It was in file with extension *.pdf.exe
Also was skipped trojan in autorun where was written "Syndicateer" and "costavate"
Also just found by Kaspersky Virus Removal Tool next virus in iexplorer cache - Worm.Win32. Vobfus.agpo and Trojan.Win32.Generic