KILL ALL::
File::
C:\WINDOWS\system32\lvxmayey.ini
C:\WINDOWS\system32\kbsrehar.exe
C:\WINDOWS\system32\yxafiris.dll
Folder::
C:\Documents and Settings\All Users\Application Data\qfwzijov
C:\Documents and Settings\All Users\Application Data\Less Knob Balm Bait
C:\Documents and Settings\All Users\Application Data\Bait cake roam slow
Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hcsagyrw"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"roam slow curb balm"=-
"burn dvd mags balm"=-
"5c53e714"=
File::
C:\WINDOWS\system32\lvxmayey.ini
C:\WINDOWS\system32\kbsrehar.exe
C:\WINDOWS\system32\yxafiris.dll
Folder::
C:\Documents and Settings\All Users\Application Data\qfwzijov
C:\Documents and Settings\All Users\Application Data\Less Knob Balm Bait
C:\Documents and Settings\All Users\Application Data\Bait cake roam slow
Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hcsagyrw"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"roam slow curb balm"=-
"burn dvd mags balm"=-
"5c53e714"=