File Name: regedit -s win.dll

Description:
Added by the SEEKER.K TROJAN! Note that regedit is the legitimate Windows Registry Editor and shouldn't be deleted. The "win.dll" file is located in %Windir%

File Name: RUNDLL.EXE

Description:
Added by the SPYBOT-DN WORM! Note - this is NOT the Win9x/Me system file of the same name as described here

File Name: sysload.exe

Description:
Added by the DELF-EL TROJAN!

File Name: OnlineBackup.exe

Description:
Web-based file sharing and file storage for backup protection from SwapDrive, Inc - now acquired by Symantec and rebranded and released as Norton Online Backup

File Name: iexpl0res.exe

Description:
Added by the RBOT.AEX WORM!

File Name: wincms.exe

Description:
Added by the RBOT.CBR WORM!

File Name: winsys32.exe

Description:
Added by the DELF.CP BACKDOOR! Note that the entry under the Startup Item/Name field my be blank

File Name: AtHoc.exe

Description:
One-click activated browsing toolbar used by various web-sites. See here for more info

File Name: reminder.exe

Description:
Registration reminder for @loha@home E-mail utility

File Name: oaui.exe

Description:
System Tray access to and main user interface for the Online Armor range of security tools from Tall Emu Pty Ltd. The free version incorporates a firewall, limited startup manager, tamper protection and keylogger detection whilst paid versions add features such as a mail/web shield, phishing filter and anti-malware