trefotte.com – Server Downloader

I have a problem with some downloader and worm. I found my registry like this line:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\10162e0e

default:1DC59158E9FC47BCBF64FB0EB6E928BB&

red_srv:http://trefotte.com:80

red_srv_bckp:http://89.188.16.40:80

version:affid=152403&resid=mm2

I am so tiered too, everytime startup, the dll file of theme was loaded.

It worm (maybe) have 2 dll file that always downloaded into system32.

Do you have an idea to solve this problem ????

Thanks