svi00001.[exe,dll]

[skulcap]

I found svi00001.exe and svi00001.dll in my "Local Settings/Temp" dir. svi00001.exe was being run by explorer via some additions to the registry - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell="explorer.exe [excessive white space] c:\Documents and Settings\username\Local Settings\Temp\svi00001.exe"
There was another registry addition, but I dont remember where/what it was.

I have deleted the the .exe but attached a zip of the dll.

 

[tashi]

Thank you, I forwarded to detections.