HKU\Justin\...\Run: [ciphSVCS] rundll32 "C:\Users\Justin\AppData\Local\Temp\dfrgexer.dll",CreateProcessNotify [x]
HKU\Justin\...\Run: [sbunkmgr] rundll32 "C:\Users\Justin\AppData\Local\Temp\dfrgexer64.dll",CreateProcessNotify [62976 2011-11-15] (Kaspersky Lab)
C:\Users\Justin\AppData\Local\Temp\dfrgexer.dll
C:\Users\Justin\AppData\Local\Temp\dfrgexer64.dll
2011-12-30 15:38 - 2011-12-30 15:35 - 0010056 __ASH C:\Users\Justin\AppData\Local\520hi15og85k11361861fucfnu5j045lhy3vl18100j
2011-12-30 15:38 - 2011-12-30 15:35 - 0010056 __ASH C:\Users\All Users\520hi15og85k11361861fucfnu5j045lhy3vl18100j
2011-12-30 15:38 - 2011-12-30 15:35 - 0010056 __ASH C:\ProgramData\520hi15og85k11361861fucfnu5j045lhy3vl18100j
TDL4: custom:26000022
CMD: bcdedit /enum all /v