svuota C:\WINDOWS\Prefetch

esegui avenger e copia/incolla nella finestra:
files to delete:
C:\WINDOWS\klog.dat
C:\WINDOWS\vsnpstd.exe
C:\WINDOWS\vsnpstd .exe
C:\WINDOWS\system32\Command.HTM
C:\WINDOWS\system32\nerocheck.exe
C:\WINDOWS\system32\nerocheck .exe
C:\WINDOWS\system32\winsyser.exe
C:\WINDOWS\system32\winsyser .exe
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMTD.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMTE.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMT19.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMT1B.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMT1A.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMT7.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMT8.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMT9.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMTC.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMTB.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMTA.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMTF.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMT10.xml
C:\DOCUME~1\Licia\IMPOST~1\Temp\IMT11.xml

folders to delete:
c:\pluto

registry values to delete:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run | Windows Update
clicca su execute
posta il rapporto di avenger (c:\avenger) e una nuova scansione di systemscan (stavolta clicca su "unselect all" e seleziona solo la scansione "recent files")