well avira found this: "Virus or unwanted program 'TR/Spy.7616186 [trojan]' detected in file 'C:\Documents and Settings\*******\Desktop\Windows_Movie_Maker_6.0_x6.exe. Action performed: Delete file"