A new Files Secure trojan is present. Below is the files and registry entries it creates. This trojan hijacks your search engine hits and recommends you purchase Files Secure. Removal instructions below.

C:\WINDOWS\winsurf.dll

HKLM\SOFTWARE\Classes\AppID\{1F91C786-BBA0-41D2-8B3D-B88242677BAC}
HKLM\SOFTWARE\Classes\AppID\winsurf.dll
HKLM\SOFTWARE\Classes\winsurf.AVideo
HKLM\SOFTWARE\Classes\CLSID\{1F91C786-BBA0-41D2-8B3D-B88242677BAC}
HKLM\SOFTWARE\Classes\Interface\{D263B532-C528-49E5-8BB6-80FA67332C9A}
HKLM\SOFTWARE\Classes\TypeLib\{7165223D-D2C9-422B-8126-411B11842B8B}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F91C786-BBA0-41D2-8B3D-B88242677BAC}

We have provided removal instructions for anybody unfortunate to have been infected by this trojan or Files Secure.

Removal instructions for Files Secure