start message: can't find nstask32.exe

1st step , run a virus check from 1 of these . Online Virus check ( free ) http://housecall.antivirus.com/ http://www.coledata.com/virusalert.htm http://www.cybertechhelp.com/html/misc/av.php http://www.pandasoftware.es/activescan/activescan-com.asp http://www.ravantivirus.com/scan/ http://www.bitdefender.com/ http://www.stop-sign.com/?n=google_cure5 ========================================== I use free Avast with auto updates , which you can install after you clean up . http://www.avast.com/iavs4pro/setupeng.exe http://www.avast.com/i_idt_153.html http://www.all4you.dk/FreewareWorld/links.php?page=1&cat=24 http://www.tusafe.com/nonags/index.html Home edition is a full-featured antivirus package designed for home usage. Our company offers Home Edition free of charge, since in our opinion, it is possible to avoid global virus spreading by efficient prevention. However, many user are not able or do not want to pay for antivirus software. Avast! is the complete antivirus software package for DOS, Windows 3.x, Windows 9x/Me and Windows NT/ 2000/XP Antivirus kernel ========================================= http://helpdesk.uvic.ca/how-to/SUPPORT/virus/RPCTrojansAug2003.html Description: An Internet Relay Chat (IRC) worm that allows remote control of the affected PC by the worm's creator. Spreads via the DCOM RPC vulnerability and IRC. Symptoms: Unknown Technical details: Installs itself into the System32 folder under the main Windows folder as nstask32.exe or winlogin.exe. Adds entries to the registry so that the trojan is started whenever Windows starts. Modifies the registry so that the trojan always runs in connection with Windows Explorer. Includes its own IRC client. Creates a TFTP thread. Ports affected: TCP 113, TCP 4444, UDP 69. ============================================ You can protect your comp from Spyfiles by using these 3 programs . http://beam.to/spybotsd http://www.wilderssecurity.com/spywareblaster.html http://www.lsfileserv.com/index.html