-17 23:25:38 | 00,000,000 | —D | C] – C:\WINDOWS\System32\02YQ85WAEJ [2009-11-17 23:23:10 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ZJA2NFUITA [2009-11-17 23:21:45 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ZNXMW8S3Z8 [2009-11-17 23:20:32 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ZDLALDQPP4 [2009-11-17 23:19:46 | 00,000,000 | —D | C] – C:\WINDOWS\System32\YM29FZHQ0K [2009-11-17 23:18:59 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Y7GQNC0XCE [2009-11-17 23:17:52 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Y7XJKBNXLY [2009-11-17 23:17:42 | 00,000,000 | —D | C] – C:\WINDOWS\System32\YXG6E4PTJU [2009-11-17 23:16:17 | 00,000,000 | —D | C] – C:\WINDOWS\System32\YQK1CTJH7Z [2009-11-17 23:14:53 | 00,000,000 | —D | C] – C:\WINDOWS\System32\X6SCWRJ0VQ [2009-11-17 23:13:31 | 00,000,000 | —D | C] – C:\WINDOWS\System32\XLMVE1U82X [2009-11-17 23:12:10 | 00,000,000 | —D | C] – C:\WINDOWS\System32\X1GDWC5H94 [2009-11-17 23:10:49 | 00,000,000 | —D | C] – C:\WINDOWS\System32\WGBWEMGPFB [2009-11-17 23:09:20 | 00,000,000 | —D | C] – C:\WINDOWS\System32\W9SJEY0NL1 [2009-11-17 23:08:07 | 00,000,000 | —D | C] – C:\WINDOWS\System32\WBZXE726TQ [2009-11-17 23:07:02 | 00,000,000 | —D | C] – C:\WINDOWS\System32\WO0GNBT2J3 [2009-11-17 23:05:53 | 00,000,000 | —D | C] – C:\WINDOWS\System32\VDXJ85C5AV [2009-11-17 23:05:30 | 00,000,000 | —D | C] – C:\WINDOWS\System32\VTENZE67O6 [2009-11-17 23:03:29 | 00,000,000 | —D | C] – C:\WINDOWS\System32\VTW1LSK372 [2009-11-17 23:02:44 | 00,000,000 | —D | C] – C:\WINDOWS\System32\V1C0FEB4JI [2009-11-17 23:01:58 | 00,000,000 | —D | C] – C:\WINDOWS\System32\VATY9015VY [2009-11-17 23:01:50 | 00,000,000 | —D | C] – C:\WINDOWS\System32\V0DM4S21TU [2009-11-17 22:57:25 | 00,000,000 | —D | C] – C:\WINDOWS\System32\U3W0P1WPAK [2009-11-17 22:41:48 | 00,000,000 | —D | C] – C:\WINDOWS\System32\QQ2XRRWF5C [2009-11-17 19:29:55 | 00,000,000 | —D | C] – C:\WINDOWS\System32\LYMRDCJQT3 [2009-11-17 19:27:17 | 00,000,000 | —D | C] – C:\WINDOWS\System32\K4HQMEJU7Q [2009-11-22 14:37:20 | 00,000,000 | ---- | M] () – C:\WINDOWS\System32\setuplb.exe [2009-11-22 14:37:17 | 00,000,000 | ---- | M] () – C:\WINDOWS\System32\tcpsov67.exe [2009-11-22 14:37:16 | 00,000,000 | ---- | M] () – C:\WINDOWS\System32\tcpsov66.exe [2009-11-22 14:37:16 | 00,000,000 | ---- | M] () – C:\WINDOWS\System32\tcpsov65.exe [2009-11-22 14:37:16 | 00,000,000 | ---- | M] () – C:\WINDOWS\System32\tcpsov64.exe [2009-11-22 14:37:15 | 00,000,000 | ---- | M] () – C:\WINDOWS\System32\tcpsov63.exe [2009-11-22 14:37:14 | 00,000,000 | ---- | M] () – C:\WINDOWS\System32\tcpsov62.exe [2009-11-22 14:37:14 | 00,000,000 | ---- | M] () – C:\WINDOWS\System32\tcpsov61.exe :Files C:\WINDOWS\System32\CLI775GM2R C:\WINDOWS\System32\NDKS0WUONV C:\WINDOWS\System32\M8GTQ5AKIA C:\WINDOWS\System32\L611DMGZUY C:\WINDOWS\System32\xxnnez.key C:\WINDOWS\tcpser6.exe C:\WINDOWS\System32\winoer.dat C:\WINDOWS\System32\ltdrunsrv.dll :Services “Windows Help File” WidsanHeldasp32 NesSrv hyhyx htdhg hrhgres gsh ggtfs ggt gdh fe faes dh cldbtdh bgg af A9E053AA :Reg [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager] “BootExecute”=hex(7):61,00,75,00,74,00,6f,00,63,00,68,00,65,00,63,00,6b,00,20,\ 00,61,00,75,00,74,00,6f,00,63,00,68,00,6b,00,20,00,2a,00,00,00,00,00 [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] “AppInit_DLLs”="" :Commands [emptytemp] [Reboot]