Trying to fix a friends computer. Spybot showed 85 entries. I have removed them all except for three that won't see to go away...FRAUD.XPAntivirus, Microsoft WindowsSecurityCenter_disbales, and Win32.Winlagon.co. The Security Center may be okay as he has Norton installed. In addition IE and Firefox crashe whenever it is started on a problem with a C++ library. Can someone hlp me clean try clean up the machine.

You want to be in the Virus forum, not here. Who in their right mind would ever need more than 640K of RAM!? Bill Gates, 1981

Okay Thanks.

It won't let me post in the other forum. It keeps telling me it is a duplicate post.

According to info I found, IF AND ONLY IF there is NO space between XP and Antivirus in FRAUD.XPAntivirus, SpyBot S&D should get rid of that, if it's been updated - has it?. What location is SpyBot finding them in? If they're ONLY in C:\System Volume Information\_restore{........... they're ONLY in the Sysytem Restore restore points - they cannot infect or re-infect the computer, unless you load the infected restore points yourself!. ONLY if there are no symptoms anymore, turn off System Restore to get rid of them. DO NOT turn off System Restore yet if there are still symptoms. You may NEED to load an un-infected restore point later. Any malware found in the restore points cannot infect or re-infect the computer, unless you load the infected restore points yourself!. .......... "In addition IE and Firefox crashe whenever it is started on a problem with a C++ library." That probably has nothing to do with malware. We need the EXACT error message. If there any Details, quote that too. ......... I find nothing when I search with: Microsoft WindowsSecurityCenter_disbales or Microsoft WindowsSecurityCenter_disables or Win32.Winlagon.co Quote the EXACT name - check you spelling -if it's got spaces or underlines or whatever between the words include them - if it doesn't do not!

"he has Norton installed" Dump that bloated piece of crap & replace it with something decent.