[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{e98ebf44-51c0-11dd -9448-806d6172696f}]
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL resycled\boot.com c:
\Shell\Open\command - "resycled\boot

*Newly Created Service* - PROCEXP90
.
Obsah adresáře 'Naplánované úlohy'

2008-12-22 c:\windows\Tasks\At1.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At10.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At11.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At12.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At13.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At14.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At15.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At16.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At17.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At18.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At19.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At2.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]