The CD prompted me to connect to the internet and leave it on throughout the process. Part of the process was to update files. During the process, McAfee kicked in and notified me it has discovered, not one but two trojans, the latter was hiding by disguising itself as a Yahoo file. McAfee scanned the system clean and all evidence of the trojans have disappeared. (Yeah)

Bottom line, it looks like I got hit by a toolkit that diverted my attention from the previously unknown worm by making me focus on the one displayed on the screen.

Recommendation: Test by trying to delete all Yahoo files (or similar program), which can easily be re-installed. If you run into one that prompts you that you do not have the authority to remove the file from your own machine, then you have a toolkit in your computer, capable of providing outsiders with your personal data. Given the risk of have your personal data compromised, doing a complete system recovery dwarfs the loss of data that could occur in the process.

I deleted any “antimalware” registry entires and this:
C:\Users\joeuser\AppData\Roaming\62893492EA3AE5D679F3AC30BDD0E600\asp70vdviss.exe

Lavasoft removed:
================================================================================
Boot Cleaner
================================================================================
[~] Cleaning started at 2011-03-23 01:13
[~] Preparing to execute queued commands
[~] Deleting file: C:\Users\joeuser\AppData\Roaming\Adobe\plugs\kb27526329.exe
[~] Deleting file: C:\Users\joeuser\AppData\Roaming\Adobe\plugs\kb27526345.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup2174083024.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup3726984092.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\mracxsonwe.exe
[~] Finished processing queued commands

================================================================================
Boot Cleaner
================================================================================
[~] Cleaning started at 2011-03-23 01:22
[~] Preparing to execute queued commands
[~] Deleting file: c:\users\joeuser\appdata\local\atujagedeyo.dll
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\rcwoesnaxm.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup1193769784.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup1271658020.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup1996658024.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup2021207680.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup2418498448.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup2458618168.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup2617610136.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup2841854848.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup316791756.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup420759260.exe
[~] Deleting file: C:\Users\joeuser\AppData\Local\Temp\setup4234530132.exe
[~] Finished processing queued commands

–end–

The same tjing hapenned to my work computer 2 days ago. It completely crashed it and I had to send it off to IT to do a clone and data recovery.. Not cool!