Hi everyone, I am having a REAL hard time trying to get rid of a dll file which nod32 keeps finding on startup Nod32 offers the opportunity to remove or rename the dll but even after selecting each option the adware comesback on the next bootup. Nod32 states there is adware.virtumonde application in the winlogin.exe file located in the c:\windows\win32 folder. So far I have used highjack this to find whcih dll files are causing the problem. The two troublesome files in the c:\windoes\win32 folder are wvUnolI.dd and iifcDwVL.dll. I have tried removing these two files using undll but to no avail. I believe the winlogin.exe file is just repropigating the two files. I have also tried removing thes files using vundofix.exe and trying to remove the file while in safe mode....nothing seems to work! I need advice / assistance on how to rid this adware file from my system without having to reinstall windows.