A friend's computer seemed to be infected with some really bad malware. The main infection appeared to be a new Vundo variant rootkit. It apparently infected his system last week from a web based email file that he mistakingly opened. His system was running CA AV (w/ definitions updated but it is a several year old version of the program), CA Pestpatrol, Spybot S&D v1.4x, Spywareblaster 3.5.x, AVG Antispyware (current free version), Windows Defender, ZA free v6.1.x.. CA AV and Pestpatrol detected the main Vundo infection but had not blocked its installation. Spybot S&D detected many of the infections and appeared to remove them and partially cripple some of them but the main infection still seemed active after a system reboot. During this time ZA free was continuously detecting and blocking from accessing the "Trusted Zone" the numerous "tmp...exe named" virus executable files that the virus was continuously generating. From safe mode I ran online virus and anti-spyware scans including ESET AV (online version only) and the main infection was detected and a reboot was required. Although the virus was seriously crippled the Vundo variant still seemed partially active. I downloaded SAS (SuperAntiSpyware) free version on a different (non-infected) computer and was able to install it from a CD-R in normal Windows mode. After installing the latest updates I ran the scan and SAS free effectively detected and apparently removed all of the remaining Vundo variants as well as several other Trojans, Adware, malware, tracking cookies, etc.. (157 total items removed). I noticed that most of the removed threats had just recently been added to the SAS detection databases from 5/21 to 5/30. All these malware items were found by SAS even after I had ran at least six different other programs and online scans in Windows safe mode. Finally after another reboot the system appeared to be running normal. There were a few startup entries with an invalid path that had to be disabled (using msconfig and then by editing the registry entries). I disabled the Windows system restore to help eliminate the chance of re-infection from backed up files. I ran several more various online scans and no more traces of the infections were found. I wanted to give a big thumbs up to SAS and its high level of effectiveness at removing these threats. After this experience my friend purchased the SAS Pro subscription. SAS displayed one of the most impressive performances in recent memory that I have seen by an anti-virus, anti-spyware, or anti-malware application! Thanks to the SAS team for the prompt updates and continued development of this excellent security software!