I recently picked up the winupdates.exe virus. I followed the instructions Bobby Naini posted in the forum. It worked like a champ and the virus is gone. My only problem now is I get a box that pops up in a box that looks like the command prompt box I had to open when I was removing the virus. The title in the top of the window says c:\docume-1\rogerb-1\mc-110-1.exe. When I open the properties for the window it says c:\windows\system32\ntvdm.exe. Can anyone tell me what may be going on?