mettici solo questo:
Files to delete
C:\sys.exe
C:\WINDOWS\algsvr.exe
C:\WINDOWS\sys.exe
C:\WINDOWS\Help\winhelp.exe
C:\WINDOWS\security\discover.exe
C:\WINDOWS\system\infoman.exe
C:\WINDOWS\system32\expIorer.exe
C:\WINDOWS\system32\internat.exe
C:\WINDOWS\ZSSnp211.exe
C:\WINDOWS\Domino.exe
e fixa queste voci:
R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.exe
O4 - HKLM\..\Run: [Internet] C:\WINDOWS\system32\internat.exe
O4 - HKLM\..\Run: [Explorer] C:\WINDOWS\system32\expIorer.exe
O4 - HKLM\..\Run: [Host Info] C:\WINDOWS\system\infoman.exe

