My earlier thread asking for help on this subject was locked because I supposedly got help in the Avira forum. While they suggested some testing, I was given a different suggestion here -- to run GMER and post the result. So here is the result. I forgot to disconnect from wireless connection to router to the Net when I first scanned and got a longer log, if you need it I have it. I then disconnected from the network and scanned again and got only the following: .text c:\windows\system 32\drivers\nvlddmkm.sys which seems to be a NVidia video driver (Incidentally, I ran GMER on another, XP64 laptop, and except for Services, Registry and Files all other options were greyed out and uncheckable. Any idea why? On the potentially infected computer with Vista all the options were active and checked.) Thanks. ========================================================