Well spent most of last night reloading the wifes laptop and our home desktop. Seems that the wife brought home this little present on her laptop and when she had problems with it, she put her USB thumbdrive into our desktop and infected it too! Norton corporate edition that she had on her laptop detected it but couldn't remove it and AVG did exactly the same. It is a good one as it stopped most all applications from launching including REGEDIT and asked what program you wanted to open almost everything with even if it was a program. Good thing I had base images for both of them and the wife actually had all her files loaded on a thumbdrive that I was able to disinfect! Luckily our desktop data was backed up on a external hard drive and it also was clean! Wouldn't you just love to catch these guys and give them a piece of your mind!

Mornin Rockbanger "Rideaholic"
What was the name of the lil pest? Sometimes one will get into your system restore and you have to turn that off. reboot. then run your anti virus to remove it, then turn the system restore back on and reboot again.

It was trying to sell you WinAntivus Pro but it was actually the virus. It looked real official, however it refused to go away or let you take steps to make it go away. I don't know what all the little woman tried to do before I got home, but both were hosed when I got there and after trying a few things unsucessfully, I reimaged them both! I also saw a file called spools.exe that kept reappearing and it was on her thumbdrives, so I assumed it was up to no good and wiped it too!

Give this a try

http://www.winantivirus-removal.com.removal-instruction...ntiVirusPro2007.html

Good Stuff YnotAZ! I'll have to try that when I get home today to ensure that none of our other computers are infected. Not sure how it happened, but it would not allow me to even execute system restore in safe mode or even get into the registry, so it was wiped and reloaded.

YnotAZ
Good info, I saved it to my virus folder.

Rockbanger "Rideaholic"
Glad to hear you have it under control. There are a few out there that will write to the spool.exe file and do some real damage,
http://searchg.symantec.com/search?as_sitesearch=www.sy....38.118.147&x=8&st=1
http://www.symantec.com/security_response/writeup.jsp?d...2816-0445-99&tabid=2