- HEUR:Trojan.Win32.Agent.gen -> c:\users\dasha\appdata\roaming\totalp~1\lsass.exe
- Trojan.Win32.Zbot.frh -> c:\totalcmd_it\language\nlb\svchost.exe
- Virus.Win32.Neshta.a -> c:\users\maiorova.e\windows\svchost.com ( BitDefender: Win32.Neshta.A, AVAST4: Win32:Crypt-SKC [Trj] )