[RayShine]

Hi,
My machine is now clean, but looking around in the registry I found a key called RUINS:

HKLM\Software\MicroSoft\Windows\CurrentVersion\RUINS

It contains some of the spyware files that I removed, such as:
CISVVc and RDSNDIN, but they are reversed, so the values are:
CVVSIC and NIDNSDR.

There are also a few other filenames I never saw before.

Does anyone know if this was done by the spyware, or by Ewido?

Thanks,

RayShine