HKU\CT\...\Run: [faaeffbeaadct] "C:\ProgramData\faaeffbeaadct.exe" [83936 2012-06-09] ()
HKLM\...\InprocServer32: [Default-wbemess] \\.\globalroot\systemroot\Installer\{34abdb91-f75e-6e4d-3541-138e74b7a4fe}\n. ATTENTION! ====> ZeroAccess
2012-06-14 15:31 - 2012-06-14 15:31 - 00434176 ____A C:\Users\CT\AppData\Local\wqmrvpmcgn.exe
C:\Windows\Installer\{34abdb91-f75e-6e4d-3541-138e74b7a4fe}
C:\Users\CT\AppData\Local\{34abdb91-f75e-6e4d-3541-138e74b7a4fe}
C:\Windows\assembly\GAC_32\Desktop.ini
C:\Windows\assembly\GAC_64\Desktop.ini
TDL4: custom:26000022 <===== ATTENTION!