That Bigmem.drv looks a bit mysterious, but it appears to an age-old file - Microsoft BIGMEM Virtual Device, it says. I know I've seen that one before on my own systems, and it should probably be a legit file. AVGBASE.VXD looks like the Win 9x guard for H+BEDV's AV, which she apparently had installed at some point. That should probably die. Then there's the Microsoft RMM Virtual Device of RMM.PDR. Not at all sure what that is, but the creation and modify dates look good. And it is mentioned in the Win ME folder listing at MS Knowledge Base. Those two under the VMM32 folder would appear legit as well, at first glance.