it does work and the reason I wrote it the way I did is because winfixer creates a number of randomly generated DLLs, EXEs, etc. This way, when more are found, all you have to do is add them to the arrays and that's it. I also changed all of the "?" lines to actually write to a local log file so you can actually view the results. thanx for the feedback gents and I'll be looking at your spywarewarrior link for further information. Thanx again guys.