HKU\Fred\...\Run: [ktbvN4UgAYlkyh] C:\Documents and Settings\All Users\Application Data\ktbvN4UgAYlkyh.exe [261120 2012-11-22] ()
2012-11-22 11:12 - 2012-11-22 11:18 - 00000368 ___AH C:\Documents and Settings\All Users\Application Data\ktbvN4UgAYlkyh
2012-11-22 11:12 - 2012-11-22 11:18 - 00000192 ___AH C:\Documents and Settings\All Users\Application Data\-ktbvN4UgAYlkyhr
2012-11-22 11:12 - 2012-11-22 11:12 - 00261120 ___AH C:\Documents and Settings\All Users\Application Data\ktbvN4UgAYlkyh.exe
2012-11-22 11:12 - 2012-11-22 11:12 - 00000835 ___AH C:\Documents and Settings\Fred\Desktop\File_Restore.lnk
2012-11-22 11:12 - 2012-11-22 11:12 - 00261120 ___AH C:\Documents and Settings\All Users\Application Data\ktbvN4UgAYlkyh.exe
2012-11-22 11:12 - 2012-11-22 11:12 - 00000168 ___AH C:\Documents and Settings\All Users\Application Data\-ktbvN4UgAYlkyh
2012-11-22 10:59 - 2012-11-22 11:01 - 00353792 ___AH C:\Documents and Settings\All Users\Application Data\OONSRJctTfM.exe