TOM-J-LAEL

Ok guys... MWB is consistenly finding c:\windows\system32\drivers\mrxdavv.sys and c:\windows\system32\kwave.sys I've ran combofix twice... HJT doesn't have anything fishy imho... Avenger says the files dont exist.... I've even deleted those two files using windows recovery console... Rootpeal doesn't see them... FSecure's blacklight doesn't see them but MWB still repeatedly finds them... are they false positives at this point?

honestly...doesn't every infection out there really have the potential to do what Conficker does? also, doesn't every worm already traverse the internet the same way? i mean, exploiting unpatched systems who are hooked straight into the internet, etc? where's the news exactly? you know?

If you look at device manager, and look at hidden/non plug and play devices. Is TDSSys.sys listed there? If so, you may want to disable. Reboot, the run MWB, etc.