Several months ago my sister's friend Sharon sent her this Winbook V-series G330 to use before she bought her new laptop. After I did the "How to Protect yourself from Malware!" steps on the new laptop, I was looking at the Winbook to check out what it had on it. I did not expect to find any malware, but, of course (sigh), this Winbook computer has some too. On logging on there was a box for ErrorFix that said "You are not registered" and listed mutliple problems with numbers that added up to 144 items. There were buttons to Register and to Scan Again. At first I did not recognize this as malware and told my sister I would use CCleaner to fix those types of problems instead of that program I was unfamiliar with. This Winbook has just 224 MB RAM--must be 32 for video. I told my sister you guys would say there had to be a GB to run XP well. I saw Kaspersy Security Suite had expired in January 09. I also found an empty Symantec folder, so I imagine it had Norton at one time. My sister told me she had a wired cable modem earlier this year and that's how she got online with the Winbook. Now she has wireless AT&T DSL xTreme 6.0 and there is no wireless card with the Winbook, so I am doing everything offline with files copied on CDs. On running CCleaner there was 600-700 MB of stuff to remove. I ran SUPERAntispyware and found nothing. (Yes, it is out-of-date. It is the latest I can get as a download to copy to CD. I tried to get the updated definitions and add them in, but I couldn't get that to work.) Still not expecting anything, I ran Malwarebytes. A few minutes into the scan it showed 2 detections, then by the time it finished, 253! And most of those looked directly related to Rogue:ErrorFix. (MB is probably also out-of-date--sorry.) After having MB fix problems, I looked in Add or Remove Programs and ErrorFix was still listed. When I clicked Remove, Windows Installer opened and let me delete it. Today I ran ComboFix. It took 10-15 min after it ran to finally pop up the log. RootRepeal and MGTools ran without problems. Logs are attached. Thanks!