I just did a scan with Sophos Anti-Rootkit on my computer and it found the following files:
C:\ProgramData\Norton\00000082\00000109\000003c4\c ltLMS1.dat
C:\ProgramData\Norton\00000082\00000109\000003c4\c ltLMS2.dat
C:\Windows\System32\config\SOFTWARE.LOG2
C:\Users\Andreas\AppData\Roaming\SecuROM\UserData\ ЃϵϳЅЂϿϽϯІχϯπρϴϱЄϱЃϵϳЅ
C:\Users\Andreas\AppData\Roaming\SecuROM\UserData\ ЃϵϳЅЂϿϽϯІχϯπρЂϻϵЉЃϵϳЅ
C:\ProgramData\Microsoft\RAC\Temp\sql7697.tmp
C:\ProgramData\Microsoft\RAC\Temp\sql7715.tmp
Not sure if I should clean them up or not.
It says "Removable: Yes (but clean up not recommended for this file)" on all 7.
last two are in a temp folder, safe to delete.
I would check up on the SOFTWARE.LOG2 file, but it looks safe to delete if its just a log.
top two seem to be something related to scans, probably safe too.
the SecuROM ones, I don't know what SecuROM is, so I am not sure.
I googled SecuROM and found out it's used for copy-protection on games, and the weird names are supposedly encrypted.
But ye, I'll delete the other files.
I think you can delete this stuff too, its called malware i got this too one week ago.. if you have win7 you can show your application data file with enabling the setting "show hided files"
(maybe its called something else like this).
i hope that will help ;)
greets Jewlz.
Portal Rockz!
And when you're dead , i will be still alive!