I should also mention, it says URL:Mal and it says C:\Windows\explorer.exe on most of them.