next and last positive:

c:\windows\system32\IEDFix.exe

File: IEDFix.exe
Status:
INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5: 799a9ea3ffb220780ae3d3c11b08d067
Packers detected:
PE_PATCH.UPX, UPX

A-Squared
Found Hoax.Win32.Renos.vaoz!A2
AntiVir
Found nothing
ArcaVir
Found Trojan.Packed.Cryptexe