hi there… I hope I successfully removed the malware the riyocodec installer delivers by following your instructions. you have a very clear subscription of what to do and that is helpful like nothing else in such situations. I'm a first timer on this site but could find everything needed on your site easy, so thanks again! first of all the fixwareout report: Username "Eze" - 18.01.2008 14:36:26 [Fixwareout edited 9/01/2007] ~~~~~ Prerun check HKLM\SOFTWARE\~\Winlogon\ "System"="kdmxs.exe" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters "nameserver"="85.255.116.152 85.255.112.19"