HKLM\...\Run: [MSC] - "c:\Program Files\Microsoft Security Client\mssecex.exe" -hide -runkey <===== ATTENTION (File name is altered)
HKLM\...\RunOnce: [*Restore] - C:\Windows\system32\rstrui.exe /RUNONCE [296960 2010-11-20] (Microsoft Corporation)
HKU\Collyne\...\Run: [Google Update] - [x]
HKU\Collyne\...\Run: [dalatr] - "C:\Windows\System32\rundll32.exe" "C:\Users\Collyne\AppData\Roaming\dalatr.dll",IgnoreErrors <===== ATTENTION
HKU\Collyne\...\Run: [wepal] - "C:\Windows\System32\rundll32.exe" "C:\Users\Collyne\AppData\Roaming\wepal.dll",write_rows <===== ATTENTION
S4 *etadpug; "C:\Program Files (x86)\Google\Desktop\Install\{6a3f89d6-8357-78a8-7618-a6ddc863dde8}\ \...\???\{6a3f89d6-8357-78a8-7618-a6ddc863dde8}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)
S1 kzpvhoib; No ImagePath
2013-09-25 21:11 - 2013-09-25 21:11 - 00389120 _____ (Soft Systems) C:\Users\Collyne\AppData\Roaming\wepal.dll
2013-09-25 21:10 - 2013-09-25 21:11 - 00761856 _____ () C:\Users\Collyne\AppData\Roaming\dalatr.dll
C:\$Recycle.Bin\S-1-5-21-767980251-3588343150-394316217-1000\$6a3f89d6835778a87618a6ddc863dde8
C:\Users\Collyne\AppData\Local\Google\Desktop\Install
C:\Program Files (x86)\Google\Desktop\Install
2013-10-01 20:12 - 2012-03-28 07:41 - 00000000 ____D C:\Users\Collyne\Downloads\Adobe.Photoshop.CS5.1.Extended.v12.1.Keygen.CRACK.2011