If you are finding that numerous programs are running from the llssoft folder on your computer, then you are infected with the s5Mark infection. When installed, the %LocalAppData%llssoft folder will be created that contains a subfolder named winvmx. This folder contains an ad clicking Trojan that makes unwanted connections to remote sites.
This article was published first at Remove the Llssoft Adware & Trojans
Source: Bleeping Virus