Hm, wieso installiert das Programm sich ohne zu fragen in C:\Microsoms\WER1.0 ?? Wozu ist das nötig? Und ohne zu Frage --> sehr verdächtig!
http://virusscan.jotti.org/ findet zwar keinen Virus, aber:
Status:
MIGHT BE INFECTED/MALWARE (Sandbox emulation took a long time and/or runtime packers were found, this is suspicious. Normally programs aren't packed and don't force the sandbox into lengthy emulation. Do realize no scanner issued any warning, the file can very well be harmless. Caution is advised, however.)
Wo frisst sich das Programm sonst noch fest? Registry? Autostart??
rantanplan