My son managed to get the malware Winweb Security on his laptop. Ran a full scan with NIS 2009 and it reports the threat as the malware Antivirus 2008 and claims it was successfully removed. However, it is still there. I read the Antivirus 2008 removal procedure and followed the steps, but it did not remove it and the listed code to remove from the registry is not there. After searching for several hours, I think I found the culprit: 1109097497.exe in C:\documents and settings\allusers\application data\898265301 and 1109097497.exe-1016a428.pf in C:\windows\prefetch. 1109097497.exe was running in task manager, so I ended process and the Winweb Security closed, but I’m not quite sure how to safely and completely remove it. Since Winweb Security has been running, NIS 2009 has caught and removed W32.SillyFDC several times. A search of Norton and another reputable site has failed to reveal any info on this threat. Any suggestions would be appreciated.