I am not a person to just jump in and start a new thread. I usually do a lot of reading and find my answers before asking for help. But I can't find an answer and I NEED HELP! Background: I know quite a bit about computers. So usual terminology I do understand. I am careful about what I download but somehow this one got past me. Problem: I was opening what I thought was an mp3 and when I went to open the file a command box opened then closed. I knew right away something was bad but NOD did not say anything at all. Within seconds everything slowed down A ALOT. Then IE windows started popping up for various spy ware products saying "is your system running slower than usual? Download our spyware program, etc". My MS warning window in the tray popped up saying my automatic updates was turned off and when I click to turn it back on I get an IE opoup that says download our spyware software. If I go into control panel and click system, the auto updates is still on. I tried to install spyware doctor and AVAST (I read online that AVAST has fixed this problem where NOD could not) and nothing can be written to the registry. I go into regedit and click on permissions and all the boxes are greyed out and there is user called "restrcited" in there which I have never seen before. My system is so slow it is down to almost nothing. When I work on trying to fix things something keeps trying to open an IE window and connect to something (I already disconnected the computer from the internet) and it gives me the usual work online / try again message. It also disabled my system restore and when I try to re-enable it, it gives me an error and won't turn on. Fixes: I downloaded AVAST scanner to a flash drive and let that run 5 hours to the end and it found nothing. NOD32 said it found 2 files that were viruses but my choice was limited to "leave it". Remove and quaratine were both greyed out. Adaware found 2 files that it removed but no luck. I tried to install other programs and I was told that I didn't have permission to install the files. See registry permissions above. I immediately disconnected this computer from the internet and all network connections when I saw the slow down within minutes. I have the IP address of the page it is trying to connect to and the web site name of a few of the programs this thing is trying to sell. They are at my office though. Of all the searches I have done, I only found a post that AVAST will get rid of this but that didn't happen. I don't feel it is a major security issue but more like a ploy for me to buy some anti spyware stuff to fix this problem. Any help would be great! I don't think NOD is weak but how did this get through without ANY signs? By the way, the free version of AVG didn't let it go through. FREE? I paid for NOD. So it caught it afterward, but way too late! Also, if I put the xp cd in and try a fix, will it fix the registry?