Foro de LeThe Online y Joshua Marius

Fue eliminado facilmente con Malwarebytes Antimalware cual encontro lo siguiente:

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\shell (Trojan.Agent)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\forceclassiccontrolpanel (Hijack.ControlPanelStyle)

Files Infected:
C:\Documents and Settings\Juan Cordoba\Application Data\hotfix.exe (Trojan.FakeAlert)
C:\Documents and Settings\Guess\My Documents\downloads\MyFunCardsSetup2.3.64.2.ZUfox000.exe (Adware.MyWebSearch)
C:\Documents and Settings\Guess\My Documents\downloads\PopularScreenSavers.exe (PUP.FunWebProducts)
C:\Documents and Settings\Juan Cordoba\Local Settings\Temp\0.8252381740563968.exe (Trojan.FakeAlert)

Algunos mensajes:
AntiSpy Safeguard is performing a full scan of your system. Please be patient, the process can take several minutes.

A mi padre le agarro uno de esos falsos antivirus/antispyware: Security Tool y lo solucione fácilmente borrando el ejecutable en modo seguro.