Part of the winantivirus/smitfraud family installs (generally ) the following additional files
winavxxx.exe printer.exe autorun.exe system.exe
I believe Trend call it TROJ_SMALL.ZY