I wonder why no one ever came back here and posted this link to a page from SAS's own malware files! https://www.superantispyware.com/malwarefiles/650709.EXE.html a I came across this trojan on my nephew's laptop today, when I went to do a quick cleanup on it. After looking up several threads from different sites I trust (Tom's Hardware being one of them) I see that most of the infected computers had that trojan with some others. And some of them report that their machines keep getting reinfected after cleaning. So either they're not really cleaning it in the first place, or they're reinfecting themselves by visiting the same site, or opening the same infected file they got it from (picture, song, game, screensaver prog, etc).