The<y are "only"registry keys , the first one downloads you a Dialer. You can use the on demand Scanner to see the infected file.