My son just downloaded the "Virus Remover2009" virus.

I use MCaffee virusScan Enterprise + AntiSpyware Enterprise. I'm a little disapointed that it missed this.

I ran NVT Malware removal tool twice. The first time it caught & dleted a file associated with the virus. (it only reported the one file) I then went throught some manual removal steps that I found. Kill process - Delete Registry Keys- Remove files, but didn't fand any of the listed files, keys etc. Did NVT remove them while only reporting the one? I didn't save the log.

I did this while logged to my sons desktop & all looked well. Then When I logged into my own desktop the Virus Remove 2009 appears to be gone but it seems to have left over the "Warning- You have a Security Problem" balloon...every 20 secs or so. It tries to open
hxxp://skfjkhcdcsh.com/?uid=584674c7f0d163af557bef4ae8116c378c27b0bc&os=513&par=bal (I changed the tt to xx) but can't find it.

I read another post here similar & I'll run the 8 step program & report back with some logs.

Any help would be greatly appreciated.