In addition to the subject message, you may be unable to open My Documents or My Computer.
This behavior could be the result of the Qcbar.dll library, an object that adds adult Web site links to the Internet Explorer Favorites menu.
To remove this infection:
1. Copy / Paste the following to a KillQcbar.reg file:
REGEDIT4
\[-HKEY_CLASSES_ROOT\Allch.IEObj\]
\[-HKEY_CLASSES_ROOT\Allch.IEObj.1\]
\[-HKEY_CLASSES_ROOT\CLSID\\{765E6B09-6832-4738-BDBE-25F226BA2AB0\}\]
\[-HKEY_CLASSES_ROOT\CLSID\\{D6FC35D1-04AB-4D40-94CF-2E5AE4D0F8D2\}\]
\[-HKEY_CLASSES_ROOT\Interface\\{ED7D1356-F7C2-4A27-A87C-C0DFEB3A628F\}\]
\[-HKEY_CLASSES_ROOT\Interface\\{242CA913-1637-4F74-9729-EA349AF3ECAC\}\]
\[-HKEY_CLASSES_ROOT\QcBar\]
\[-HKEY_CLASSES_ROOT\QcBar.1\]
\[-HKEY_CLASSES_ROOT\TypeLib\\{C02EE3A0-1881-419F-A5ED-737223463292\}\]
\[-HKEY_CLASSES_ROOT\TypeLib\\{60381D4B-8129-449A-A5F2-5417AD0571CC\}\]
\[-HKEY_CURRENT_USER\Software\QcBar\]
\[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\\{765E6B09-6832-4738-BDBE-25F226BA2AB0\}\]
\[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\]\]
"\{765E6B09-6832-4738-BDBE-25F226BA2AB0\}"=-
\[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{765E6B09-6832-4738-BDBE-25F226BA2AB0\}\]
2. Merge the KillQcbar.reg file with your registry, or run regedit /s KillQcbar.reg.
3. Restart Windows XP.
4. Copy / Paste the following to a KillQcbar.bat file:
pushd "%UserProfile%"
del "%SystemRoot%\Downloaded Program Files\allch.dll"
del "%SystemRoot%\Downloaded Program Files\QcBar.dll"
rd /s Favorites
rd /s "Adult Links"
rd /s AdultSearch
rd /s Sports
del /q "%UserProfile%\Start Menu\Programs\AccessoriesAdult Links Daily.lnk"
del /q "%UserProfile%\Desktop\Adult Links Daily.lnk"
del /q "%UserProfile%\Start Menu\Program Files\Adult Links Daily.lnk"
del /q "%UserProfile%\Start Menu\Adult Links Daily.lnk"
popd
5. Double-click the KillQcbar.bat file.
