Registrekill:
HKCU\...\Winlogon: [Shell] explorer.exe
HKLM\...\Run: [mobilegeni daemon]
File:
C:\Documents and Settings\Kevin\Local Settings\Application Data\houiphcfm\qhkdcacshdw.exe
C:\Documents and Settings\Kevin\Local Settings\Application Data\microsoft\windows\temporary internet files\content.ie5\sadfc401\access[1].exe
C:\program files\antivirus 2009\av2009.exe
C:\Documents and Settings\Kevin\Application Data\skype.dat
C:\Documents and Settings\Kevin\Local Settings\Application Data\we4032.dll
C:\Program Files\Mobogenie\DaemonProcess.exe
Folder:
C:\Documents and Settings\Kevin\Local Settings\Application Data\\Conduit
C:\Documents and Settings\Kevin\Local Settings\Application Data\Conduit
C:\Documents and Settings\Kevin\Application Data\OpenCandy
C:\Documents and Settings\Kevin\Local Settings\Application Data\BabylonToolbar
C:\Documents and Settings\Kevin\Application Data\OfferBox
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
C:\Program Files\Nosibay
C:\Documents and Settings\Kevin\Local Settings\Application Data\PriceGong
C:\Users\Kevin\Documents\optimizer pro
C:\Program Files\PC Speed Maximizer
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
C:\Program Files\sweetpacks bundle uninstaller
C:\Documents and Settings\Kevin\Application Data\2B2CF94012581557DBFF5E801EB42A26
C:\programdata\{D398BDFF-BC85-4852-B26D-4CA820357DB2}
C:\Program Files\avhahngah_vjaebjkvgh