VBShower has attempted to complicate forensic analysis by deleting all the files contained in "%APPDATA%\..\Local\Temporary Internet Files\Content.Word" and "%APPDATA%\..\Local Settings\Temporary Internet Files\Content.Word\".