eric the red -

As mentioned, sometimes a threat deletion is incomplete until a permanent registry is written. The completion normally happens when you restart or reboot your computer. You might try rebooting and then rerunning the AS scan just to see if that's what's going on.

The only instances I've seen of Norton (or other AV programs) giving repeated hits on the same infection is when a "reload" line has gotten into Registry/Start/Startup. Often it requires some additional steps to clean things up. If you're getting repeats it would be well to visit one of the AV sites and look for specific - and complete - removal procedures, using the name of the infection that's coming back. In some cases, your AV may be able to "inactivate" something that it can't completely remove. (This happens a lot if you don't log on as Administrator when running your AV scans in Win2K.)

Cleanup/removal programs specific to a few viral infections that require more than the basic AV program can do are available at most AV websites.

Jon -

There's no argument about the value of freeware, but you should only download it when you have gone to a site where you know that you can expect to get what you want. Obviously my reference to clicking on something that says it's free is in reference to stuff that pops up unexpectedly, or stuff you find on sites you don't know anything about. Crudware often imitates popular freeware programs to try to entice you into downloading theirs instead of the real thing. See comments above on phony Spybot lookalikes.

The additional warning would be that any popup that claims "You may be infected," or that proclaims you are about to suffer a disaster of any kind, is probably an invitation to download an infection. DON'T DO IT. If you think you might have an "infection" go to a site you know to be reliable and let them help you. Don't take advice from strangers (at least until you're properly introduced).

John