- not-a-virus:RemoteAdmin.Win32.ROM.at -> c:\windows\system32\romwln.dll
- not-a-virus:RemoteAdmin.Win32.ROM.o -> c:\program files\litemanager pro - server\hookdrv.dll ( DrWEB: Program.RemoteAdmin.747 )
- Trojan-Banker.Win32.RTM.bey -> c:\programdata\91cf03b186e0\92cc00b285e3.dat