Originally Posted by fazstp

Second question: While disinfecting a friends Windows laptop I came across a number of registry entries under a section called "Image File Execution Options" with a whole heap of applications all seemingly pointing to the same target. My question is can I just delete all these entries or could some of them be legitimate? I found one in there that I removed because it prevented launching the GUI console for Microsoft Security Essentials. I just don't know whether there is a legitimate reason for all the other entries or if they were all created by the virus.