Scanning for multiple specific files in the same directory?

[Taylor_Pilewski]

I'm looking for the following files.

svchosts.exe
taskmon.exe
rundll.exe
service.exe
sound.exe
upnpsvc.exe
lsas.exe
logon.exe
helper.exe
event.exe
dumpreport.exe
msiexeca.exe

They are all located in c:\documents and settings\username\application data

Would this be how I add them to the LS GUI? (attached picture)

I would then need to run a report on the files located.

[Hemoco]

You can't use %documents and settings% you need to use c:\documents and settings\

Maybe it would be better to look at which registry keys are added by the virus.
Maybe you only need to find one HKEY_LOCAL_MACHINE key.

[Taylor_Pilewski]

These are files associated with a nasty virus that is propagating my network right now, so any help I could get on this would be greatly appreciated.

Thanks fellas.

[Taylor_Pilewski]

Ok,

I've changed it to All Users because that's where the files can reside.

Does this look ok?

If so how do I make a report out of this?

[Hemoco]

You will need to specify the real username instead of "username"

There is no parameter for this because most lileky there are multiple profiles for different users on each computer.