- Backdoor.Win32.Agent.cjgf -> c:\windows\apppatch\kxytwd.exe
- Trojan-Spy.Win32.Carberp.mwv -> c:\documents and settings\user\start menu\programs\startup\m7d6nzi6se.exe
- Trojan.Win32.Jorik.IRCbot.mlv -> c:\windows\system32\40.exe ( DrWEB: BackDoor.Ddoser.131 )