Look here its says removed but after restart I get messege that im still infected with virus need to scan(fake alert) see... Malwarebytes' Anti-Malware 1.36 Database version: 2047 Executable location: C:\Program Files\Malwarebytes' Anti-Malware Database location: C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref Username: Administrator Windows folder: C:\WINDOWS System folder: C:\WINDOWS\system32 Root drive: C: Program Files: C:\Program Files Common Files: C:\Program Files\Common Files C:\Documents and Settings\Administrator\Desktop Desktop: C:\Documents and Settings\All Users\Desktop Desktop: C:\Documents and Settings\Default User\Desktop C:\Documents and Settings\Administrator\Start Menu Start Menu: C:\Documents and Settings\All Users\Start Menu Start Menu: C:\Documents and Settings\Default User\Start Menu Start Menu: C:\Documents and Settings\LocalService\Start Menu Start Menu: C:\Documents and Settings\All Users\Start Menu C:\Documents and Settings\Administrator User Root: C:\Documents and Settings\All Users User Root: C:\Documents and Settings\Default User User Root: C:\Documents and Settings\LocalService User Root: C:\Documents and Settings\NetworkService C:\Documents and Settings\Administrator\Favorites Favorite: C:\Documents and Settings\All Users\Favorites Favorite: C:\Documents and Settings\Default User\Favorites C:\Documents and Settings\Administrator\Application Data Application Data: C:\Documents and Settings\All Users\Application Data Application Data: C:\Documents and Settings\Default User\Application Data Application Data: C:\Documents and Settings\LocalService\Application Data Application Data: C:\Documents and Settings\NetworkService\Application Data Application Data: C:\Documents and Settings\All Users\Application Data C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch C:\Documents and Settings\Administrator\Local Settings\Temp Temporary Folder: C:\Documents and Settings\Default User\Local Settings\Temp Temporary Folder: C:\Documents and Settings\LocalService\Local Settings\Temp Temporary Folder: C:\Documents and Settings\NetworkService\Local Settings\Temp Temporary Folder: C:\WINDOWS\Temp