process: Explorer.exe (terminated)
process: IEXPLORE.EXE (terminated)
process: IEXPLORE.EXE (terminated)

registry: HKLM\SOFTWARE\CLASSES\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InProcServer32: (Default) (value set to "WEBCHECK.DLL")


The scanning procedure was cancelled.

W32.Novarg.A@mm has not been found on your computer, but the scan
was cancelled before it finished. The virus may still be present on the machine.