Lo guys.
I've just found disnisa.exe in my Mum's Laptop. It arrived Christmas Eve. I think it's the Storm Worm
Dunno where she got it, her email looksok on that day, so it must have been a website.
Merrychristmasdude(dot ) com is messing with people at the mo, and if you google disnisa.exe you'll find the cleverness behind it all. Multiple IP addresses for websites, hard to report.
Not sure that there is any updates yet, so try to keep clean.