Part of the winantivirus/smitfraud family installs (generally ) the following additional files

winavxxx.exe
printer.exe
autorun.exe
system.exe

I believe Trend call it TROJ_SMALL.ZY