shifty trojan installing a mass of other malware and taunting the user to pay for the full version to get rid of them. I've even had a few users who were naive enough to pay for the software! Obviously, it just got worse from there. Users should be aware of how their AV software behaves in the event of a virus. Any alerts that do not replicate the same behavior should raise flags of suspicion. KevinD You are so correct! I am actually surprised that anyone without any training can run their Windows Computers and maintain them. I used to have an MCSE and still get confounded sometimes..:) Can you imagine someone with only a AOL..........LOL. The nefarious methods to infect a Windows Computer are so plentiful it amazes me any are still running without some malware. Nice article, too bad the people that really need it will never see it. "Most of the recent infections I've seen were caused by pop-ups that sneak behind suspicious websites. Most users, not knowing the difference, just panic and click the Fix Now button." If they would only press Cntl-Alt-Del and start Task Manager, End the I.E. Session that way, they would not get as many infections. If they click any other part of the "Your infected" screen, they will complete the infection. At least that what I have expiereinced. I dont start the cleaning process with an antivirus software. I go into safe mode, use Sysinternals process explorer and Sysinternals Autoruns. I