Here are the latest "ad infectious files" as of 15 April 2008
If you have these files on your machine..................
Tell tale signs include a baloon on the taskbar telling you that you have a virus. YOU DO, this IS the virus! You may have a new screen wallpaper giving you a similar message.
Be sure to check the root:\Windows and the System32 folders along with the user's LOCAL SETTINGS Temporary Internet files folder
Go into SAFE mode.
Use Regedit to remove any startup files in the registry RUN keys (remember there are 2 sets of RUN keys) and remove them.
Check the AutoExec.bat or AutoExec.cmd files at the root for possible auto start cmds. Remove them.
Search for one of these files, almost any one of them and get the date and time.
Do a search using the date and time for all EXE and DLL with this date. Delete them.
Run AdAware2007 and your AntiVirus Softwares
This is a real NASTY one to remove. If all else fails you will have to re-image or re-install the OS from scratch along with all of your programs. If you try and save your data, do not save any EXEs or DLLs along with the data especially if they carry a date and time any wheres close to the date and time you found in the first steps when identifying the bad files.
____________________________________________________
apphelp32.dll
asferror32.dll
asycfilt32.dll
athprxy32.dll
ati2dvaa32.dll
ati2dvag32.dll
audioserv.dll
ailodisc32.dll
avisynchex32.dll
aviwrap32.dll
2020search.dll
2020search2.dll
changerul32.dll
bjam.dll
cdsm32.dll
msa64chk.dll
bokja.exe
browserad.dll
smaparc.dll
msfkhe.dll
mssrv.exe
ntnut.exe
saiemod.ell
shdocpl.dll
stcloader.exe
voiceip.dll
winsb.dll
b138.exe
bokja.exe
lfn.exe
mrofinu32.exe
mrofinu72.exe
mssvr.exe
winself.exe
000080.exe
wmsdkns.exe
alsmb.exe
stcinstaller.exe
ms