:OTL
O4 - HKCU..\Run: [pvtkvacxosr] C:\Users\Christy\AppData\Roaming\rrmquile_n_.exe (IncDev Tech.)
[2013/01/22 15:39:02 | 000,166,400 | ---- | C] (IncDev Tech.) -- C:\Users\Christy\AppData\Roaming\rrmquile_n_.exe
[2013/01/21 20:24:40 | 000,166,400 | ---- | C] (IncDev Tech.) -- C:\Users\Christy\AppData\Local\rrmquile_n_.exe
[2013/01/21 20:24:39 | 000,166,400 | ---- | C] (IncDev Tech.) -- C:\ProgramData\rrmquile_n_.exe
[2013/01/22 16:27:31 | 000,228,596 | ---- | M] () -- C:\ProgramData\1358889969.bdinstall.bin
[2013/01/22 15:35:56 | 000,087,861 | ---- | M] () -- C:\ProgramData\1358886873.bdinstall.bin
[2011/03/18 20:38:52 | 000,013,368 | -HS- | C] () -- C:\Users\Christy\AppData\Local\63m4a76h2d8fvd5653vcu6v5m1rpw6n8c604l1q840jn43x
[2011/03/18 20:38:52 | 000,013,368 | -HS- | C] () -- C:\ProgramData\63m4a76h2d8fvd5653vcu6v5m1rpw6n8c604l1q840jn43x
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:5D432CE3
:Files
C:\Program Files\Defender Pro
ipconfig /flushdns /c
:Commands
[EMPTYTEMP]
[RESETHOSTS]