Dear Coldman, Pls note the following from other blogs but all in chinese: http://richardfx.blogspot.com/2009/08/opencandy.html You can guess the existence of such virus by noting the word of Open Candy, Audacity, Media Coder, Bittorent, all of which is suspected to have Open Candy. Also noted is the removal method. You can guess if you do not know Chinese words. Pls comment a bit. Thanks a lot.