Messenger's name is msnmsgr.exe, that one sounds really suspicious.