rkill.exe stops running instances of the malware apps. eXplorer.exe and iExplorer.exe are the same file renamed incase malware is aware of rkill. Mbam-setup.exe is the Malwarebytes installer. FixExe.reg restores command shell registry key values after highjacking by malware. HJT.exe is version 2.0 of HighJack This. Gmer.zip contains a utility to find rootkits. DDS.scr creates a log of programs running on the system Defogger.exe disables CD emulation software Produkey is an app to list Microsoft installation key codes. Pstools is the command line toolset from MS/Sysinternals ProcessExplorer is a more robust taskmgr utility. ProcessMonitor is a utility that allows you to watch system processes in real time. Topic34773 is a pdf containing instructions pertaining to some of these utilities Generally, the scenario is: 1. Run rkill 2. Delete proxy server if necessary 3. Fix command shell registry values if necessary 4. Run malwarebytes