:OTL O3 - HKU\Karen_Hoerst_ON_C\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found. O4 - HKLM..\Run: [ruzuharas] C:\WINDOWS\System32\zesulalu.DLL File not found O4 - HKLM..\Run: [smss32.exe] C:\WINDOWS\SYSTEM32\smss32.exe () O4 - HKU\Karen_Hoerst_ON_C..\Run: [smss32.exe] C:\WINDOWS\SYSTEM32\smss32.exe () O4 - HKLM..\RunOnceEx: [] File not found O15 - HKLM\..Trusted Domains: buy-internet-security10.com ([]http in Trusted sites) O15 - HKU\Karen_Hoerst_ON_C\..Trusted Domains: buy-internet-security10.com ([]http in Trusted sites) O15 - HKU\Karen_Hoerst_ON_C\..Trusted Domains: is-soft-download.com ([]http in Trusted sites) O15 - HKU\Karen_Hoerst_ON_C\..Trusted Domains: is-software-download25.com ([]http in Trusted sites) O20 - AppInit_DLLs: (c:\windows\system32\jutepeso.dll) - C:\WINDOWS\System32\jutepeso.dll File not found O20 - AppInit_DLLs: (sakalimo.dll) - File not found O20 - AppInit_DLLs: (c:\windows\system32\fetotava.dll) - C:\WINDOWS\System32\fetotava.dll File not found O20 - AppInit_DLLs: (c:\windows\system32\zesulalu.dll) - C:\WINDOWS\System32\zesulalu.dll File not found O20 - HKLM Winlogon: Shell - (logon.exe) - C:\WINDOWS\System32\logon.exe () O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\winlogon32.exe) - C:\WINDOWS\SYSTEM32\winlogon32.exe () O21 - SSODL: mohunukik - {899b470c-d1b6-4368-9012-cbab748b9c2a} - C:\WINDOWS\System32\zesulalu.dll File not found O21 - SSODL: regitokeg - {d8689417-95dc-4b3a-9ef8-b8891d0480de} - C:\WINDOWS\System32\jutepeso.dll File not found O21 - SSODL: wejavisiz - {2c5b07f6-2f6b-45a0-8cd8-86e11d5643ce} - C:\WINDOWS\System32\fetotava.dll File not found O21 - SSODL: yomibuhab - {4605e982-fcdd-4f3e-8719-0a8ee681a1ec} - C:\WINDOWS\System32\vobozudu.dll File not found O22 - SharedTaskScheduler: {2c5b07f6-2f6b-45a0-8cd8-86e11d5643ce} - mujuzedij - C:\WINDOWS\System32\fetotava.dll File not found O22 - SharedTaskScheduler: {4605e982-fcdd-4f3e-8719-0a8ee681a1ec} - jugezatag - C:\WINDOWS\System32\vobozudu.dll File not found O22 - SharedTaskScheduler: {899b470c-d1b6-4368-9012-cbab748b9c2a} - jugezatag - C:\WINDOWS\System32\zesulalu.dll File not found O22 - SharedTaskScheduler: {d8689417-95dc-4b3a-9ef8-b8891d0480de} - mujuzedij - C:\WINDOWS\System32\jutepeso.dll File not found O33 - MountPoints2\{9408d53f-c284-11d9-b270-806d6172696f}\Shell - "" = AutoRun O33 - MountPoints2\{9408d53f-c284-11d9-b270-806d6172696f}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{9408d53f-c284-11d9-b270-806d6172696f}\Shell\AutoRun\command - "" = D:\DIR655.EXE -- File not found [2010/01/29 20:16:13 | 000,000,000 | ---D | C] -- C:\Program Files\InternetSecurity2010 [2099/01/01 12:00:00 | 000,061,952 | -HS- | M] () -- C:\WINDOWS\System32\vurotipe.dll [2010/01/30 03:20:28 | 000,006,456 | -H-- | M] () -- C:\WINDOWS\System32\hopotiju [2010/01/30 03:00:01 | 000,000,296 | ---- | M] () -- C:\WINDOWS\tasks\flogediy.job [2010/01/30 00:08:23 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\41.exe [2010/01/29 20:20:55 | 000,003,482 | ---- | M] () -- C:\WINDOWS\System32\18467.exe [2010/01/29 20:00:06 | 000,034,304 | ---- | M] () -- C:\WINDOWS\System32\helper32.dll [2010/01/29 19:59:11 | 000,039,424 | ---- | M] () -- C:\WINDOWS\System32\winlogon32.exe [2010/01/29 19:59:11 | 000,039,424 | ---- | M] () -- C:\WINDOWS\System32\smss32.exe [2010/01/07 19:10:24 | 000,050,180 | ---- | M] () -- C:\WINDOWS\System32\logon.exe :Files helper32.dll /isp