I always thought I practiced "safe computing", never opening unexpected email attachments, always installing Windows updates as they were installed, using TrendMicro's latest, and doing most browsing using Firefox. My machine is running XP 32 bit. Friday I was writing a post to a web Forum I had visited many times in the past, when for the first time TrendMicro popped up a window indicating it had blocked a .tmp file. Maybe a minute later before I had posted to the web Forum, Firefox suddenly went away. I closed the other programs I had running and shut down the PC. When I restarted the PC, I got what looked like a Windows warning message that my hard drive was failing and asking to run a check. Since my hard drive had actually failed about a month ago and been replaced by Dell, I thought maybe the new drive had also failed. I hit the OK button and it ran a scan claiming it found all sorts of things wrong including bad memory. That did not sound right to me. When it told me that to fix the problems would requiring purchasing a program, I knew I had been infected. Then I noticed the program name was System Check. I shut down, then started back up in safe mode. I found that Trend Micro would not run. I shut down and started in Safe Mode with Networking, and found IE, Firefox, and Opera (the 3 browsers I had installed) would not run. On a different machine I downloaded from TrendMicro their RescueDisk, which claimed my PC was clean. I downloaded HouseCallLauncher, but it could not reach the Internet. I downloaded RootkitBuster_v5_1050 but it would not run. Figuring I needed a clean boot CD, I did some searching and found PEBuilder and after several tries made a boot CD with HouseCallLauncher and RootkitBuster_v5_1050 on it. This made no difference, and HouseCallLauncher still could not reach the Internet and RootkitBuster_v5_1050 would not run. I then downloaded Microsoft Malicious Software Remover, put it on a USB key, booted into Safe mode, and ran both the quick and full checks both of which said my PC was clean. Meanwhile I found and downloaded Kaspersky Rescue Disk 10 and burned a CD. This boots into Linux and the quick check found and removed a Rootkit. The full check did not find anything else. At the end of the check it said there was an update available (from today) and I downloaded that. The quick check found another Rootkit, and the full check found and deleted or quarantined 5 other items. It then claimed my PC was now cleaned. However when I told it to shut down, the machine hung and never shut down. I had to force a power down. With great hope I rebooted from the hard drive in normal mode. It appeared to boot correctly, but I had a blank desktop (blue background) with no icons. The right side of the Start menu was blank, but the left side was there and so was the program menu. In the program menu was a System Check group which I stayed away from. Web browsers could reach the Internet. It was at this point my searching led me to this website. I found the 5 step instructions. Step 1 was to have a running anti-virus so I ran TrendMicro and found it had lost the purchase key. I re-entered the key, and Trend appeared to be running correctly. For step 2 I downloaded on the problem PC Malwarebytes and followed the instructions up to the point of doing a scan. All went well until I reached: Objects scanned: 45367 Objects detected: 0 Scan Type: Quick scan Time elapsed: 4 minute(s), 46 second(s) Currently scanning: C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Local Settings\Temporary Internet Files\Content.IE5\IONCA6YZ\26615fa.js The above was hand typed, since while Opera would run, I could not access this forum, so I am doing this on another PC. At that point it hung up and there has been no further progress for maybe an hour (I was not really timing). If the cursor is over the Malwarebytes window it changes into a hourglass. The only sign of activity is every once in a while a message pops up saying Malwarebytes has blocked access to a IP address. Since Malwarebytes is hung up, what should my next step be? Usually I can deal with most PC issues, but this problem has me stumped. Trying to post this was difficult since I appeared to have been logged out automatically while typing it. I have now logged back in and hope this works. Thanks for your help!