Have you tried this online scan? http://housecall.trendmicro.com they have found viruses that even Norton Anti-Virus does not even have. Good luck with your search!
-- Mike
Over the past week my computer has been behaving very strangely on occasion. It seems to "stall" and it takes an age to bring up a new window or open explorer or indeed anything. When I try to shut down the computer it wont shut down, the desktop just sort of greys slightly and hangs. I am running Windows 98SE and I have Nortons anti-virus which is set to auto update and does so several times a day, Zone Alarm Pro updated version, Pest patrol, mail Washer Pro and Cyber Scrub I really felt that I should have been protected but I am feeling that perhaps there is a 'worm' on my computer somehow. This is the message that I get sometimes from Zone Alarm or at least since the strange behaviour started.
Spooler Sub System Process is trying to use another program to connect to
the Internet or your local network.
"ZoneAlarm Pro is asking you whether to allow the connection. No breach in
your security has occurred. However, an Advanced Program alert may indicate
a potentially dangerous situation. Proceed with caution.
Inside the program alert
Alert property Alert property value Technical explanation
Program Name Spooler Sub System Process A program running on your computer,
which either attempted to send an IP packet over the Internet or is waiting
for an incoming packet.
Filename SPOOL32.EXE The filename of the program that ZoneAlarm Pro found on
your computer.
Program Version 4.10.1998 The version of Spooler Sub System Process running
on your computer.
Program Size 45056 The size of the program executable file in bytes.
Program MD5 db3bee092f0e90cf799d69f99c001dae The MD5 hash, or number, that
uniquely identifies the executable.
Date Modified Apr-23-1999 10:22:00 PM The date when SPOOL32.EXE was most
recently modified.
Connect Type Access This value can be either Access, which is an Internet
connection attempt by Spooler Sub System Process or Server, which indicates
that Spooler Sub System Process is waiting for connections coming in from
the Internet.
Remote Port 1148 The port Spooler Sub System Process is using on the remote
computer.
Remote IP Address 203.59.6.116 The IP address of the remote computer that
caused the alert.
Alert Date Mar-12-2004 03:50:00 PM PST The time when ZoneAlarm Pro detected
the alert on your computer.
ZoneAlarm Pro security enforcement at time of alert"
I did a search for the Spooler Sub system Process on Google and only two sites came up in the search one a tech Forum and the other sophos in both of these it said that the System file Wucrtupd.exe shows there is a worm W32tictona on my computer. I have that file and another called wuloader.exe in my system files. I can find no reference to this worm anywhere else!! can anyone shed some light on the mystery please as I dont want to go happily deleting system files for no reason.

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic