OK! I am sorry to post a new thread but information I read regarding this kind of situation stated that each case is different and You can't do the same thing for 2 different users. I am having the exact same problem as described in this post: http://forums.majorgeeks.com/showthread.php?t=153887 My context: Brother contaminates home pc by either accepting a stupid file in MSN or by trying to install a game called "fable", not sure which is correct. The game was burned to a CD a few years back and each description I find of something similar goes back too, to 2003, 04, 05. How can a worm so old still have no removal application?! Is it a new version that's going round? Soon as my brother does it Norton 1000 windows flood the screen with scanning messages with warnings that 1000 messages have been blocked because they are recognized as spam. I discover that by turning ccApp.exe I can get Norton to shut up. Now I just want to get this worm killed and turn back Norton again! Can You help me? I would immensely appreciate it! As for the process I am no familiarized with the whole "debugging-through-forum" concept, but if You give me instructions I'll be happy to follow them. I have Hijackthis and know how to produce a logfile for Your examination. Is this the first step? Are the any more tools You want me to use? Thank You so much!