From: Cuffy10@xxxxxxx regfile\shell\open\command I just tried it in Google and got 1360 hits. You have a worm. http://www.google.com/search?hl=en&ie=ISO-8859-1&q=regfile%5Cshell%5Copen%5Ccommand&btnG=Google+Search __________________________________________ I D\L the tool, ran it. It put a word pad icon on my desk top. I opened it. It reads The default value of the registry key "SOFTWARE\Classes\regfile\shell\open\command" is set to "regedit.exe "%1"". W32.Swen.A@mm has not been found on your computer. That is what is there now. But AdAware still finds it as a possable threat. It reads regfile\shell\open\command "" I am scanning on custom. I searched for this file + AdAware. I only found a post from Richard at TTT archives. Richard do you still find this file when you run AdAware? I feel like I did\do have the virus. Juanita ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.583 / Virus Database: 369 - Release Date: 2/10/04