malware remove tips

Check the registry: hkey_current_user\software\microsoft\windows\currentversion\runonce