Possibly Afcore Variant: O4 - HKLM..\RunOnce: [*bybdzzl] rundll32 C:\WINDOWS\System32:bybdzzl.dll,Init 1
If you are able to find the file test it here: http://www.kaspersky.com/remoteviruschk.html