I got it yesterday and it overwrited some system32 files, created a new dir system32/vchost with in vchost.exe (fake) and ....ocx (i do not remember) , launch vchost.exe (its) from the run of...