Using Windows to rename your files

Malicious Keys within the computer registry.

It was found by a friend of mine "J". It seams that the Spyware use this key to rename a file once the computer has been restarted

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session
Manager\PendingFileRenameOperations

More information can be found at:
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/regentry/58499.asp