Hi,
I've found a program running in my memory named "windows:BoredCoders.pif", which I found in the net that it could be "Backdoor.Win32.Shark" trojan. I guess I got it from 3D screen saver installation today but Avast On-Access scanner was running too while I was installing the program. I still have its image as a file data stream at c:\Windows, if Avast team interests in the image, please email me.
By the way, I'm using avast v4.7 Professional on Windows XP SP2.
Ruxo