Recently I have found myself removing a virus that installs shortcuts onto the desktop. They are (in no particular order) Download Games, Videos, Translator, and a fourth changing one, and this is a sign the virus is there. A check of processes in task manager, and you will see 2 iexplore.exe tasks running, both using about 600k of memory. Stop one, and it'll re appear. Now the thing that threw me was the files themselves. They are stored in two folders, one under the all users/application data and the other under the %user%/application data. The actual folder will normally be 3 or 4 4 letter random words like "bust move card" and inside it will be one exe file that you cannot delete. Using Hijack This, I deleted the file on reboot, and then deleted the shortcuts on the desktop and references in the registry. Then I found out what the virus was, and where it came from. The virus is a variant of an old nasty called LOP, and is installed alongside another virus called Swizzor when people download Messenger Plus and install the sponsor program. The 'sponsor' program is nothing more then spyware, and downloads these viruses after you have installed it. So now I can not only prove teenagers have it, I can show them where they got it, what it does, and I can now fix it.
The really nice thing is that since I've had the car the windscreen (or windshield for those stateside) has had marks like white paint in the corners under the glass and the glass itself is chipped in quite a few places, so now it'll all be clean and clear. So even a negative thing has positive results. Oh, and £50 all in before you ask. Not bad for a windscreen (or windshield for those stateside).