Hi Omid,

your suggestion came back with one of them as a trojan. Note I just changed the .dll to .dilla for now but at least it still checked all the files

Folders Infected:
c:\program files\relevantknowledge (Spyware.MarketScore) → No action taken.
c:\program files\relevantknowledge\components (Spyware.MarketScore) → No action taken.

Files Infected:
c:\documents and settings\admin\local settings\temp\v9dd5ips.exe (Trojan.Hiloti) → No action taken.
c:\WINDOWS\newm20.dilla (Trojan.Hiloti) → No action taken.
c:\documents and settings\admin\local settings\Temp\0.6343254182863006.exe (Trojan.Dropper) → No action taken.